Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e2039333034.roa
File: 3135392e3235332e312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: dcYXeL7R4SgGVjoaZN9OWp91BkdwHsg557vymFY3FPQ=
Subject key identifier: 0C:16:24:D6:83:7F:D9:E6:6A:D1:5D:5F:D7:86:3C:E3:B2:71:52:61
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 55AA6753AB226A7BDE7C1CC87D2FC1B5FC15BA80
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e2039333034.roa
Signing time: Fri 15 Aug 2025 07:52:38 +0000
ROA not before: Fri 15 Aug 2025 07:47:38 +0000
ROA not after: Fri 14 Aug 2026 07:52:38 +0000
asID: 9304
IP address blocks: 159.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:aa:67:53:ab:22:6a:7b:de:7c:1c:c8:7d:2f:c1:b5:fc:15:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Aug 15 07:47:38 2025 GMT
Not After : Aug 14 07:52:38 2026 GMT
Subject: CN=0C1624D6837FD9E66AD15D5FD7863CE3B2715261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:57:71:08:68:1d:00:b4:8a:e7:d3:d9:d7:fb:
11:cc:42:9c:84:67:c4:be:6a:34:e5:15:41:50:4b:
d6:f4:05:3a:e3:d3:3f:bc:e1:22:34:9d:b4:8c:d0:
c1:ba:5a:a1:0d:a8:00:a8:06:f8:98:5d:d9:b7:2b:
b4:57:33:a6:78:04:9b:04:e3:be:48:0c:33:55:48:
92:d6:11:ad:94:7e:b2:15:54:91:27:f2:61:91:8f:
9b:10:3e:ee:82:7a:50:1b:38:f1:b7:e7:ac:87:62:
c5:df:bb:cc:63:11:6d:bb:39:eb:be:54:1c:4d:aa:
51:f1:78:97:05:c7:12:51:5d:a4:13:59:a4:81:6b:
bd:9e:53:ef:ad:fe:8f:c3:7e:fe:6b:27:05:03:00:
43:35:ad:94:1c:a8:00:62:95:3c:26:7a:49:79:a0:
66:bf:d1:b3:a0:1f:d0:38:b5:db:f1:ed:ae:f1:83:
d7:f4:11:99:f8:03:79:38:27:17:1a:00:fd:e9:c8:
f5:30:ca:2c:a6:5a:cd:be:d6:ff:d8:97:90:00:25:
8f:ea:26:ba:28:2c:28:1d:1b:65:42:0a:f5:61:ca:
a4:79:9c:ef:19:ec:ee:60:72:98:1e:93:ab:96:5a:
67:a1:75:a8:68:46:1b:4d:60:15:1c:09:a2:4f:ed:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:24:D6:83:7F:D9:E6:6A:D1:5D:5F:D7:86:3C:E3:B2:71:52:61
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e312e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e3:08:9d:ad:d7:e5:7b:7c:13:37:76:2a:1d:f7:f8:46:5c:
4d:38:6f:fc:83:5a:fa:a9:96:9a:86:50:06:93:95:60:4e:af:
11:0e:67:b1:f0:6a:b3:f5:33:6d:69:0b:f0:b0:21:b2:dc:61:
95:04:83:95:8e:bb:66:da:71:c8:d9:2d:0e:87:6c:27:b1:07:
a8:89:b0:fb:4b:4e:e6:70:2c:31:72:b7:6b:22:ff:51:9f:aa:
17:94:84:78:01:e5:36:d1:86:7a:1e:8a:88:f7:d7:7a:c9:4f:
6a:e3:2f:88:c3:f2:0c:34:92:b0:72:d0:96:7c:4b:2f:51:d0:
f9:45:0a:2f:80:35:c0:3e:2a:f6:38:d0:b1:84:c5:97:10:99:
0f:7b:77:8b:73:33:41:52:cb:f2:a3:74:20:10:84:a0:02:9c:
31:f1:b4:40:ad:b7:56:b4:40:a0:a9:2a:46:77:92:96:cf:e1:
2e:ee:dd:03:73:2e:13:02:08:bc:90:02:d8:6d:8e:88:ea:6e:
e6:c2:e2:69:d0:ce:8b:cc:ff:b5:13:14:b1:61:dd:65:cc:a7:
ef:f9:00:f3:3d:71:de:65:c4:ec:1e:f8:88:6c:05:a4:51:90:
06:6a:d4:3e:11:0c:36:77:29:34:87:16:c2:c6:94:f9:75:34:
38:6d:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:48 2025 by rpki-client