Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132342e302f32342d3234203d3e20343031383338.roa
File: 37382e32342e3132342e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier: VrnH5tIT+SOLQ0xUmgz8lDea4v1K04gWY5bP4L4H/fY=
Subject key identifier: BA:9A:40:FB:7E:EB:E7:10:63:0C:42:90:78:0C:54:34:12:B5:F4:DF
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 581E05E0D58D0C9D12C314183DB751946463AEF4
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132342e302f32342d3234203d3e20343031383338.roa
Signing time: Wed 13 Aug 2025 05:14:13 +0000
ROA not before: Wed 13 Aug 2025 05:09:13 +0000
ROA not after: Wed 12 Aug 2026 05:14:13 +0000
asID: 401838
IP address blocks: 78.24.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1e:05:e0:d5:8d:0c:9d:12:c3:14:18:3d:b7:51:94:64:63:ae:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Aug 13 05:09:13 2025 GMT
Not After : Aug 12 05:14:13 2026 GMT
Subject: CN=BA9A40FB7EEBE710630C4290780C543412B5F4DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:b0:bd:e4:36:e8:c1:90:fa:fe:3c:82:a1:
f9:98:c1:8a:89:c8:10:b3:e7:ad:33:6f:b8:0f:da:
3f:e5:30:ae:39:65:93:c4:c5:6e:24:e3:14:39:87:
42:5a:fc:3f:66:89:63:df:46:51:ed:15:bf:9f:1e:
be:ad:1f:b6:11:23:cf:3e:6d:dd:0e:b7:16:e2:e6:
27:60:a8:b0:ba:8c:5a:a6:44:b7:ec:b3:1c:25:c8:
22:55:c2:7b:87:3b:27:22:9e:a7:6b:68:9d:6e:82:
b7:2e:b9:e9:fd:d5:3c:c4:3b:3c:a4:88:5a:2e:30:
a1:70:78:ba:ac:77:97:bf:c9:49:b3:90:3b:8e:fa:
bf:57:99:28:67:b0:12:8e:b1:3c:9f:c3:c2:fb:8f:
a7:4e:d5:f5:0c:a6:c0:42:4c:2e:27:eb:b3:38:4e:
2c:17:eb:21:76:64:3f:26:70:6c:58:9d:e9:0b:ee:
74:2c:9d:02:b1:c2:c8:3b:ce:22:a7:27:d1:c8:09:
f7:3a:17:e5:ad:c1:de:33:60:b9:16:d0:cf:35:ea:
9b:12:7e:8d:cc:ab:2f:bc:7c:76:9b:fb:80:18:e7:
3c:bd:4d:f6:4d:b0:20:a5:d6:14:e0:b8:bd:d9:9f:
6a:d0:46:58:fe:08:96:b1:35:13:a8:a7:b9:e3:51:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:40:FB:7E:EB:E7:10:63:0C:42:90:78:0C:54:34:12:B5:F4:DF
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132342e302f32342d3234203d3e20343031383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:36:f9:13:ca:26:1b:35:47:bc:a0:63:42:02:c8:36:ec:c8:
1a:57:51:ca:e5:fb:fd:fe:38:7d:ed:c9:37:4f:db:7f:01:6b:
78:f6:bb:70:c2:3d:d7:87:f1:73:e5:49:9d:02:68:db:09:46:
00:41:8f:bc:fe:18:08:63:36:19:78:46:79:c3:51:b7:1e:af:
b6:c5:0c:34:55:69:92:fc:95:84:2c:f6:e0:bc:14:e5:90:97:
23:ea:ac:ed:d1:b6:90:b3:26:8d:2a:01:9f:90:40:27:11:1d:
91:44:78:a3:b3:92:8b:a7:ec:50:4d:00:22:4d:e7:fb:ac:67:
99:ae:12:79:ee:c0:77:6e:23:0d:e4:5d:3d:8b:b7:9c:9e:ff:
01:03:7f:18:4c:02:13:0b:37:01:02:cc:6c:af:27:37:81:f4:
17:44:1e:1f:77:a0:0b:c8:46:cc:37:0d:39:c0:b0:2c:ba:12:
18:37:03:41:b3:97:ed:33:cd:32:82:05:08:e3:23:f9:c3:20:
e9:1e:4b:59:c8:1f:a3:1a:ab:b1:16:de:78:4a:d2:80:0f:7e:
b7:c7:0d:95:39:df:43:55:bc:3f:38:2a:bf:e8:e5:65:d4:e2:
2e:a4:3c:dc:bf:88:a9:0f:98:e8:7d:b8:f4:1e:fb:8e:08:34:
df:53:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:51:48 2025 by rpki-client