Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136362e302f32342d3234203d3e203438393235.roa
File: 3138352e32392e3136362e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier: 1i/zcwG1baEGXdtGErsEuKjxBwvZfeMgSPUFMT3spew=
Subject key identifier: 7B:91:13:2E:62:29:5C:49:33:51:22:E9:AF:5C:EE:19:11:4B:8C:54
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 3E13772EA1D2F04B70B421999FB78086B143311F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136362e302f32342d3234203d3e203438393235.roa
Signing time: Sat 27 Sep 2025 14:55:07 +0000
ROA not before: Sat 27 Sep 2025 14:50:07 +0000
ROA not after: Sat 26 Sep 2026 14:55:07 +0000
asID: 48925
IP address blocks: 185.29.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:13:77:2e:a1:d2:f0:4b:70:b4:21:99:9f:b7:80:86:b1:43:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 27 14:50:07 2025 GMT
Not After : Sep 26 14:55:07 2026 GMT
Subject: CN=7B91132E62295C49335122E9AF5CEE19114B8C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:08:00:cc:84:77:2b:df:8d:fa:97:31:1d:36:
73:44:a1:15:cf:ed:76:dc:30:31:ed:f7:07:3a:dd:
03:a7:c3:21:d3:ce:5e:cd:62:0d:87:a7:28:4a:66:
e9:7f:1e:d3:dd:4c:02:72:76:f3:27:5a:5c:e5:47:
63:f4:32:d4:85:fc:1e:3c:11:15:e2:8b:3b:d0:42:
ed:be:97:74:c7:13:f3:d6:c4:8e:3b:1f:29:f4:bd:
c6:c3:5c:70:b0:98:3f:2e:32:3f:c0:8c:c6:8a:8e:
17:76:2f:e4:0a:42:bf:ff:e5:a2:0f:07:ce:12:6f:
8f:b3:b3:52:f1:cc:50:29:97:55:b1:66:05:08:9b:
c5:f7:d6:5d:61:98:07:23:2e:4a:fa:e5:f5:8e:c2:
04:56:e7:39:18:5c:a4:a7:95:42:e6:92:a2:f5:e1:
03:1e:25:70:5c:4f:b6:d9:3b:44:73:ca:a3:cd:77:
fd:98:48:b3:ed:1a:c5:7e:2e:ab:d7:d4:37:9b:17:
07:21:c9:87:0f:f2:9e:e2:b7:32:30:ad:b8:e0:41:
5e:cf:d2:53:40:d1:ea:b3:13:43:af:99:15:5c:d7:
72:db:08:5e:09:d5:28:22:4b:77:52:b1:7c:d2:9e:
7a:d5:cf:a3:2e:b2:7f:a5:76:be:95:f2:18:56:a6:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:91:13:2E:62:29:5C:49:33:51:22:E9:AF:5C:EE:19:11:4B:8C:54
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136362e302f32342d3234203d3e203438393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0e:e0:45:c1:02:a0:b2:6f:26:5f:42:4f:69:9a:e7:00:7f:
fc:d2:64:f9:7a:a7:2e:49:a5:69:7a:c0:6e:d4:2f:cf:7c:98:
7e:e2:d7:aa:7b:07:cb:58:45:fd:a3:92:2e:39:1e:f8:d1:f9:
81:50:00:2a:4c:fa:6b:3e:06:ef:48:a7:81:79:47:f4:b3:eb:
7f:6d:ac:10:fa:eb:49:29:0f:e6:47:c8:3f:84:da:54:6c:53:
28:f6:07:e7:2d:35:b7:e3:e3:d7:a0:96:71:6f:ca:83:96:05:
49:fb:47:81:39:53:5a:db:da:88:49:d3:16:31:c3:9d:c3:b1:
06:23:4f:30:cb:b5:d7:12:76:6a:cb:7b:79:cb:73:0d:22:35:
26:08:15:b7:21:dd:b6:cb:75:6e:bb:c7:80:b3:7c:73:1a:02:
58:f8:dd:19:dd:5f:9c:1d:64:73:ec:82:3c:83:14:1f:d9:47:
51:02:2f:48:5c:c7:dc:87:86:87:15:61:74:f2:c4:92:65:51:
38:ce:6f:2d:81:ff:c8:95:86:92:51:56:67:90:2b:07:28:fd:
97:0c:98:d2:60:7f:79:c0:98:42:f7:34:ac:7f:18:8d:a5:59:
10:42:35:b0:9b:e5:52:41:45:45:29:2b:93:35:21:6f:d8:86:
c0:e0:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:40 2025 by rpki-client