Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38362e35342e3137322e302f32342d3234203d3e20323134343332.roa
File: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: WVXkrZeMKS19WGWwMJQfqNOjJpC3bIU6zT5pImMreVs=
Subject key identifier: 37:F0:34:2E:78:50:B7:F7:20:C1:94:90:13:07:2C:61:88:46:86:C2
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 5AC62F3DA7D0EEDF59602ABF9EA88F518F98FFCB
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38362e35342e3137322e302f32342d3234203d3e20323134343332.roa
Signing time: Thu 21 Aug 2025 02:58:28 +0000
ROA not before: Thu 21 Aug 2025 02:53:28 +0000
ROA not after: Thu 20 Aug 2026 02:58:28 +0000
asID: 214432
IP address blocks: 86.54.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c6:2f:3d:a7:d0:ee:df:59:60:2a:bf:9e:a8:8f:51:8f:98:ff:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Aug 21 02:53:28 2025 GMT
Not After : Aug 20 02:58:28 2026 GMT
Subject: CN=37F0342E7850B7F720C1949013072C61884686C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:9e:6b:5e:40:c8:35:c7:65:45:44:9b:73:
2d:24:fd:61:8b:ee:18:6d:b9:54:0f:39:fc:dc:7e:
0b:79:e5:07:c0:5f:33:75:72:d4:93:12:fe:5b:85:
04:eb:1c:fc:e9:c0:77:8f:b2:3a:33:82:bb:44:eb:
21:a1:09:7b:a7:a4:5c:84:98:be:f6:d1:cf:75:e2:
bc:b8:59:78:f0:1c:36:4c:68:b2:89:b1:48:5f:7d:
c4:cc:e1:65:b4:34:3f:bb:b3:82:53:f9:c3:6b:f5:
70:95:9d:95:df:96:da:a8:3f:36:02:cd:2b:b9:e7:
3b:55:a4:5f:3f:9f:3c:15:e0:00:d4:e7:77:75:9a:
52:2d:78:f4:64:b3:68:26:5f:23:e7:9c:8d:dd:1d:
7b:8f:c8:78:e1:02:bb:f0:b1:23:c4:a5:66:b3:61:
66:4c:78:71:37:7c:fc:81:13:9e:e4:96:e6:ed:b8:
27:0e:86:e7:62:d1:fc:76:94:2a:f1:81:72:d4:78:
9e:61:30:4f:6b:88:b7:c6:62:c5:de:75:5f:c7:60:
a3:2b:35:68:5b:50:8e:96:a0:72:b4:9a:cb:65:66:
d7:b4:69:68:1a:56:bb:59:a8:7e:d2:70:ec:12:56:
e2:d8:92:d1:7b:f2:49:f3:d4:2b:af:7d:6b:81:ad:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:34:2E:78:50:B7:F7:20:C1:94:90:13:07:2C:61:88:46:86:C2
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38362e35342e3137322e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.172.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e8:ca:47:ae:12:b2:c6:1f:d8:6c:a8:f3:f6:ce:b7:7c:4c:
1d:af:b6:44:fa:a9:f2:5f:d6:e1:9c:7c:d2:5b:e3:99:cf:48:
e1:a3:6a:dc:48:15:ac:38:14:05:e9:9e:38:72:9d:34:8f:10:
c3:a8:2e:82:ba:7f:f7:78:5d:3d:e3:55:2d:20:98:a7:69:73:
57:8d:e3:cf:07:61:78:7a:8f:32:53:78:c3:2b:7a:da:4c:84:
f8:dc:7f:94:4a:36:85:d3:ba:b8:35:de:97:18:87:b0:5a:00:
18:2d:c0:1f:22:fd:87:f5:c1:77:5a:4d:f5:b6:e2:0a:b3:81:
fe:e7:58:da:b2:b8:7a:cd:cc:bb:18:21:3e:72:af:df:31:85:
24:01:a2:66:cf:71:ed:45:14:1b:35:a4:bf:78:70:b9:56:7c:
f4:2a:c6:15:65:68:65:ec:dc:c3:02:f5:ae:21:68:44:f5:c4:
99:f0:03:f1:98:4e:7a:9e:61:90:4a:4d:7e:ff:8a:3c:cb:c1:
7a:31:2d:6a:a7:db:63:1a:bc:b5:82:4c:9b:43:0f:1e:6b:1b:
56:24:ae:ef:d3:58:c3:19:41:ab:44:ce:23:b9:75:98:40:cb:
3d:08:e1:94:5b:9b:79:d0:56:2c:e6:54:a7:88:63:13:82:ab:
14:c6:c8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:50 2025 by rpki-client