Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e203336353330.roa
File: 3137382e3234382e37362e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: h2oY8dMCuUJOV8h2ooYxtJO3njho899x4gMqGa23JNE=
Subject key identifier: 69:69:C2:33:F5:47:19:DA:E6:08:32:82:CB:FA:B8:E2:60:60:85:1D
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 179DF73197CF3D46E8995EA9AEF9E5B58B91833D
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e203336353330.roa
Signing time: Wed 18 Jun 2025 07:41:56 +0000
ROA not before: Wed 18 Jun 2025 07:36:56 +0000
ROA not after: Wed 17 Jun 2026 07:41:56 +0000
asID: 36530
IP address blocks: 178.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9d:f7:31:97:cf:3d:46:e8:99:5e:a9:ae:f9:e5:b5:8b:91:83:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Jun 18 07:36:56 2025 GMT
Not After : Jun 17 07:41:56 2026 GMT
Subject: CN=6969C233F54719DAE6083282CBFAB8E26060851D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:cc:41:4f:4e:22:57:8a:e6:08:94:2d:3f:
11:64:45:a4:0b:9f:6e:0d:41:12:b7:3e:ed:9f:8a:
9d:f8:2e:98:56:ed:f9:9f:ca:a3:59:ac:2c:9a:fd:
a5:0c:a3:5f:34:7a:c9:0e:e0:c7:12:a4:7a:29:20:
41:74:2c:1d:70:7e:a3:60:4f:cb:9c:e1:b3:4a:52:
62:bb:09:1d:f1:7f:b2:2f:04:12:e6:a7:0c:38:c1:
0e:7c:1f:76:c8:8a:39:8c:0e:fb:4d:18:88:d4:35:
e2:88:eb:5f:16:e9:72:b8:8a:e6:1b:94:2b:62:f4:
f0:7b:c5:af:00:f0:3a:88:54:f0:39:92:5a:d9:e7:
86:1b:b8:9f:ce:bb:44:01:e9:9a:d5:12:5e:3c:bf:
8c:4b:08:b6:a5:54:11:33:a7:8e:35:1e:ad:0b:79:
99:81:3c:22:46:62:bc:ad:fc:cb:91:02:1f:b1:8c:
d7:6e:41:38:64:ca:f0:89:72:c1:c2:1b:5e:d8:df:
fd:ab:db:36:b6:7a:da:3c:28:66:5f:a7:fb:6e:c8:
0e:3e:0f:3c:79:1f:47:a6:90:1f:40:f7:86:fe:d6:
49:20:d2:1d:c4:b3:19:3f:14:be:14:e7:41:f4:3b:
7d:d2:15:32:80:f0:fd:9d:99:a6:26:ca:19:e9:c2:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:C2:33:F5:47:19:DA:E6:08:32:82:CB:FA:B8:E2:60:60:85:1D
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37362e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5c:78:4b:54:9a:81:da:82:76:f2:c9:01:1b:c5:31:e3:a6:
2a:c6:27:8f:cd:77:89:be:e8:02:ab:3c:f0:86:20:95:1f:a9:
21:5c:c2:ba:39:c8:4e:08:bd:82:35:bf:68:dd:c8:cb:92:49:
12:2f:13:8f:f0:ba:9f:92:74:5e:bf:ec:6c:9a:74:64:19:91:
82:ca:3a:7a:0d:f7:f4:96:82:64:8d:51:50:97:0a:ef:0e:e5:
2a:e7:06:5a:5f:1a:f6:54:3c:af:3c:f3:87:16:e6:5f:12:94:
48:a5:d1:cf:7c:87:f3:9a:fa:c5:12:1f:06:69:0c:58:53:11:
ba:3c:24:84:24:40:dd:0e:82:70:41:7b:04:51:1f:b1:41:dd:
8c:c2:2b:4d:e2:5c:52:db:1a:13:da:58:8c:47:aa:fd:e3:b1:
48:64:87:c2:10:a2:e6:1d:03:bb:f4:85:4b:82:a2:1a:0f:37:
44:33:71:fb:ae:4d:05:b9:3a:eb:3a:94:b7:82:c4:01:67:18:
16:13:5e:42:c0:84:87:e4:3b:c6:6b:12:b4:c1:74:12:b8:41:
e3:6b:86:4a:c3:7a:4b:73:91:95:37:6e:cc:d3:f7:10:ee:03:
27:59:3b:d2:7e:d1:af:12:e7:1e:37:e5:49:9a:10:00:55:93:
d8:c4:fa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:24:06 2025 by rpki-client