Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa
File: 3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: 55oHxRvhLlFnFgVNA6T2hJ74AYC9yyl40HSKUWc/res=
Subject key identifier: DF:DD:47:10:08:9D:D6:ED:8C:C4:54:99:D1:B6:AE:32:E8:DD:6E:C1
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 558CBF7BF9C2B08303B55CF87F69B4027A3D6110
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa
Signing time: Thu 19 Jun 2025 13:27:03 +0000
ROA not before: Thu 19 Jun 2025 13:22:03 +0000
ROA not after: Thu 18 Jun 2026 13:27:03 +0000
asID: 212384
IP address blocks: 178.248.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8c:bf:7b:f9:c2:b0:83:03:b5:5c:f8:7f:69:b4:02:7a:3d:61:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Jun 19 13:22:03 2025 GMT
Not After : Jun 18 13:27:03 2026 GMT
Subject: CN=DFDD4710089DD6ED8CC45499D1B6AE32E8DD6EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:e1:ff:45:11:39:ed:15:df:ec:98:d5:ac:
d2:2f:ce:ba:59:58:11:5a:d1:ea:39:12:9e:3f:2f:
29:c5:b8:ca:26:97:3e:8c:bf:22:34:28:87:e2:27:
62:ea:75:97:f6:62:aa:ec:cb:04:c1:13:9f:43:64:
81:96:95:d0:12:1c:84:da:34:04:7b:04:15:a3:78:
9b:a8:d9:d8:0a:fa:88:7f:e1:5e:05:f9:34:a0:4d:
05:0b:3b:87:b7:37:97:cf:43:35:7b:d2:ce:52:12:
3c:cf:1c:a9:f6:6b:bc:97:73:ee:b8:17:95:bd:a4:
75:53:47:21:5b:97:4d:89:d4:46:26:39:7a:1a:76:
2a:11:94:34:fb:a0:d0:d4:fd:0d:01:eb:a1:e3:34:
37:ca:9e:3c:1b:9e:fd:02:c2:1e:02:15:6e:47:fc:
f3:bb:f7:b8:e7:53:5b:df:53:9c:f3:3a:99:9b:dd:
42:6a:29:c1:f3:de:f4:61:55:f5:ec:70:26:81:c4:
87:60:10:df:23:5c:45:de:82:22:ff:db:3e:88:17:
97:91:3c:26:c0:23:65:14:91:48:00:fe:3b:7e:d7:
6c:aa:8e:43:7b:78:30:d7:71:b1:0a:6f:db:88:57:
3e:04:ac:7d:b4:57:3e:92:d3:d0:58:ae:8b:8f:21:
39:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:47:10:08:9D:D6:ED:8C:C4:54:99:D1:B6:AE:32:E8:DD:6E:C1
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37382e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.78.0/24
Signature Algorithm: sha256WithRSAEncryption
42:95:38:fb:3f:13:f6:a2:16:48:10:8b:9f:41:c9:70:7f:dd:
af:bc:5f:5a:ea:d4:d9:12:40:9f:5c:32:1a:47:18:07:4e:2d:
fe:3d:fb:ee:3a:be:3c:67:17:e3:77:7f:63:72:b4:75:a4:b0:
29:25:0d:ad:6b:b3:ab:ec:c7:24:7a:2e:8f:1c:ca:d3:11:50:
b2:bd:cc:32:b2:67:72:e9:43:da:dd:1f:1d:a6:b3:78:4d:31:
71:aa:e2:5a:86:45:fc:28:58:58:36:24:c1:4d:69:a0:e6:ba:
d7:1e:70:e4:b1:b2:0a:31:30:88:a9:6d:fc:af:c1:43:21:ee:
17:67:e1:09:a0:b4:41:54:68:b9:09:bf:f4:c8:b5:38:50:24:
43:e2:32:89:50:bd:58:81:8c:ba:38:1d:2a:08:ec:96:c8:da:
56:bb:b0:96:f9:35:a9:a4:40:0a:63:f0:04:56:b4:57:bc:a5:
83:25:d1:74:f8:10:63:62:a1:86:b5:50:a4:dd:0e:2a:77:6f:
1f:f3:11:a7:99:38:60:b1:6c:3d:80:dc:76:e1:58:b9:3d:a8:
c4:2a:c2:96:ce:52:db:e2:23:ec:82:87:b2:44:1f:22:77:d4:
9f:3b:27:f2:00:5d:fa:f1:b6:90:b9:74:6e:47:ff:17:29:32:
1e:33:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:55:19 2025 by rpki-client