Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35392e302f32342d3234203d3e20323132333834.roa
File: 322e35392e35392e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier: SNmj9IrMgAHecGPb1vGXZZRyJ45JBy5HeblBE1q64QU=
Subject key identifier: 9D:17:98:D7:FF:16:E2:04:BE:95:7D:44:2F:EF:1C:C6:96:ED:82:4C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6CD84F4015C17363E6C4A4D08782770F5918E787
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35392e302f32342d3234203d3e20323132333834.roa
Signing time: Wed 13 Aug 2025 13:54:13 +0000
ROA not before: Wed 13 Aug 2025 13:49:13 +0000
ROA not after: Wed 12 Aug 2026 13:54:13 +0000
asID: 212384
IP address blocks: 2.59.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d8:4f:40:15:c1:73:63:e6:c4:a4:d0:87:82:77:0f:59:18:e7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 13 13:49:13 2025 GMT
Not After : Aug 12 13:54:13 2026 GMT
Subject: CN=9D1798D7FF16E204BE957D442FEF1CC696ED824C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:9a:e4:2c:f2:83:8c:86:17:a4:db:4f:e2:
5b:42:49:13:17:28:75:49:86:b9:ae:95:f5:93:ff:
40:69:66:09:54:79:cc:8e:fa:ef:69:10:78:7b:81:
32:90:e8:60:1a:06:6f:f6:14:94:ae:51:8c:aa:27:
a4:41:bf:3d:d6:3c:bb:dc:0a:b4:53:c2:9d:f5:85:
b4:f2:d6:4b:3c:16:5b:df:ae:a0:c9:d4:a8:27:3c:
e8:14:5c:57:35:11:72:ea:58:36:ef:d7:04:23:db:
10:ee:a0:7c:aa:ee:97:14:e3:66:2a:f5:e7:98:de:
72:82:26:b6:f7:a2:80:31:d5:15:c9:03:34:a8:10:
1f:0d:7f:7b:64:90:0a:1e:39:30:1e:51:7d:19:47:
8e:d8:11:fe:99:33:ce:06:42:bf:73:80:3f:f3:6d:
ac:f6:53:ea:47:42:c1:93:43:c2:61:3d:0b:dc:f1:
d0:64:cb:03:38:4e:02:cc:95:57:69:6a:62:6c:18:
4f:31:7d:72:4c:ec:3c:b3:66:11:9b:1f:69:f7:51:
b8:e2:3a:33:39:70:c3:3b:f2:f8:4f:3b:c1:c1:d0:
87:cf:4b:51:64:62:05:cb:0c:63:3f:51:2d:7c:d5:
cf:8e:bb:fc:ae:64:a5:ba:5f:dd:03:5a:22:96:b3:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:17:98:D7:FF:16:E2:04:BE:95:7D:44:2F:EF:1C:C6:96:ED:82:4C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35392e35392e302f32342d3234203d3e20323132333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.59.0/24
Signature Algorithm: sha256WithRSAEncryption
25:11:21:94:70:73:b6:ff:ff:0a:6f:d5:4a:b2:b1:4e:f3:0c:
3d:2d:c4:86:49:bf:35:d6:96:9f:b8:c3:75:db:cf:58:6f:fb:
c6:0b:05:24:0e:37:89:b0:32:51:34:0b:78:d3:51:d6:47:7f:
83:99:ba:ac:e1:a6:88:89:83:87:42:07:3b:96:79:2c:f6:47:
0c:c6:0d:bd:a8:01:1b:7e:82:fc:bd:8a:ac:48:d5:6b:f1:bd:
5d:01:60:10:2d:e1:09:1f:dc:0e:62:82:c5:df:82:93:7d:34:
19:f2:f1:55:46:0f:bf:1c:26:8c:57:cd:1a:f0:8c:d8:3b:86:
17:df:34:ca:26:f9:dd:a3:fc:cd:ba:10:55:63:65:d9:43:f6:
53:d4:81:71:2e:d5:a7:18:65:61:b5:ec:45:d6:48:80:95:28:
a6:b3:fd:3b:8c:b6:6c:75:cf:cc:48:31:8f:ec:36:f6:6d:25:
14:77:49:e3:be:02:48:f9:07:15:1e:84:85:24:a0:37:29:b2:
e8:14:4f:94:60:9c:6b:73:15:78:bc:f9:7b:92:fb:99:0e:a0:
bc:f4:f5:36:6e:41:95:9e:41:29:ae:47:50:8e:f3:d3:7d:c2:
34:df:30:72:e8:1d:1a:f8:27:bb:3d:f6:e4:6c:d5:4a:82:73:
4f:3d:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:19 2025 by rpki-client