Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/326130323a323937303a3a2f32392d3438203d3e203433383437.roa
File: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (raw, json)
Hash identifier: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=
Subject key identifier: 08:B7:9C:56:7C:F6:33:44:CF:E7:F7:86:D5:E3:81:04:6A:66:62:AF
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 2B70FA594488798DCDC7B2642162AA0CB906F59B
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/326130323a323937303a3a2f32392d3438203d3e203433383437.roa
Signing time: Tue 05 Aug 2025 15:42:54 +0000
ROA not before: Tue 05 Aug 2025 15:37:54 +0000
ROA not after: Tue 04 Aug 2026 15:42:54 +0000
asID: 43847
IP address blocks: 2a02:2970::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:70:fa:59:44:88:79:8d:cd:c7:b2:64:21:62:aa:0c:b9:06:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Aug 5 15:37:54 2025 GMT
Not After : Aug 4 15:42:54 2026 GMT
Subject: CN=08B79C567CF63344CFE7F786D5E381046A6662AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:85:70:ab:04:90:06:91:fd:ef:8d:ce:a9:44:
de:28:63:9f:6c:4a:50:73:d9:09:c6:4d:4d:06:8d:
d1:9f:da:ef:db:cb:dc:77:15:57:88:72:29:36:d7:
07:bb:a6:74:30:57:c0:06:e4:47:1b:6a:0c:c9:a2:
85:bc:bb:75:ee:a3:fd:0b:92:f3:c9:5c:66:c6:ef:
62:c0:fc:0e:d5:c5:c9:86:fa:02:ad:e5:2f:9a:58:
d2:62:d8:a0:e3:8a:aa:f5:1b:e6:ed:37:10:3a:2a:
85:3f:03:65:b0:fe:62:5c:7e:89:ff:dc:48:ad:ea:
3c:de:06:88:01:ab:90:8c:7f:23:5c:2f:21:7c:62:
be:1a:6e:9d:8f:d0:17:a9:09:28:86:80:39:6e:ac:
45:0b:3e:0e:e7:de:25:17:22:0c:e9:28:f2:e9:5a:
3a:33:58:53:c1:6a:ba:83:3d:c1:00:60:ef:c2:64:
cc:38:15:69:f6:27:b9:92:e4:ab:3b:72:1a:57:79:
75:bc:3e:77:01:35:e6:6a:ff:b0:fd:b7:48:fd:ef:
40:66:3b:83:aa:96:39:6f:50:35:26:cc:dd:d7:d8:
52:6f:6d:5f:a7:e8:e0:6d:d3:93:b1:d2:b8:19:13:
98:bf:b2:3f:53:1f:7c:9f:19:07:60:95:e5:6e:e9:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:9C:56:7C:F6:33:44:CF:E7:F7:86:D5:E3:81:04:6A:66:62:AF
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/326130323a323937303a3a2f32392d3438203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
37:ca:6b:77:b8:ce:b5:26:67:86:4e:60:0b:76:e2:14:11:86:
49:5e:19:09:ec:33:c2:d9:0d:53:3d:a3:83:c1:aa:b2:a1:b3:
b8:d7:51:30:21:e8:56:16:e2:25:ea:39:84:35:91:d5:db:bb:
8c:61:be:34:c2:9a:52:1e:59:6a:4f:95:16:8a:6f:1b:5f:a2:
a9:e7:5e:a0:51:eb:f1:23:66:de:6d:7d:56:9f:d2:20:83:94:
45:9e:03:cf:45:81:33:f2:28:13:1d:ac:36:ac:5d:c5:46:ab:
58:04:25:92:5c:a6:66:2e:18:7b:57:61:1c:f8:59:de:87:7e:
c8:2e:32:b2:9b:9b:23:a5:21:06:5b:40:3c:33:68:cb:50:49:
e5:97:d0:8d:cd:75:e8:93:0a:48:e0:cb:9e:7c:51:7b:9d:a3:
97:b6:ad:62:91:8e:fd:be:0c:f0:d0:f4:8a:dd:7a:30:3a:be:
16:ae:cf:f7:37:72:3a:09:fe:b8:db:63:6d:a6:06:46:25:e6:
04:b5:16:cc:6f:29:2d:2d:f2:fb:25:46:71:c3:d5:ce:46:11:
6a:86:8d:94:46:78:3c:14:a5:92:20:27:76:f5:06:0d:0b:5c:
32:62:7a:7a:d9:83:20:f5:c6:2b:77:08:8d:9f:3b:bc:b3:3e:
08:54:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:00 2025 by rpki-client