Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa
File: 3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 9BQlkuwOuPyXvuvnOIpRrrItcJ412PckV00AOrBJhqk=
Subject key identifier: 3C:43:99:2C:E4:71:B6:2B:9F:75:E6:D4:82:BC:B0:C4:D1:49:B3:A8
Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Certificate serial: 4C0107164B8C6F9B230C7CEDD676EBEA8EA1DD95
Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa
Signing time: Mon 18 Aug 2025 16:06:55 +0000
ROA not before: Mon 18 Aug 2025 16:01:55 +0000
ROA not after: Mon 17 Aug 2026 16:06:55 +0000
asID: 9304
IP address blocks: 185.229.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft
rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:01:07:16:4b:8c:6f:9b:23:0c:7c:ed:d6:76:eb:ea:8e:a1:dd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9
Validity
Not Before: Aug 18 16:01:55 2025 GMT
Not After : Aug 17 16:06:55 2026 GMT
Subject: CN=3C43992CE471B62B9F75E6D482BCB0C4D149B3A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:c1:4e:ae:33:35:12:4e:63:2e:7e:7a:74:
15:a5:bb:78:8f:ea:60:68:3c:2e:b1:35:b4:30:3c:
5c:4e:4e:f7:e8:07:3d:94:a8:34:4c:4d:4b:38:ef:
29:5e:ab:78:5e:20:b5:10:24:59:f8:e3:3c:41:9d:
e3:80:f3:fe:80:f5:be:b4:ed:bd:b1:2e:1b:ca:7f:
f3:84:a0:3f:1b:8b:63:95:06:24:0c:3a:b8:2e:1b:
76:da:4e:f4:e4:cb:90:1f:e3:5b:29:06:b4:2a:aa:
73:f6:16:0c:55:6f:5b:6c:05:95:65:bc:3c:bb:a2:
93:8a:d6:f9:33:90:76:b4:3e:9d:29:07:ce:91:46:
6c:95:2a:d3:25:b3:eb:e4:50:0d:83:82:5b:b2:65:
ee:eb:43:a6:aa:bb:b5:c9:c0:7d:6a:4d:2a:87:3e:
83:df:9c:13:89:9d:24:98:06:3a:55:20:29:fa:57:
f7:3a:2d:9d:47:cc:f0:d9:b4:4a:fd:f0:c8:fe:61:
36:ea:16:20:d6:ac:4a:24:70:7c:0c:15:d8:26:8b:
aa:f5:f7:b8:c4:38:c7:46:22:ec:44:03:07:22:47:
25:eb:c9:e2:63:83:e4:25:79:47:5b:7a:19:f0:67:
d0:74:d3:36:51:17:7f:a3:92:d1:27:73:e6:2c:a7:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:99:2C:E4:71:B6:2B:9F:75:E6:D4:82:BC:B0:C4:D1:49:B3:A8
X509v3 Authority Key Identifier:
keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3138352e3232392e3230302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.200.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7d:5a:38:00:b4:35:f2:c5:20:67:3b:1f:d6:5c:bb:36:26:
3f:0e:fa:36:0b:15:42:0b:94:cc:68:bc:9b:ea:dd:a4:bd:8f:
2e:f8:97:b7:c9:1f:79:51:7f:f7:db:ba:96:fb:a5:48:e6:cc:
03:e1:b2:c0:14:69:9a:97:ae:bd:ba:fc:5a:62:0f:ba:a5:01:
b4:02:e4:b0:71:20:28:1b:27:ac:c6:8a:f1:67:48:c2:b2:4d:
30:13:e9:d0:cc:b6:c7:95:bf:03:74:94:2f:c9:29:82:3e:bb:
16:fd:73:c0:8a:b0:7a:c0:b8:59:a6:47:96:03:53:4a:e9:68:
49:ce:a0:a0:3c:4c:1d:41:5d:6d:fa:8a:30:60:cb:76:e5:d4:
fe:0b:46:4d:07:ba:24:0f:88:d8:5e:fc:79:00:02:a6:14:1f:
88:15:f2:92:91:19:1a:9c:27:27:f7:25:16:80:1a:43:a1:46:
62:57:eb:fc:65:f3:6a:16:94:77:4d:a1:14:eb:00:c0:db:14:
da:bd:df:77:b9:54:1c:4b:cc:e2:b0:f5:da:e8:33:f7:7b:65:
95:16:6e:5a:d0:e1:85:f6:00:9f:c6:41:30:48:d3:1f:fa:72:
eb:c7:0e:0e:02:da:89:d1:7c:1f:1e:d0:6e:de:17:a3:21:29:
0d:9b:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:19 2025 by rpki-client