Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20313939303538.roa
File: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (raw, json)
Hash identifier: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=
Subject key identifier: 11:D9:66:59:FB:76:E7:5E:EB:F8:5D:95:EB:68:2B:EA:92:DD:75:6D
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5C60AFD50AD9722412D422D45F883EE69DC3D5F7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20313939303538.roa
Signing time: Thu 07 Aug 2025 07:54:13 +0000
ROA not before: Thu 07 Aug 2025 07:49:13 +0000
ROA not after: Thu 06 Aug 2026 07:54:13 +0000
asID: 199058
IP address blocks: 213.5.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:60:af:d5:0a:d9:72:24:12:d4:22:d4:5f:88:3e:e6:9d:c3:d5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 7 07:49:13 2025 GMT
Not After : Aug 6 07:54:13 2026 GMT
Subject: CN=11D96659FB76E75EEBF85D95EB682BEA92DD756D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:b8:f7:5f:a9:05:06:e4:39:f5:6d:c1:6c:
08:ea:4c:e9:df:ff:93:f0:79:af:c8:5b:81:4f:32:
27:4b:7d:b2:3f:51:16:2e:b7:06:b6:42:fe:9f:aa:
ab:34:7a:97:e0:6a:ac:60:a7:dc:24:e3:af:a4:8a:
ae:64:57:e0:77:8c:5c:7e:7d:98:6c:2a:bd:a3:da:
31:f2:bf:91:9e:08:94:3b:94:82:81:d6:1f:e4:63:
b2:0a:a7:37:db:ba:8f:b2:d7:12:94:1b:c9:c4:1e:
62:07:cc:58:3f:bd:3d:98:3c:bc:27:18:63:c2:97:
2d:c9:c0:ad:a3:25:9a:93:54:52:5f:b1:08:ba:26:
b0:1a:39:2c:e1:77:bf:10:e8:c6:d4:f0:73:f3:a3:
03:98:15:7f:25:37:7c:7b:e0:5b:a6:f9:71:d3:3d:
3f:2e:70:e1:99:ee:17:d4:81:7a:c1:17:63:cb:ec:
5b:eb:08:54:bf:f2:c8:3f:c7:66:b3:56:20:f3:bb:
fd:44:fa:33:d9:a8:51:85:9d:9e:8a:49:21:e4:3a:
47:d7:3d:a2:d3:05:39:23:04:4a:ff:f0:6b:03:cc:
c4:53:86:1e:46:dd:59:aa:ba:88:b1:40:ee:58:51:
58:e3:21:25:66:4a:25:38:25:50:e1:88:62:aa:1e:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:66:59:FB:76:E7:5E:EB:F8:5D:95:EB:68:2B:EA:92:DD:75:6D
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231332e352e3132382e302f32342d3234203d3e20313939303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ac:4f:5c:04:5c:9e:20:81:42:d0:6b:c7:d0:79:47:96:c0:
cf:45:8e:6c:55:48:60:7c:69:e1:ee:17:92:09:d5:a3:3a:72:
39:b7:70:aa:59:38:15:35:79:9b:65:a4:30:27:0e:d6:7e:c7:
8e:55:94:86:1b:78:70:5c:d2:3c:00:37:aa:f2:c8:fc:12:e4:
75:f1:65:13:62:40:0a:8d:7f:7d:f1:02:f5:9c:e3:ba:7b:17:
cd:22:21:92:a2:d2:d1:03:34:4d:30:85:ce:34:08:58:d9:32:
01:37:60:0d:fd:3a:9e:2a:7f:b6:be:6a:64:b3:c8:6c:4c:81:
2f:58:03:24:19:62:f9:3c:51:03:8f:3d:b2:2d:37:c8:65:c6:
36:2f:72:e1:26:78:3a:6d:c5:fd:c4:d0:fb:ba:ae:c1:01:51:
a1:63:b4:5f:09:a1:59:5a:53:78:0e:a9:23:6e:af:ba:2b:09:
5b:e6:b6:75:b9:9e:47:81:7a:4a:bb:9e:3b:32:6f:b1:ca:54:
49:09:83:69:18:a5:88:b3:c4:b7:21:7f:08:c2:2d:ad:9c:3a:
59:3f:f3:f1:ae:74:ee:94:3a:f1:7a:62:56:e6:ff:0c:b6:8e:
9f:88:02:6b:c3:9f:b1:fd:44:5f:86:97:1c:83:cf:42:18:e0:
5b:aa:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:42 2025 by rpki-client