Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203537303433.roa
File: 3138352e35382e3135382e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: 2rLX+VLjC2xO1KxOS+n2CnvGjfDyy5LLRhtxUy0z5HI=
Subject key identifier: 8A:D4:4F:63:56:F2:F3:F0:BD:D6:00:93:3D:5E:FB:E2:B0:C9:BB:B9
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 2FCE0DFBF915EF0EA35A6E3B463B2593E3E5C208
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203537303433.roa
Signing time: Wed 20 Aug 2025 04:20:54 +0000
ROA not before: Wed 20 Aug 2025 04:15:54 +0000
ROA not after: Wed 19 Aug 2026 04:20:54 +0000
asID: 57043
IP address blocks: 185.58.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ce:0d:fb:f9:15:ef:0e:a3:5a:6e:3b:46:3b:25:93:e3:e5:c2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Aug 20 04:15:54 2025 GMT
Not After : Aug 19 04:20:54 2026 GMT
Subject: CN=8AD44F6356F2F3F0BDD600933D5EFBE2B0C9BBB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:c8:ec:f3:af:02:f5:04:8a:b8:a2:2d:9c:
91:f4:6f:12:0f:e9:b1:36:8a:70:0a:ff:78:44:4f:
bc:fb:36:cb:a0:c9:c2:bd:92:80:c0:46:e3:d0:61:
2d:fd:f7:1a:2b:ca:42:97:99:be:10:0c:3f:90:90:
9d:bb:90:6a:3d:75:ac:1b:8d:d3:b3:ed:83:cf:09:
29:df:9a:4f:b3:3f:1a:fa:ef:74:b9:16:30:82:97:
13:87:c3:3b:0d:fe:fa:92:ec:ea:24:b8:e6:13:23:
e0:25:47:54:cb:b8:d0:f5:5b:44:15:f8:27:1f:0a:
e2:2f:45:5d:d7:21:7d:6b:23:61:3f:fb:9f:15:2b:
68:39:49:98:bc:e0:f4:b4:9c:c1:20:6c:0e:20:62:
64:c9:3d:19:b8:da:a0:06:51:29:ba:7b:f3:66:52:
10:dd:51:8f:fb:3a:ec:8f:89:be:f4:0c:a1:b1:f6:
ce:a9:79:0c:2a:46:b4:0b:0e:da:da:22:0a:d4:fe:
23:dd:3f:fe:75:a5:b0:7c:63:ee:37:bb:93:c1:75:
7d:3b:73:a1:72:26:78:56:ef:60:44:80:6e:f4:46:
d4:c0:8c:82:7f:f0:22:6b:30:f8:7e:ac:95:4c:00:
a2:6a:ee:51:26:1b:f8:79:21:a6:9c:34:79:5f:a2:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:4F:63:56:F2:F3:F0:BD:D6:00:93:3D:5E:FB:E2:B0:C9:BB:B9
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a3:73:00:eb:c1:e4:51:dd:37:1f:d0:27:e9:3e:26:01:85:
7a:50:2b:3f:15:d5:8a:48:30:84:b9:9c:ac:30:e2:d3:d8:8d:
89:49:4b:d8:fd:d9:ac:bb:0f:ba:24:a6:8e:a4:aa:4c:58:ad:
51:df:26:d4:a6:73:dd:e0:69:98:14:d8:3b:c3:14:29:58:8b:
33:d8:f6:3e:8d:14:c0:6c:58:ab:99:d0:7a:98:21:9e:23:52:
35:76:23:e6:46:82:2a:9c:a6:51:97:db:e1:81:93:55:12:11:
98:18:68:f0:fb:4e:e8:f9:3a:cb:3c:26:34:f9:19:85:bc:db:
4d:81:8d:22:8c:43:71:8d:6b:7c:8c:ce:b0:e2:72:d0:ee:09:
a2:81:2e:b0:2f:ba:97:a5:12:e1:df:52:ae:05:dc:2c:d4:c5:
23:93:3b:ea:dd:c0:62:4e:b5:70:6e:45:9e:c4:17:42:2a:bb:
33:02:22:9e:ce:fb:35:e5:32:e9:f8:92:52:07:10:10:a2:a7:
9c:dc:47:19:94:30:ac:d8:78:20:de:c0:33:ed:a2:31:17:74:
7f:09:b4:43:e5:55:ff:7d:9d:13:bf:5e:9b:80:d8:ee:b8:0f:
d0:a4:51:36:45:0b:b1:33:cf:4c:1e:86:0b:38:cf:f9:03:16:
19:0f:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:57 2025 by rpki-client