Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e2039333138.roa
File: 3134312e39382e34332e302f32342d3234203d3e2039333138.roa (raw, json)
Hash identifier: vFBdBlnnWQnqw/EQOfV9mi7/0u42NWKBiZsEOC5m9Es=
Subject key identifier: E5:23:A9:C0:98:1D:D3:D4:78:91:69:AB:29:79:46:80:41:4F:2F:C9
Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial: 10A4A36E1363738525B4A4DB5B3168FDD46F1CC3
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e2039333138.roa
Signing time: Sat 21 Jun 2025 20:08:22 +0000
ROA not before: Sat 21 Jun 2025 20:03:22 +0000
ROA not after: Sat 20 Jun 2026 20:08:22 +0000
asID: 9318
IP address blocks: 141.98.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a4:a3:6e:13:63:73:85:25:b4:a4:db:5b:31:68:fd:d4:6f:1c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Validity
Not Before: Jun 21 20:03:22 2025 GMT
Not After : Jun 20 20:08:22 2026 GMT
Subject: CN=E523A9C0981DD3D4789169AB29794680414F2FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:59:9f:a1:84:5b:52:b8:52:23:a4:55:14:
6c:4a:9c:b7:b5:e7:45:ae:24:44:95:0c:43:f1:8b:
49:44:1b:87:f7:3b:55:bf:86:e0:73:0c:b6:7d:0d:
4a:da:51:9f:63:90:c8:01:e8:8b:44:44:dc:d1:44:
07:aa:89:5a:fe:2a:e0:bc:36:63:98:c4:ca:c1:4d:
00:12:55:44:a1:1c:ff:28:4c:ae:ee:84:fe:6c:c9:
d1:1f:a9:eb:27:3b:61:8d:42:9f:4d:a8:b6:9d:7d:
3d:34:8b:01:f2:f5:d3:87:0b:cb:39:81:95:5d:9d:
b2:2c:fa:f7:7c:6a:15:05:ed:c0:d3:af:14:3e:ea:
1c:72:63:cf:7f:c2:41:b3:51:8a:04:5f:8e:da:9a:
9f:c4:71:6f:8f:58:f3:65:59:54:c4:19:d7:78:ff:
bc:15:ca:b5:6a:9d:d2:92:94:0d:0d:63:07:c4:d0:
51:e9:14:1e:5c:61:d9:2e:b9:f6:72:cc:db:2a:4d:
41:f8:9e:6c:eb:a0:b4:0e:de:0e:86:ff:4c:4f:89:
f8:14:8b:b0:03:62:34:f0:b8:1f:84:e2:eb:19:01:
84:1a:dd:a3:6e:e0:d7:b0:78:7b:7f:cc:6a:5d:50:
7f:86:a0:c6:30:59:e5:ac:a8:eb:9e:7c:e9:e0:65:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:23:A9:C0:98:1D:D3:D4:78:91:69:AB:29:79:46:80:41:4F:2F:C9
X509v3 Authority Key Identifier:
keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e2039333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a9:01:d2:b7:be:95:48:04:e5:a8:1e:2a:6e:87:2d:4a:d5:
fc:f5:9d:6c:c6:c3:c4:51:75:f1:10:c8:d5:ee:80:76:3a:df:
c0:77:b7:59:d4:a6:e3:4f:a0:f1:7d:51:57:ea:c5:08:b3:07:
d4:b1:3e:d5:41:93:1d:70:45:bb:bf:ac:b7:4f:83:d0:bf:d2:
76:fe:23:39:94:0a:3d:1d:7b:78:80:2b:b9:22:b9:2f:76:aa:
16:90:dc:61:dd:52:e8:66:f7:94:e8:0e:65:3b:c9:26:2d:bd:
10:d1:f7:1a:87:36:41:05:65:5d:6e:d0:91:f0:cd:b0:cf:6d:
3b:a5:1a:51:91:89:d8:00:3d:b2:34:1e:e6:14:1f:fc:51:3c:
89:33:4b:a4:d5:11:1c:d0:8d:a9:8c:33:13:8d:0d:d7:1c:9b:
f5:c8:7a:3d:82:ea:da:e0:cf:8a:39:55:23:30:5c:be:f6:bb:
aa:57:04:b8:60:d2:dc:f2:eb:90:f7:fb:ec:00:b1:69:a2:c1:
51:a2:74:3d:1b:94:5a:fa:7d:ef:ab:b2:fb:24:51:f3:e6:52:
92:e1:e9:34:71:0e:cb:4f:c6:64:a1:9a:c7:75:83:de:4a:1e:
99:0b:07:5c:f6:84:a2:7a:0a:67:e8:4b:99:1a:5d:8b:5d:67:
92:82:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:22:56 2025 by rpki-client