Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e203432383331.roa
File: 3138352e3137322e3137342e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: N7qOUIH+xqYU2+HzGZpmKDzBctOBGm6qh/Hci1ZrWZo=
Subject key identifier: DF:D4:A0:54:6B:15:5F:E9:5B:5C:22:49:04:FD:E4:3D:08:0C:12:83
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4615ADD589DF6C65BB6F51733FA2312536612B67
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e203432383331.roa
Signing time: Fri 19 Sep 2025 04:21:21 +0000
ROA not before: Fri 19 Sep 2025 04:16:21 +0000
ROA not after: Fri 18 Sep 2026 04:21:21 +0000
asID: 42831
IP address blocks: 185.172.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:15:ad:d5:89:df:6c:65:bb:6f:51:73:3f:a2:31:25:36:61:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Sep 19 04:16:21 2025 GMT
Not After : Sep 18 04:21:21 2026 GMT
Subject: CN=DFD4A0546B155FE95B5C224904FDE43D080C1283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:56:b3:4c:1e:63:5b:4e:6d:51:e3:af:09:
c8:07:be:af:02:ed:c4:57:91:95:a1:bb:07:41:7b:
99:fd:d2:eb:15:c5:19:be:6f:31:cf:4c:38:9c:f1:
b0:cf:16:cf:19:49:00:76:e9:da:7c:6c:d7:de:15:
1e:b5:40:20:df:7a:c0:0c:d8:1d:39:5b:55:e0:60:
fa:a7:a8:5b:7e:dd:1e:e8:8b:0b:d2:67:eb:5d:42:
2a:03:c3:66:41:54:ca:cd:d7:4a:12:01:98:38:cc:
f6:ca:2d:04:fc:1b:6e:77:ee:d2:85:0c:83:c2:73:
e9:4b:8e:99:b4:c3:cb:0d:89:f3:60:46:68:23:7b:
af:6f:57:5e:77:c4:af:cc:ad:4a:2d:5c:6c:e9:f6:
0d:83:63:9a:3d:1e:53:44:82:0a:c9:be:e5:5b:92:
29:da:38:eb:5c:dd:e6:1c:ae:7c:2d:23:bb:f0:60:
af:b8:cb:1e:ac:62:32:1d:99:ed:3b:07:b2:55:67:
ce:e8:04:ff:60:3b:1a:ec:cc:29:79:6b:cf:01:ee:
8d:6a:48:18:bc:7e:26:26:b7:4b:c7:e2:8c:73:ab:
8a:da:3d:53:08:b7:3b:7d:07:dd:99:09:ef:3e:46:
04:bf:bd:cd:1a:cc:3b:c7:76:d9:46:e4:7e:f0:9f:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D4:A0:54:6B:15:5F:E9:5B:5C:22:49:04:FD:E4:3D:08:0C:12:83
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3138352e3137322e3137342e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.174.0/24
Signature Algorithm: sha256WithRSAEncryption
74:96:a9:26:92:0a:90:92:b3:1a:46:36:1e:e7:7e:53:25:c3:
ca:23:0f:af:5a:45:7b:ba:5b:a2:02:85:61:05:9b:16:18:2e:
44:49:9f:2b:b8:4e:a3:8d:b0:ab:56:ec:43:9f:ca:d1:cc:56:
b0:0e:3b:38:d4:f1:c0:91:0f:54:9c:72:6a:b6:3e:5b:d4:d9:
ba:fa:d1:7b:89:5c:55:c1:04:d7:9f:b3:5a:17:d5:f0:a7:49:
20:35:47:20:db:e7:20:74:e4:e9:39:ec:bd:49:ab:20:9c:6d:
dc:f8:ca:40:a8:59:ec:92:88:ca:9a:6b:e5:0c:a4:b8:e5:d9:
fb:fa:b7:db:6f:24:51:c5:fc:a8:15:a0:16:88:50:17:6e:a8:
87:e1:46:3e:32:2b:7a:e5:16:df:a3:6a:b8:ba:84:23:83:7c:
95:d6:73:b1:7f:39:f3:2d:69:83:66:11:62:31:0d:59:1b:ed:
7a:6b:b3:e7:b8:b5:03:57:4a:45:07:c7:16:53:17:dd:e4:ec:
52:42:1c:04:9e:b4:6e:ee:30:c7:d5:ed:4a:ef:43:68:1e:5f:
28:52:e2:f8:7c:22:c8:65:80:cc:7b:bd:53:df:85:79:fc:93:
24:17:28:cb:8f:0f:30:36:ac:4f:30:4e:86:ea:52:db:59:ae:
2b:8c:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:19 2025 by rpki-client