Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa
File: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (raw, json)
Hash identifier: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=
Subject key identifier: AD:9F:FC:EE:B6:1F:D6:68:1E:0C:CF:9E:C7:4D:BC:B2:04:25:D7:4C
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 0225B87E3C1F952EC563E381D6E7DBCB5AF9C001
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa
Signing time: Thu 19 Jun 2025 12:54:11 +0000
ROA not before: Thu 19 Jun 2025 12:49:11 +0000
ROA not after: Thu 18 Jun 2026 12:54:11 +0000
asID: 210830
IP address blocks: 91.190.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 10:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:25:b8:7e:3c:1f:95:2e:c5:63:e3:81:d6:e7:db:cb:5a:f9:c0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jun 19 12:49:11 2025 GMT
Not After : Jun 18 12:54:11 2026 GMT
Subject: CN=AD9FFCEEB61FD6681E0CCF9EC74DBCB20425D74C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:ce:24:1d:f2:4d:5e:d6:e2:2f:d3:bb:5b:
3d:6f:bf:17:f3:be:bf:77:29:f0:e4:94:29:5c:95:
8d:22:bd:8a:e9:e5:ce:73:15:a9:d9:3d:ce:bd:9f:
79:ad:eb:17:2a:a1:ba:20:6e:8e:67:a9:83:bd:86:
cc:18:a1:a1:75:9b:a1:1b:ea:7b:09:bd:c1:67:88:
bb:f4:11:d0:79:80:76:f2:22:bb:00:3d:70:ae:cf:
14:8a:28:d6:61:36:52:c6:2c:2d:3b:f0:02:49:af:
d6:5b:20:c1:0e:8c:d4:32:31:3e:a1:d0:e1:6f:64:
20:91:e1:ee:9c:ed:ce:a9:6e:38:82:64:88:71:8d:
5a:e4:72:05:6a:f1:57:ea:68:f3:5b:36:ea:68:dc:
a7:fb:52:e5:65:04:56:69:a9:b9:8c:38:df:56:0d:
ae:60:4b:a2:48:4f:bd:25:77:3b:c3:e0:77:0c:fb:
50:f1:9c:44:c6:f9:3e:21:ec:0f:19:e7:be:d2:ad:
54:8f:18:04:c7:ef:c2:d8:7d:f7:19:79:ee:bd:1f:
a1:88:9d:c1:91:5a:7c:8d:31:34:77:82:e6:8b:71:
c7:98:6e:e6:51:c0:d9:a9:e8:fb:bd:10:4f:70:4d:
a2:6a:75:d2:31:0c:49:a6:12:ae:ea:44:af:38:02:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:FC:EE:B6:1F:D6:68:1E:0C:CF:9E:C7:4D:BC:B2:04:25:D7:4C
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2c:b7:bf:f9:64:ee:26:78:0d:7f:a5:34:0b:ef:8a:6b:a0:
98:b9:bd:4d:e2:7a:6f:9f:5a:5e:1d:d3:92:23:7f:1d:a6:0d:
1b:c4:c0:94:c4:66:0a:79:c0:96:bc:52:f6:63:e1:e6:d1:39:
be:3d:80:79:8d:5a:52:b4:ea:54:c2:ee:e0:0b:51:a3:7c:38:
78:7f:6b:6c:70:b8:16:94:34:09:d7:10:6e:d7:b8:16:86:da:
1a:85:72:03:89:fd:47:61:98:c4:41:5a:94:a5:a3:ab:50:6c:
3e:b9:fd:8d:64:e8:df:2e:27:95:44:5f:02:7a:c5:ad:09:57:
6d:6d:b2:c8:59:8c:d2:3a:46:3f:ab:61:34:43:15:ed:65:1a:
8f:2a:21:d7:6b:0d:cb:9e:6b:c4:f0:7e:83:f4:78:36:7d:db:
b7:85:3a:9a:3c:12:e9:96:e9:d4:98:6e:15:1f:6a:b5:b6:6f:
e6:05:f9:cd:64:15:ea:89:2b:bb:29:14:4a:26:dc:9a:78:bd:
85:22:ce:bb:56:2e:90:03:76:6b:ea:b7:e4:92:fd:ac:40:ba:
73:b8:46:a8:1b:e6:74:af:2a:c8:04:2f:45:c2:25:58:0d:0b:
7b:b9:22:ad:20:34:ea:81:fd:e2:23:16:89:4e:54:fc:76:1d:
83:54:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:20:47 2025 by rpki-client