Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20343031383338.roa
File: 39332e39322e31382e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier: UH0UP25o3U70TKOGCO5ZzwtVViIjPRoBTmf/0ZejDTc=
Subject key identifier: 5B:7B:E1:1B:FD:4D:90:99:A9:CF:C3:12:84:01:A4:B1:A8:6D:6C:8F
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 29D93D5D31DA3A0359DFE2FCD5FD4BCAE73074B3
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20343031383338.roa
Signing time: Wed 13 Aug 2025 05:14:10 +0000
ROA not before: Wed 13 Aug 2025 05:09:10 +0000
ROA not after: Wed 12 Aug 2026 05:14:10 +0000
asID: 401838
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d9:3d:5d:31:da:3a:03:59:df:e2:fc:d5:fd:4b:ca:e7:30:74:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Aug 13 05:09:10 2025 GMT
Not After : Aug 12 05:14:10 2026 GMT
Subject: CN=5B7BE11BFD4D9099A9CFC3128401A4B1A86D6C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:66:20:56:f4:7e:81:3d:bc:53:cf:4f:fc:
17:84:e3:03:cd:52:b7:79:c2:45:d1:04:05:ad:9b:
db:8b:28:92:54:f1:12:74:f8:b0:5f:8b:0e:5c:44:
b5:c3:40:b8:68:cc:a2:e8:1f:be:37:1c:19:0b:02:
7e:a3:55:c0:8d:69:83:19:e9:68:6e:ea:39:fd:b2:
ad:8a:74:0a:32:e8:df:f4:e6:41:19:81:bf:6d:00:
c9:9c:7e:0b:91:cd:b6:5d:1c:9b:dc:08:4f:8a:05:
fe:38:fb:c4:13:de:50:46:ff:59:aa:e5:61:ca:11:
34:b9:48:a5:5e:b4:4a:58:33:fb:b8:16:01:81:e5:
a4:b3:ff:de:7d:cf:61:c9:b7:cb:e3:0d:1a:0e:78:
4d:51:d9:5f:de:4d:2e:33:3f:ac:23:fe:7d:3f:c2:
48:48:5e:40:b3:12:20:88:dc:81:58:7d:03:63:ac:
4d:c9:9c:bd:43:87:0f:74:70:14:a4:50:1c:a2:a5:
9b:52:b7:2f:24:c8:b1:38:68:e2:b4:74:b9:62:7e:
77:09:3c:05:24:e2:f8:4f:8a:29:d0:08:5a:7f:2c:
fc:20:a5:02:01:fc:47:7a:d3:47:82:08:46:3e:7e:
7b:d8:a8:39:27:98:53:9c:82:e5:08:1d:a0:b0:44:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:E1:1B:FD:4D:90:99:A9:CF:C3:12:84:01:A4:B1:A8:6D:6C:8F
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e20343031383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ca:f9:61:2f:fa:2c:35:ed:08:3b:fe:af:14:57:48:8c:57:
23:ba:dd:25:54:ec:72:3e:3b:b4:ee:99:37:cd:e3:18:fe:65:
cc:77:be:36:f2:a2:89:c7:22:e0:37:c1:78:1d:e6:02:3a:12:
25:b0:4f:ed:88:21:d3:0c:8a:ff:c4:d3:ab:d7:de:13:90:24:
a0:a6:6f:83:eb:8e:29:fe:62:9d:f2:25:5a:e5:ed:cd:06:4d:
0a:5b:fb:7a:c2:4d:30:80:d6:1e:d6:b0:7d:bf:ca:dd:19:9b:
ca:d5:00:26:a2:20:82:51:f4:5d:b9:da:cf:11:43:f2:50:68:
0f:33:e7:44:41:25:d9:f1:fa:35:fc:d8:cd:31:7c:ec:fa:55:
62:0e:29:70:51:b0:15:3f:4c:9d:5f:ff:19:26:c9:f3:1e:de:
42:48:44:0e:18:77:5c:20:b8:cc:01:3c:81:e1:c9:e1:87:33:
98:d1:0f:ac:ab:3c:07:92:80:46:98:c5:77:35:19:90:d1:19:
95:ea:37:0e:f8:c7:5b:55:ae:13:ed:82:28:96:62:8f:e5:6f:
88:85:f5:2d:d9:25:5e:3e:f8:ca:ad:71:ac:90:cf:6a:9a:27:
44:8a:37:3b:48:03:7b:2c:f8:f2:01:3c:6f:eb:f4:65:0b:52:
b1:82:af:ae
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKdk9XTHaOgNZ3+L81f1LyucwdLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAxYmEwMTNiYzFlNmQ4NmYwZDZkNThlYWZhNTRlMjdm
YWRhMzQ0NDAeFw0yNTA4MTMwNTA5MTBaFw0yNjA4MTIwNTE0MTBaMDMxMTAvBgNV
BAMTKDVCN0JFMTFCRkQ0RDkwOTlBOUNGQzMxMjg0MDFBNEIxQTg2RDZDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvqmYgVvR+gT28U89P/BeE4wPN
Urd5wkXRBAWtm9uLKJJU8RJ0+LBfiw5cRLXDQLhozKLoH743HBkLAn6jVcCNaYMZ
6Whu6jn9sq2KdAoy6N/05kEZgb9tAMmcfguRzbZdHJvcCE+KBf44+8QT3lBG/1mq
5WHKETS5SKVetEpYM/u4FgGB5aSz/959z2HJt8vjDRoOeE1R2V/eTS4zP6wj/n0/
wkhIXkCzEiCI3IFYfQNjrE3JnL1Dhw90cBSkUByipZtSty8kyLE4aOK0dLlifncJ
PAUk4vhPiinQCFp/LPwgpQIB/Ed600eCCEY+fnvYqDknmFOcguUIHaCwRPYbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUW3vhG/1NkJmpz8MShAGksahtbI8wHwYDVR0j
BBgwFoAU0BugE7webYbw1tWOr6VOJ/raNEQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYtNjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5
NDMxLzEvRDAxQkEwMTNCQzFFNkQ4NkYwRDZENThFQUZBNTRFMjdGQURBMzQ0NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBCdWdFN3dlYllidzF0V09yNlZPSl9y
YU5FUS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTUyMmE1MmYt
NjUzNC00MTY1LWE2YTctZWY5Zjc0ZWY5NDMxLzEvMzkzMzJlMzkzMjJlMzEzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTM4MzMzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1c
EjANBgkqhkiG9w0BAQsFAAOCAQEAhsr5YS/6LDXtCDv+rxRXSIxXI7rdJVTscj47
tO6ZN83jGP5lzHe+NvKiicci4DfBeB3mAjoSJbBP7Ygh0wyK/8TTq9feE5AkoKZv
g+uOKf5infIlWuXtzQZNClv7esJNMIDWHtawfb/K3RmbytUAJqIgglH0XbnazxFD
8lBoDzPnREEl2fH6NfzYzTF87PpVYg4pcFGwFT9MnV//GSbJ8x7eQkhEDhh3XCC4
zAE8geHJ4YczmNEPrKs8B5KARpjFdzUZkNEZleo3DvjHW1WuE+2CKJZij+VviIX1
LdklXj74yq1xrJDPaponRIo3O0gDeyz48gE8b+v0ZQtSsYKvrg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:51:49 2025 by rpki-client