Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
File: 3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: q8UnB81lIhm9iRtbfcpWiJ1LFvzq9qG4sbAzAaZb65c=
Subject key identifier: 7A:4B:E5:50:3D:EC:97:4F:22:CE:48:BC:83:D6:93:14:48:0B:FA:A3
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2D41B943418FE2AC0D5FCB7EAFE5F39D7C67EACC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
Signing time: Thu 11 Sep 2025 14:55:07 +0000
ROA not before: Thu 11 Sep 2025 14:50:07 +0000
ROA not after: Thu 10 Sep 2026 14:55:07 +0000
asID: 7018
IP address blocks: 185.222.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:41:b9:43:41:8f:e2:ac:0d:5f:cb:7e:af:e5:f3:9d:7c:67:ea:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 11 14:50:07 2025 GMT
Not After : Sep 10 14:55:07 2026 GMT
Subject: CN=7A4BE5503DEC974F22CE48BC83D69314480BFAA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:49:0e:0c:b7:6a:82:bf:04:60:06:de:03:
db:0e:58:e3:6e:32:d9:76:bb:7b:89:e4:15:d1:6b:
93:6b:25:d1:26:57:4d:bc:e9:cd:09:76:da:bb:0e:
40:19:f6:73:eb:8d:c3:5b:8b:e4:3d:08:16:78:f5:
04:96:b5:77:12:24:30:86:a8:20:9f:47:e2:28:43:
7c:32:81:7f:53:6a:1b:e2:e2:53:5b:63:3c:f6:9f:
af:3b:59:51:92:f1:7f:19:a5:a3:67:a5:15:96:f6:
a4:22:e7:33:f3:d0:c9:97:08:e7:89:08:2c:bd:41:
5a:42:38:87:63:1a:5c:fb:a0:0e:cc:87:31:dc:34:
9a:1a:00:d5:e0:70:2a:05:35:0d:57:78:7a:51:3d:
f8:17:57:db:5c:70:27:3c:c0:a1:21:90:e7:0b:dd:
a8:b9:67:d6:c8:f7:a0:33:22:96:db:e8:9a:b8:a3:
62:7a:08:d4:d0:a8:9b:5c:18:d4:e4:ab:67:9d:37:
2c:dd:65:2e:42:c8:02:e2:cf:dc:0f:b2:12:50:60:
2f:71:a0:5e:00:84:6d:f2:5c:0b:6d:20:a1:ca:21:
9a:e4:2d:de:33:1c:52:f1:96:bd:9e:f0:d8:3f:81:
99:7e:69:75:74:57:02:a2:b9:b8:1a:74:8e:c0:0e:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4B:E5:50:3D:EC:97:4F:22:CE:48:BC:83:D6:93:14:48:0B:FA:A3
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e3232322e3138342e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.184.0/23
Signature Algorithm: sha256WithRSAEncryption
02:cd:2e:01:b3:94:9a:c4:97:c8:45:8e:9e:1c:03:dc:45:c0:
e3:df:01:0a:25:f8:b7:16:4d:9e:7a:b8:83:c8:bf:19:4e:5c:
38:34:24:80:fe:b8:22:bb:aa:ef:50:ce:06:9a:64:7f:cc:b7:
7a:67:8f:c8:38:15:c8:f8:25:33:3c:09:56:98:e1:b5:8f:a2:
94:3b:23:ad:f0:01:84:bf:da:de:e2:17:b7:30:14:01:86:65:
52:b1:25:15:94:85:f3:5a:cd:36:3f:e7:ab:74:e1:9a:d3:2e:
09:e4:d8:12:ad:ff:2e:22:f2:d3:40:bb:e7:7e:58:a5:8d:3f:
1a:bd:2a:46:f8:dc:af:be:d3:f3:b4:c9:0b:23:89:ab:96:7e:
30:25:51:03:e5:e6:8c:72:ee:47:cf:4c:1d:db:bb:e7:37:c1:
2c:74:0a:12:d0:65:1a:67:44:e7:bc:53:11:d9:5d:73:f1:51:
89:98:ce:32:6b:2c:a2:c1:3b:83:9e:a6:7e:62:ba:41:d8:56:
bb:06:05:aa:63:94:c4:e3:97:dc:d4:82:81:6b:13:84:5c:53:
0e:f2:78:45:43:6d:03:70:22:0c:60:22:e6:cb:72:bc:34:25:
30:c3:fb:fc:dc:a3:aa:66:e8:eb:ba:d4:a7:21:e4:61:74:f0:
28:99:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:10 2025 by rpki-client