Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (raw, json)
Hash identifier: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=
Subject key identifier: 14:52:57:CC:3F:A3:B8:14:90:EA:71:62:D1:4B:36:01:2B:B0:24:F3
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7B4C2FB47D6BD24DC55D8034E0BC637AAA8766F3
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa
Signing time: Mon 18 Aug 2025 11:54:13 +0000
ROA not before: Mon 18 Aug 2025 11:49:13 +0000
ROA not after: Mon 17 Aug 2026 11:54:13 +0000
asID: 216159
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:4c:2f:b4:7d:6b:d2:4d:c5:5d:80:34:e0:bc:63:7a:aa:87:66:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 18 11:49:13 2025 GMT
Not After : Aug 17 11:54:13 2026 GMT
Subject: CN=145257CC3FA3B81490EA7162D14B36012BB024F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:94:e7:fe:4e:f5:ea:ba:72:36:79:54:0b:b7:
e8:29:c2:b6:f5:5c:07:a1:80:d4:ef:ca:61:56:3e:
4d:c5:5a:ca:de:c7:4e:31:57:8f:ab:a5:58:1a:93:
8b:1e:1d:ed:b2:94:9a:79:07:c5:9f:89:7f:ad:cd:
cf:64:53:67:71:8f:07:95:62:d6:26:2b:f8:18:81:
e6:07:34:74:17:d6:9c:17:4d:da:e0:fc:67:78:65:
60:b5:09:81:01:e0:28:80:46:79:2b:0c:d0:6d:fb:
d9:ee:a4:3c:d4:37:73:7e:ee:86:6b:24:79:6c:db:
64:29:39:99:6f:c6:ac:03:ef:3e:54:7d:c6:fe:bc:
51:d6:54:ef:f9:b5:13:9d:1d:59:68:c8:a3:9b:d5:
80:8d:9b:6d:ad:7e:46:ce:f7:5a:88:bf:54:58:df:
e1:17:a7:60:8f:77:0a:c8:28:f1:3b:e3:f7:df:01:
f7:10:4b:13:c5:94:81:28:58:6a:65:23:5d:6d:d2:
18:cd:ef:bb:06:a0:9a:8d:6b:d0:bb:0a:91:b1:2c:
09:43:6d:b7:ef:c8:5b:47:83:a7:60:42:5f:61:eb:
ab:b4:7c:53:ea:1f:fe:0b:ca:19:00:1a:3f:1d:18:
60:26:21:d1:fc:f0:2c:7a:54:16:ea:29:41:15:04:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:57:CC:3F:A3:B8:14:90:EA:71:62:D1:4B:36:01:2B:B0:24:F3
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0b:88:b6:c7:8f:2a:0d:d5:df:c7:0f:59:e9:c7:e9:36:19:
53:0f:e8:19:74:d4:df:6d:63:68:7f:50:8d:0e:c3:5e:a1:de:
68:2e:e4:cd:d4:27:10:2f:60:cf:19:c9:6d:8a:e3:82:6b:e6:
28:45:6e:2f:dd:04:cb:e9:de:05:ed:a9:dc:3b:34:33:13:35:
42:36:fa:30:ce:03:f8:d8:02:3c:e4:b1:47:f2:8a:c1:8f:db:
3f:16:12:65:e6:4e:03:3d:8c:b5:a3:7e:be:2f:f8:a6:68:f6:
66:2b:83:41:c7:df:6f:83:33:13:e1:af:25:43:8d:33:c7:4b:
53:33:ee:9d:b8:a8:c7:de:47:c4:24:ea:83:3f:6d:2b:e8:64:
4f:40:f9:43:52:76:d9:39:96:23:c3:98:61:27:34:15:52:1c:
3f:b2:f0:85:b4:3a:01:25:5f:58:79:8d:79:89:84:3e:49:36:
76:12:36:26:a9:e6:e2:bf:12:13:23:74:5e:20:1a:ec:ea:ca:
0a:90:dd:e1:7e:f1:c5:7b:d3:36:c7:90:ac:d8:99:63:4d:25:
b6:06:d9:99:bd:79:f1:bf:d5:84:ec:f5:7e:29:4e:2f:70:e3:
38:07:d5:02:5a:9f:90:00:d8:48:9f:e9:36:3f:2b:a6:92:af:
38:4c:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:54 2025 by rpki-client