Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232332e302f32342d3234203d3e20323132333834.roa
File: 3138352e3230352e3232332e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: k4y2VtnsSsTtyAl4jaozcK/ByM35/AQq6sLusP5lRwI=
Subject key identifier: 6A:F1:FD:53:EC:3A:BA:4E:85:0F:FB:F7:8C:E4:21:D4:58:50:91:0F
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 57B8B159BB3DA6E537091C06F89F2F29F679D4AD
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232332e302f32342d3234203d3e20323132333834.roa
Signing time: Mon 13 Oct 2025 07:55:08 +0000
ROA not before: Mon 13 Oct 2025 07:50:08 +0000
ROA not after: Mon 12 Oct 2026 07:55:08 +0000
asID: 212384
IP address blocks: 185.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b8:b1:59:bb:3d:a6:e5:37:09:1c:06:f8:9f:2f:29:f6:79:d4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 13 07:50:08 2025 GMT
Not After : Oct 12 07:55:08 2026 GMT
Subject: CN=6AF1FD53EC3ABA4E850FFBF78CE421D45850910F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:de:8b:eb:a8:dd:89:94:3b:7c:c3:a5:52:
54:7f:ad:24:1b:49:53:e1:ce:eb:72:a7:87:8a:ce:
a8:f9:a2:da:de:66:e4:07:46:04:b7:af:57:9d:34:
ab:36:c8:be:16:0e:60:ba:2c:c8:3e:65:14:7f:76:
84:b7:18:34:a2:63:37:93:af:c4:08:a5:fb:33:ac:
6f:8d:9a:fe:00:6f:c3:54:ef:95:03:1a:16:d6:88:
db:79:f3:56:3d:12:7b:34:27:5f:95:87:b6:ed:86:
27:05:ab:b9:45:1a:d6:21:e0:76:da:95:35:07:cf:
c7:f3:d4:e6:cb:c1:66:58:0f:71:5f:76:ff:90:20:
04:bd:5f:a0:71:32:80:03:5d:a3:8b:08:cf:28:b6:
a0:a7:96:26:da:e6:2f:d8:2b:3c:e2:50:2b:d0:d9:
e6:15:79:51:38:72:73:c5:8b:fd:9b:53:8c:aa:32:
07:ea:8a:49:8b:6d:27:56:fe:e9:f2:c9:df:f5:42:
77:2a:80:39:31:33:9e:1c:0f:3a:35:38:76:b5:6b:
c3:20:53:85:30:a7:8d:6b:ef:0d:08:56:c4:26:5a:
89:82:14:35:84:97:c1:4c:f0:2a:d9:f2:d5:45:ee:
5f:ee:82:9e:e1:e4:aa:52:c8:4d:71:ee:e0:1d:c4:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F1:FD:53:EC:3A:BA:4E:85:0F:FB:F7:8C:E4:21:D4:58:50:91:0F
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3230352e3232332e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:99:5f:22:43:cf:56:f7:48:a8:22:7b:ad:bd:74:7d:6f:dd:
67:59:ec:fc:d1:e5:fe:1f:ad:5a:10:4c:b9:b0:b1:e0:79:b0:
e3:48:46:4b:53:68:9e:bd:f7:e3:46:c5:a8:cc:e1:fb:d2:13:
23:7c:b2:c6:b7:ec:12:d9:0d:09:1e:99:26:c1:89:79:99:e4:
d0:f9:55:39:e0:94:7c:f2:53:79:21:0c:26:2f:52:81:aa:a7:
9c:ce:eb:65:af:ec:06:61:7b:d9:14:c3:7b:95:83:69:b6:d8:
e9:23:04:5d:55:d0:3f:6a:8d:ee:2e:27:c4:0a:3d:f5:12:e3:
8e:e9:d4:90:26:63:6e:98:96:1e:fe:c7:82:fd:7e:dc:7f:66:
b1:de:9b:33:80:40:ea:50:bd:e5:35:ea:37:64:98:3b:dc:bd:
67:e4:8c:bf:d4:21:23:1a:ed:ca:30:d2:77:44:ac:3a:53:40:
52:c0:65:ed:fb:dd:97:91:2a:9b:75:1e:7a:6d:a9:2f:01:f5:
2b:98:05:74:39:c7:9f:82:ef:55:47:db:4b:9f:3a:ff:b7:e9:
1a:c5:bc:17:b8:68:0c:47:32:f3:49:05:44:a9:71:1c:8d:66:
9b:07:71:fb:20:a2:fe:c8:c8:0d:32:06:0b:59:0e:81:27:1f:
c0:ab:8a:7f
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUV7ixWbs9puU3CRwG+J8vKfZ51K0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTEwMTMwNzUwMDhaFw0yNjEwMTIwNzU1MDhaMDMxMTAvBgNV
BAMTKDZBRjFGRDUzRUMzQUJBNEU4NTBGRkJGNzhDRTQyMUQ0NTg1MDkxMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNd6L66jdiZQ7fMOlUlR/rSQb
SVPhzutyp4eKzqj5otreZuQHRgS3r1edNKs2yL4WDmC6LMg+ZRR/doS3GDSiYzeT
r8QIpfszrG+Nmv4Ab8NU75UDGhbWiNt581Y9Ens0J1+Vh7bthicFq7lFGtYh4Hba
lTUHz8fz1ObLwWZYD3Ffdv+QIAS9X6BxMoADXaOLCM8otqCnliba5i/YKzziUCvQ
2eYVeVE4cnPFi/2bU4yqMgfqikmLbSdW/unyyd/1QncqgDkxM54cDzo1OHa1a8Mg
U4Uwp41r7w0IVsQmWomCFDWEl8FM8CrZ8tVF7l/ugp7h5KpSyE1x7uAdxKBLAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUavH9U+w6uk6FD/v3jOQh1FhQkQ8wHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzODM1MmUzMjMwMzUyZTMy
MzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzgzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnN3zANBgkqhkiG9w0BAQsFAAOCAQEAIZlfIkPPVvdIqCJ7rb10fW/dZ1ns
/NHl/h+tWhBMubCx4Hmw40hGS1Nonr3340bFqMzh+9ITI3yyxrfsEtkNCR6ZJsGJ
eZnk0PlVOeCUfPJTeSEMJi9SgaqnnM7rZa/sBmF72RTDe5WDabbY6SMEXVXQP2qN
7i4nxAo99RLjjunUkCZjbpiWHv7Hgv1+3H9msd6bM4BA6lC95TXqN2SYO9y9Z+SM
v9QhIxrtyjDSd0SsOlNAUsBl7fvdl5Eqm3Ueem2pLwH1K5gFdDnHn4LvVUfbS586
/7fpGsW8F7hoDEcy80kFRKlxHI1mmwdx+yCi/sjIDTIGC1kOgScfwKuKfw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:40 2025 by rpki-client