Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa
File: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (raw, json)
Hash identifier: T9Q1VqRTWLWUsHiQ8nGpX/B35ktvbCl8rYqsuD5dV38=
Subject key identifier: FD:23:68:DC:81:EF:56:E4:FE:C8:AB:27:3D:7B:51:6B:0C:89:97:FB
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 4356634B5A892A0819300218C6CBCFEB014E61C2
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa
Signing time: Fri 27 Jun 2025 20:54:11 +0000
ROA not before: Fri 27 Jun 2025 20:49:11 +0000
ROA not after: Fri 26 Jun 2026 20:54:11 +0000
asID: 210538
IP address blocks: 185.240.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:56:63:4b:5a:89:2a:08:19:30:02:18:c6:cb:cf:eb:01:4e:61:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jun 27 20:49:11 2025 GMT
Not After : Jun 26 20:54:11 2026 GMT
Subject: CN=FD2368DC81EF56E4FEC8AB273D7B516B0C8997FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:f1:42:e6:e1:36:f3:83:3d:3e:9b:b7:3d:
87:e1:ef:66:36:16:fa:ac:20:50:42:a1:ad:eb:b4:
36:e0:9c:2e:7a:54:7f:35:5e:fc:6d:dc:a9:e3:c8:
87:99:6f:cc:fb:5d:ce:d3:db:ca:63:60:a2:f5:16:
56:55:aa:61:98:1e:2e:94:f6:31:03:ee:17:37:19:
3f:62:da:41:31:5c:a8:eb:67:59:40:d0:ef:df:64:
40:0e:4b:c2:d8:fb:de:2c:58:a4:a0:ac:6a:dc:0a:
7e:20:8d:54:9e:e0:be:f3:5f:b4:04:8a:de:9e:a6:
a6:65:16:75:55:08:7e:75:a9:5e:28:45:03:d5:0c:
9d:43:73:8b:88:26:e2:63:eb:45:26:a1:cc:03:a6:
20:77:5d:80:22:c0:47:99:a0:cc:93:9d:25:e3:53:
b5:a6:fe:e0:75:1e:71:fd:a0:cc:f3:e0:d7:76:48:
4a:bf:7c:6a:d1:04:30:44:69:3c:34:64:46:dc:3a:
ff:0f:8f:9e:d5:f7:82:e2:af:73:e0:88:03:a6:be:
4a:5b:57:f6:f7:4f:e7:b5:fd:13:36:ec:53:70:8f:
02:45:18:cb:c4:4f:ac:cf:1b:2e:34:8d:f8:7e:b0:
6a:6a:4b:c2:e6:e6:54:d3:db:fe:d9:13:5e:f5:82:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:23:68:DC:81:EF:56:E4:FE:C8:AB:27:3D:7B:51:6B:0C:89:97:FB
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.104.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b0:09:9f:8c:15:3c:b5:57:6b:da:38:ff:02:f1:15:c9:5d:
4e:45:20:0a:64:99:82:9c:ec:c2:af:c6:de:3f:65:bc:06:bb:
c0:87:25:25:aa:99:da:db:c9:a2:ea:8d:fe:35:01:fe:35:db:
eb:f4:e0:88:ef:07:11:5b:8e:46:43:7a:73:25:e0:40:05:83:
2e:75:12:41:c8:aa:e1:83:a7:56:20:77:78:61:b0:61:63:b7:
55:99:fd:65:37:04:7c:8e:93:ba:eb:0b:56:3a:28:58:18:2f:
a2:a0:64:38:2e:68:eb:3c:19:71:b6:eb:cd:60:15:40:7b:d2:
d1:a0:f5:9b:1e:bb:8d:f1:eb:87:d4:41:0c:b7:4d:f0:0b:62:
a0:43:38:be:74:9b:78:50:e2:a6:ee:1a:60:5c:3b:63:01:08:
db:8a:9f:9e:49:f4:7a:df:5c:80:28:64:90:9d:b7:d8:fb:36:
22:be:55:b4:13:03:0c:07:26:43:ef:b2:bc:c5:cc:ac:e2:f8:
77:dc:38:a4:e1:99:c9:c2:83:8b:f2:6f:01:01:09:73:47:20:
b3:9c:ef:2d:c9:5e:b7:13:fb:ff:f5:ca:1c:ab:7a:5d:76:06:
2b:c1:fa:62:6e:cd:49:58:72:5e:07:f6:e2:3d:81:39:2a:de:
45:02:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:37:03 2025 by rpki-client