Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa
File: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (raw, json)
Hash identifier: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=
Subject key identifier: 72:5A:B4:80:30:C2:2B:50:CD:62:50:08:2A:6A:CA:69:FB:6A:30:7B
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 4A3877527B610CAB6B55A5C2D3B027F136185A21
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa
Signing time: Tue 12 Aug 2025 15:54:13 +0000
ROA not before: Tue 12 Aug 2025 15:49:13 +0000
ROA not after: Tue 11 Aug 2026 15:54:13 +0000
asID: 271987
IP address blocks: 213.139.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:38:77:52:7b:61:0c:ab:6b:55:a5:c2:d3:b0:27:f1:36:18:5a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Aug 12 15:49:13 2025 GMT
Not After : Aug 11 15:54:13 2026 GMT
Subject: CN=725AB48030C22B50CD6250082A6ACA69FB6A307B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:7f:e7:0a:c8:84:99:b9:57:92:0a:87:9b:
9c:f8:08:32:d0:18:c5:b0:e1:39:e9:df:19:6b:7d:
c6:33:ae:dd:d1:e7:7b:35:96:fd:7e:c6:f4:4a:da:
55:a8:af:b9:1f:66:05:9e:d5:55:0b:ca:f8:de:cc:
c7:7b:51:db:53:71:e9:61:f3:fa:81:10:78:5a:c3:
63:87:2c:4b:74:c1:dd:c9:02:0d:4f:18:b7:22:80:
ab:8d:06:3f:48:90:f5:10:ad:09:46:59:65:2f:ad:
68:54:55:22:a5:8a:4f:24:d2:13:77:a1:8a:66:be:
a8:1e:c7:46:08:47:35:09:a8:3f:ea:df:1c:87:8d:
4e:e8:74:e0:6c:2b:44:0d:39:03:76:b9:e8:2b:1c:
be:2f:e4:29:39:11:fb:16:e2:ee:53:73:46:83:08:
fa:d5:a7:9f:e5:c3:55:10:da:80:35:fe:bc:04:32:
3c:17:e6:f4:55:ab:97:ef:a1:b2:b4:89:42:e9:da:
01:e0:f1:4b:d9:58:e2:33:d7:82:76:ef:88:4d:ce:
6c:a1:f8:ac:32:32:4e:f7:0e:46:6b:ac:8e:a6:5a:
10:92:f9:ed:25:17:e5:b7:9d:25:69:ef:20:d7:69:
dd:00:f2:fd:62:d0:db:99:5a:81:25:cd:01:60:53:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5A:B4:80:30:C2:2B:50:CD:62:50:08:2A:6A:CA:69:FB:6A:30:7B
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.75.0/24
Signature Algorithm: sha256WithRSAEncryption
53:53:ff:65:f7:8b:5c:2b:da:1f:a7:c7:b7:a8:d0:37:ec:5c:
b5:d2:8f:66:3a:e3:d4:28:bf:83:fe:67:9c:1a:ed:43:75:6f:
30:7b:d1:e4:67:75:d1:db:06:32:4b:59:3f:0b:ef:f8:49:eb:
15:e7:9e:7d:da:ad:5e:2c:bc:3d:91:cc:c3:69:95:1a:2c:22:
d1:ec:f7:fe:cb:c0:11:ee:95:35:ae:a8:ba:ec:36:87:c6:56:
ff:9f:75:8b:8c:e0:9c:d1:66:69:e9:2c:16:04:e8:a7:48:b6:
4d:6e:ec:12:47:20:bb:c3:af:f7:58:9e:dd:ef:1b:ac:a9:59:
73:a8:71:fb:59:f6:c4:43:89:32:69:93:0b:5d:8b:8a:c9:bf:
81:05:f1:a9:d8:4f:3c:65:a6:ff:3b:6a:f8:55:7b:d3:26:7b:
b9:b3:94:de:d7:ea:e0:33:a5:9a:20:d4:8d:c0:ba:61:e1:23:
30:54:c9:b0:bf:d5:21:d1:05:ce:c1:a6:3c:07:67:8e:42:5e:
c2:66:ed:b7:bc:eb:4c:3c:14:ad:93:6d:77:33:d2:dd:c1:96:
62:3a:34:8c:e4:d8:e1:a2:23:10:85:3e:f4:d3:84:c7:f8:70:
53:95:f8:2f:c0:7b:22:a4:16:50:22:f0:74:29:26:e3:dd:9d:
e1:aa:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:15 2025 by rpki-client