Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e20323134313433.roa
File: 3135392e3235332e372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: 8/3XzRXXjmYpSthB/PqRmvioB+R4a98BuFhtWRNYmtk=
Subject key identifier: D8:75:F3:68:A5:67:C3:FA:36:F3:AA:4C:18:DF:6B:32:5D:51:7B:F1
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 59E8BCBF4FF11DAD7C32C34C63FE9F78079337A3
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 19 Jun 2025 12:14:05 +0000
ROA not before: Thu 19 Jun 2025 12:09:05 +0000
ROA not after: Thu 18 Jun 2026 12:14:05 +0000
asID: 214143
IP address blocks: 159.253.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 09:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e8:bc:bf:4f:f1:1d:ad:7c:32:c3:4c:63:fe:9f:78:07:93:37:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jun 19 12:09:05 2025 GMT
Not After : Jun 18 12:14:05 2026 GMT
Subject: CN=D875F368A567C3FA36F3AA4C18DF6B325D517BF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:90:f6:c5:2e:56:b5:4f:5d:7a:9e:2e:0e:
c9:11:cf:b3:2a:a8:6e:6b:c9:d1:1b:5a:e8:a4:6f:
d7:a0:f4:8b:ef:e7:70:c2:31:49:42:75:5e:c9:c0:
37:e4:78:dd:5f:17:0b:48:b2:cd:d9:74:fe:f9:13:
3c:d5:c4:29:2a:1d:d1:42:74:4a:7e:95:71:c8:e0:
c6:00:19:9d:32:86:79:f1:e6:b8:8b:21:e9:f4:f5:
a4:70:3a:05:bb:3e:87:76:9d:29:74:6d:5f:7f:22:
47:8a:4c:e0:fc:ec:c2:aa:a8:6e:29:cc:af:7c:2b:
d1:5c:a4:cf:05:d0:84:09:22:c6:86:50:ca:dc:bc:
49:4e:8d:1a:bc:75:95:cf:15:cf:9f:ec:70:9c:18:
c8:a5:8a:04:ef:43:5e:b5:9e:c9:e6:bb:a5:d3:2d:
22:24:79:2a:93:49:f1:a7:10:55:99:ca:a1:f2:28:
15:95:4d:56:84:cc:11:54:6c:c2:7b:b9:da:75:8d:
a2:cd:3d:e0:35:f2:52:46:c5:6a:42:db:f6:36:71:
7b:3c:bf:bf:5e:5e:df:d8:32:64:c4:2e:39:26:5b:
34:d6:9e:9c:25:c3:37:43:c6:74:f0:2b:77:f3:56:
52:59:d3:ff:87:df:4a:84:49:9b:57:88:3b:b3:49:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:75:F3:68:A5:67:C3:FA:36:F3:AA:4C:18:DF:6B:32:5D:51:7B:F1
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e372e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ea:6b:73:a8:62:a3:fe:a0:d5:9f:f9:0b:16:c2:b5:ca:8f:
d1:af:43:2e:62:e6:0c:b2:e9:53:95:04:07:19:52:25:9f:e7:
b9:c3:fb:79:8c:9d:ef:68:7b:96:5c:06:50:df:cb:9f:81:da:
d5:f0:fe:f4:7f:26:24:e4:04:6e:fb:a6:de:ab:69:ed:eb:1b:
b5:95:41:20:2b:e2:1d:0d:46:8e:da:64:d6:b3:be:a6:28:a3:
e6:c2:6b:61:af:15:83:fb:24:86:55:35:c7:af:52:c1:ba:6f:
3e:a2:d3:f7:51:27:f9:c4:9e:7d:21:cc:44:49:c7:f1:d4:5e:
6b:fc:81:32:7f:3d:22:0d:c9:b3:cd:f5:f2:61:79:ef:02:61:
c8:31:74:57:ed:62:92:21:2a:6a:56:22:96:35:fe:f8:2d:4b:
15:8f:d8:7a:47:92:95:3d:fc:dd:8e:63:87:01:d0:bd:e9:00:
58:f3:48:71:f1:c1:e3:6d:81:44:7b:0f:10:9d:d6:8f:f1:cd:
ae:53:21:98:1d:63:7b:04:8e:59:86:10:2f:1a:1a:e5:e2:27:
82:dc:49:fe:cd:b0:e7:19:58:44:15:d3:14:ee:5e:7b:01:fd:
48:ee:2e:1e:42:f7:ef:3e:25:63:ed:bd:86:dc:50:73:77:b2:
79:b8:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:50:05 2025 by rpki-client