Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e2039333034.roa
File: 3138352e322e3136302e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: vl2Nht2rNjTXwCm1D2P9y8kdqhZOwgeZgf4gpkMvcp8=
Subject key identifier: 73:0A:E3:8C:37:E4:87:30:42:24:AF:CE:1B:D3:4D:BF:E1:A5:9D:A9
Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial: 0D8FB01A6633DEDB50434F9F63B5AEED7DD24909
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e2039333034.roa
Signing time: Fri 22 Aug 2025 08:42:15 +0000
ROA not before: Fri 22 Aug 2025 08:37:15 +0000
ROA not after: Fri 21 Aug 2026 08:42:15 +0000
asID: 9304
IP address blocks: 185.2.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8f:b0:1a:66:33:de:db:50:43:4f:9f:63:b5:ae:ed:7d:d2:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Validity
Not Before: Aug 22 08:37:15 2025 GMT
Not After : Aug 21 08:42:15 2026 GMT
Subject: CN=730AE38C37E487304224AFCE1BD34DBFE1A59DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:56:63:57:b3:b7:09:62:93:05:e1:88:54:
d7:ef:8d:b4:d8:ee:bc:4e:d6:ca:53:b3:f2:d5:b0:
78:aa:be:79:23:21:42:29:6a:b2:a5:74:d5:71:39:
dc:33:ca:8d:15:71:93:2f:e7:96:b5:49:6e:9f:51:
8a:6b:cf:7f:3f:07:d9:62:0a:64:bd:3f:17:56:d4:
c5:87:79:86:69:d6:6f:24:2f:c8:44:f7:87:fe:ad:
0c:e7:95:00:31:77:13:61:a9:ac:41:84:ef:8d:c9:
e7:f2:bb:1d:48:da:e4:fe:e6:56:f2:92:6a:e7:0f:
76:28:86:a8:14:f3:60:08:f8:91:01:93:1e:08:0d:
c7:8b:ad:94:10:a5:61:f9:32:00:41:c8:5f:ff:8d:
60:30:62:af:09:c2:80:ab:f7:66:91:1c:7f:e5:6f:
51:ef:2d:f4:0e:0e:c1:0c:ee:0d:23:02:03:d5:ef:
07:9c:a5:91:2e:15:fd:32:0a:3a:5a:75:2f:f9:34:
84:77:19:8e:bf:e6:b0:4b:90:bb:b5:27:92:32:23:
fc:e1:18:25:30:f5:58:bd:4f:30:99:de:76:2e:62:
b3:a8:3b:2e:6e:a8:94:d9:b3:c2:bb:46:32:3d:d6:
40:e1:0d:b3:ee:7f:ba:b8:65:91:0f:bd:24:04:cd:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0A:E3:8C:37:E4:87:30:42:24:AF:CE:1B:D3:4D:BF:E1:A5:9D:A9
X509v3 Authority Key Identifier:
keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/3138352e322e3136302e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.160.0/23
Signature Algorithm: sha256WithRSAEncryption
77:87:ff:a5:f3:91:49:78:88:9a:65:f6:df:d8:de:0a:14:48:
af:5e:4a:a0:b9:91:45:bc:2d:39:b3:d8:34:23:e6:2d:7a:30:
46:39:4a:60:de:d6:4f:95:76:f8:e6:cf:e0:86:7c:45:99:07:
5f:f2:76:a4:a1:8a:c7:d6:80:eb:80:bd:c9:bd:a4:3b:75:c3:
cf:c8:ff:35:68:03:cf:37:26:2f:db:1f:a7:5c:a8:1b:ca:10:
9f:3e:17:d2:4c:b4:0f:46:f4:ef:d4:ea:7a:07:1d:8e:d6:3e:
19:a5:ea:56:13:9d:66:96:9b:6d:00:2a:02:66:fb:81:bc:c3:
6d:ef:a4:69:3e:44:c2:53:fa:7b:db:fc:59:32:f3:7a:68:59:
3d:e7:20:aa:c7:c6:52:82:f9:d3:90:2e:4e:e8:84:ab:37:df:
ff:9f:a5:51:0d:8d:b8:9f:5e:4d:59:da:61:d8:29:83:96:7e:
0c:7f:e7:ac:e7:37:db:9f:6f:dc:de:d3:ce:ab:48:eb:06:c6:
b5:00:3b:db:f1:50:a8:b0:a0:e5:51:a7:62:7e:17:d1:cc:25:
91:ac:f8:18:1b:bd:b6:95:d1:bb:e0:12:33:74:fd:73:fb:c6:
6f:72:91:7a:7d:46:78:e4:83:56:51:0a:34:57:d5:d1:58:30:
fa:b1:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:48 2025 by rpki-client