Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa
File: 3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier: XrWwPHt91qxXHQ0/kVWO42vo3gTicR3T1AogX5xX6FY=
Subject key identifier: 98:36:DA:63:15:EB:5C:26:00:8C:1C:A0:43:16:E0:F6:4B:E4:A0:04
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 46B4AC0E65943A8868623FB39489CFE9E26EFFA7
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa
Signing time: Wed 18 Jun 2025 07:41:56 +0000
ROA not before: Wed 18 Jun 2025 07:36:56 +0000
ROA not after: Wed 17 Jun 2026 07:41:56 +0000
asID: 215304
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b4:ac:0e:65:94:3a:88:68:62:3f:b3:94:89:cf:e9:e2:6e:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Jun 18 07:36:56 2025 GMT
Not After : Jun 17 07:41:56 2026 GMT
Subject: CN=9836DA6315EB5C26008C1CA04316E0F64BE4A004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:97:e8:20:73:0a:9d:7f:dd:f7:d4:41:da:
74:7d:f1:b4:86:92:48:5e:e1:e4:a4:2a:90:f6:09:
3e:fc:3c:6a:57:bf:01:37:8c:c0:ac:bb:da:90:45:
61:37:03:ab:8e:ed:7e:79:cb:06:a9:a2:31:89:e2:
98:31:11:13:df:fe:15:3e:dd:2f:2f:81:be:76:af:
d9:d3:66:da:79:44:ca:f1:29:d2:62:cf:9b:4c:50:
36:88:d1:78:ce:11:3d:27:3c:a8:87:11:0b:cd:45:
b3:85:26:9b:17:4c:75:66:d4:f8:5c:8d:b1:e9:fc:
aa:62:c8:32:3f:13:4a:3d:b3:2b:e4:29:50:be:19:
12:32:b6:b7:45:72:ff:62:dd:a7:ad:c1:fe:aa:76:
37:7c:90:86:0c:68:58:9b:c7:f1:06:da:f8:89:73:
25:18:17:4d:30:57:d5:19:e5:ac:a8:8a:c9:28:67:
44:1e:5b:1d:0b:36:2a:49:bb:9e:b7:18:54:53:57:
bc:62:cf:58:b8:37:50:ed:b4:b9:f2:8b:dd:03:7d:
e5:10:cf:14:89:89:dc:f0:59:a9:3c:24:5b:ec:f6:
44:e2:31:c3:8f:bf:db:2c:fe:53:0b:d5:45:b0:e6:
82:11:20:27:21:6c:ac:3f:33:c3:3d:b7:62:18:98:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:36:DA:63:15:EB:5C:26:00:8C:1C:A0:43:16:E0:F6:4B:E4:A0:04
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e20323135333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:25:4c:2b:e7:05:d1:3d:29:8c:d2:e4:b3:bd:fc:ba:ba:39:
08:67:a9:61:99:a1:55:0e:23:80:0c:cf:a3:c0:c0:c1:e9:96:
6b:cf:ad:e6:01:9a:6e:db:f8:01:e5:93:d5:f9:77:e7:71:69:
cc:5a:bf:b0:98:65:0f:a5:47:c9:5d:68:9d:2f:2a:aa:5c:1f:
ff:ce:7c:c7:78:fe:b7:73:27:33:e8:13:21:75:16:ce:19:16:
eb:8e:66:35:bc:3a:be:1e:b1:23:a0:60:88:48:e5:83:5a:f2:
c3:41:46:5d:45:72:bb:10:46:ab:95:c2:f3:1e:de:2b:df:a3:
7b:ca:c7:88:f4:14:ce:34:36:ca:df:f5:23:34:96:0f:4f:cb:
c2:3a:fc:0f:0d:24:e3:61:14:63:0d:a3:24:ba:a4:69:e3:9c:
b5:16:29:3f:2f:03:6c:a9:7c:8b:75:ce:3b:36:8e:67:1f:82:
ac:09:03:89:19:b0:dd:8a:5b:12:94:e2:17:ae:52:4a:f7:c3:
39:60:c4:55:4a:23:b8:43:f3:58:7a:d2:fd:12:05:b4:ed:50:
54:fa:7d:59:cb:cb:cf:50:f3:88:94:6b:9e:8a:b2:f9:1f:49:
80:eb:84:a7:a0:ba:fe:74:cf:7f:cf:16:a4:cb:c7:54:f0:e0:
20:2f:bc:5f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURrSsDmWUOohoYj+zlInP6eJu/6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmUwYmI3ODg2OWNkYjJhZDBjOTcxYTZhODU4YTMwMjEz
ZWFlYzQ3ZDAeFw0yNTA2MTgwNzM2NTZaFw0yNjA2MTcwNzQxNTZaMDMxMTAvBgNV
BAMTKDk4MzZEQTYzMTVFQjVDMjYwMDhDMUNBMDQzMTZFMEY2NEJFNEEwMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPpfoIHMKnX/d99RB2nR98bSG
kkhe4eSkKpD2CT78PGpXvwE3jMCsu9qQRWE3A6uO7X55ywapojGJ4pgxERPf/hU+
3S8vgb52r9nTZtp5RMrxKdJiz5tMUDaI0XjOET0nPKiHEQvNRbOFJpsXTHVm1Phc
jbHp/KpiyDI/E0o9syvkKVC+GRIytrdFcv9i3aetwf6qdjd8kIYMaFibx/EG2viJ
cyUYF00wV9UZ5ayoiskoZ0QeWx0LNipJu563GFRTV7xiz1i4N1DttLnyi90DfeUQ
zxSJidzwWak8JFvs9kTiMcOPv9ss/lML1UWw5oIRICchbKw/M8M9t2IYmKsfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUmDbaYxXrXCYAjBygQxbg9kvkoAQwHwYDVR0j
BBgwFoAUvgu3iGnNsq0MlxpqhYowIT6uxH0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMxNDMzODctZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUx
ZTRhLzAvQkUwQkI3ODg2OUNEQjJBRDBDOTcxQTZBODU4QTMwMjEzRUFFQzQ3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZndTNpR25Oc3EwTWx4cHFoWW93SVQ2
dXhIMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMxNDMzODct
ZjAxMy00OTIyLTgzOGUtZTE4ODY0YmUxZTRhLzAvMzEzNzM4MmUzMjM0MzgyZTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMzMwMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy+EwwDQYJKoZIhvcNAQELBQADggEBAD8lTCvnBdE9KYzS5LO9/Lq6OQhnqWGZ
oVUOI4AMz6PAwMHplmvPreYBmm7b+AHlk9X5d+dxacxav7CYZQ+lR8ldaJ0vKqpc
H//OfMd4/rdzJzPoEyF1Fs4ZFuuOZjW8Or4esSOgYIhI5YNa8sNBRl1FcrsQRquV
wvMe3ivfo3vKx4j0FM40Nsrf9SM0lg9Py8I6/A8NJONhFGMNoyS6pGnjnLUWKT8v
A2ypfIt1zjs2jmcfgqwJA4kZsN2KWxKU4heuUkr3wzlgxFVKI7hD81h60v0SBbTt
UFT6fVnLy89Q84iUa56KsvkfSYDrhKeguv50z3/PFqTLx1Tw4CAvvF8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:48:21 2025 by rpki-client