Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32342d3234203d3e20323032363536.roa
File: 3138352e342e3232322e302f32342d3234203d3e20323032363536.roa (raw, json)
Hash identifier: 7+PJTzl6YqhhdT7Y7Q51sqpgG5tDVlCusGfPuMFcsEk=
Subject key identifier: CB:CE:BF:1D:9B:DE:87:07:04:F3:21:D2:45:99:6D:EA:47:1B:AC:9D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 6AFA5922D833973D646798F43B7EBA6FC9278858
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32342d3234203d3e20323032363536.roa
Signing time: Thu 18 Sep 2025 07:55:07 +0000
ROA not before: Thu 18 Sep 2025 07:50:07 +0000
ROA not after: Thu 17 Sep 2026 07:55:07 +0000
asID: 202656
IP address blocks: 185.4.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:fa:59:22:d8:33:97:3d:64:67:98:f4:3b:7e:ba:6f:c9:27:88:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Sep 18 07:50:07 2025 GMT
Not After : Sep 17 07:55:07 2026 GMT
Subject: CN=CBCEBF1D9BDE870704F321D245996DEA471BAC9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:a7:30:4d:dd:94:54:51:6b:9e:9c:e1:ad:
16:e0:fd:1e:d0:4a:7d:b3:d1:f1:cf:12:db:9a:36:
8a:03:75:11:b1:e7:dd:5f:a6:c5:81:22:61:ef:2e:
b4:6a:97:22:bd:9f:28:71:2b:f7:b8:20:89:75:34:
f4:26:8c:19:37:ec:b1:4e:98:a9:34:ad:f1:4c:93:
98:ad:43:d0:93:31:e0:fb:e7:d8:27:90:33:8a:90:
bf:f8:a6:c7:de:4f:32:f5:f6:ec:ad:26:c7:12:9e:
0e:11:27:17:aa:72:1d:04:85:13:64:df:37:ef:80:
b2:e2:6b:ba:db:e8:e1:42:d2:8b:a8:cf:96:7d:bf:
2c:f0:92:9b:0e:f0:88:54:5a:52:83:f7:d5:c9:ed:
ec:eb:6b:b0:93:3a:c7:93:bc:68:b1:37:ea:90:52:
36:8c:b5:92:c0:f6:f8:ba:ab:23:c6:17:dc:1d:d0:
22:90:3b:22:1d:2a:a7:2c:a9:4e:b1:27:5f:a6:10:
59:02:84:dc:84:80:4f:b4:ed:90:33:e1:07:50:18:
b9:03:09:77:66:2c:c3:78:07:a9:93:6c:4f:0c:5a:
2a:6e:14:f7:0e:3c:96:4e:dd:5a:8d:9d:8f:d2:3b:
a5:0f:ab:bd:a4:2e:6c:73:b0:f2:bc:e7:61:3d:aa:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CE:BF:1D:9B:DE:87:07:04:F3:21:D2:45:99:6D:EA:47:1B:AC:9D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232322e302f32342d3234203d3e20323032363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.222.0/24
Signature Algorithm: sha256WithRSAEncryption
73:96:f3:c6:4c:7f:fe:30:a8:94:1c:e2:db:9a:78:8a:05:db:
6a:59:05:ce:7c:80:41:70:c6:db:25:a4:88:c4:d8:f3:84:6a:
92:d9:27:87:19:b2:bf:16:a4:f5:bc:9b:ab:70:e5:7f:ee:13:
34:63:d1:3f:c6:60:b5:a0:ff:21:71:09:90:51:4b:d1:12:24:
41:49:36:5b:22:86:19:9f:1d:86:72:db:6f:96:4d:41:d8:45:
61:0b:71:83:41:cd:e7:06:64:4b:28:79:0c:91:3d:a2:c7:ad:
d0:90:22:50:77:4e:ac:6f:68:9b:d8:be:fa:fa:54:ab:0f:14:
95:29:24:5a:ce:15:5b:57:1b:9d:28:9d:f3:36:49:f5:3a:6a:
d2:bb:dd:16:08:fd:57:7a:ec:9a:40:37:8d:24:08:c6:ec:d6:
cb:ce:06:de:e0:08:c2:ae:50:23:e7:fe:b0:ea:85:c9:ae:9f:
1f:af:bf:91:be:e2:96:2b:fd:64:eb:87:86:94:27:f8:91:1c:
42:76:bb:99:0f:d2:ca:8b:17:4e:93:a8:45:68:3c:25:ed:be:
ab:fc:ba:ec:92:b3:18:ad:b1:30:2b:83:0e:15:85:5d:24:c2:
55:a9:8b:f6:5d:75:d8:a2:5c:00:dc:70:b3:9c:29:1b:42:40:
9d:d7:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:13 2025 by rpki-client