Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20333936303236.roa
File: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (raw, json)
Hash identifier: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=
Subject key identifier: 3C:21:A5:88:25:5D:3A:19:3B:BE:D0:6E:97:F2:CB:87:71:63:36:7B
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 789EBFEF067E3C50B3210AF05461E7C0AB7D96F2
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20333936303236.roa
Signing time: Mon 11 Aug 2025 21:54:13 +0000
ROA not before: Mon 11 Aug 2025 21:49:13 +0000
ROA not after: Mon 10 Aug 2026 21:54:13 +0000
asID: 396026
IP address blocks: 83.138.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9e:bf:ef:06:7e:3c:50:b3:21:0a:f0:54:61:e7:c0:ab:7d:96:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 11 21:49:13 2025 GMT
Not After : Aug 10 21:54:13 2026 GMT
Subject: CN=3C21A588255D3A193BBED06E97F2CB877163367B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:78:fd:54:f5:0f:11:1b:5d:a7:96:78:6c:
3d:cd:3e:16:15:7b:db:75:31:6d:70:99:84:01:a1:
ea:b3:b5:ac:97:c5:ec:29:4b:2b:f1:2f:5b:1d:3c:
0e:b0:9c:bc:a2:a4:10:90:7b:25:0c:fb:c4:3c:22:
4e:05:a7:67:3f:53:1f:00:b4:f7:04:aa:11:95:d7:
11:3d:44:a8:f8:c0:62:35:8b:14:fb:de:a9:44:21:
f9:ed:b4:a1:b2:3c:7a:1d:c3:fc:4b:37:2a:af:7a:
1d:ee:ea:b2:9c:4e:4e:10:3b:f7:75:8c:a0:93:55:
74:57:e2:b8:09:59:97:ee:9b:80:8a:ed:43:a7:c7:
34:2f:f2:ad:df:68:d5:a8:91:49:5f:66:71:2f:52:
77:8a:4d:53:f1:62:64:a6:02:a2:f4:d6:a1:14:7e:
d6:13:61:92:28:9e:b3:47:9e:29:54:25:6c:38:39:
d7:fa:83:7c:c5:8d:94:53:2f:62:25:52:83:b3:6a:
ea:39:5f:53:10:46:df:25:f8:1d:02:a4:fa:0c:bc:
76:23:f9:f0:64:3d:14:eb:d1:0a:4e:86:58:20:47:
3e:eb:12:6a:bc:78:6f:03:1b:ba:3d:19:60:df:88:
56:b7:64:1e:a5:bc:e4:41:e4:de:7f:ce:a6:ea:a6:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:A5:88:25:5D:3A:19:3B:BE:D0:6E:97:F2:CB:87:71:63:36:7B
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/38332e3133382e35302e302f32342d3234203d3e20333936303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.50.0/24
Signature Algorithm: sha256WithRSAEncryption
84:dd:22:82:33:f6:66:7f:19:ef:06:a5:96:04:3e:19:cb:c8:
5c:14:6f:6f:c8:5c:f7:f9:42:4b:20:a3:bd:ff:33:86:f4:3f:
5a:70:40:84:9e:be:df:9d:97:eb:09:fb:c8:0a:d8:64:25:77:
ca:01:e9:b9:39:bb:98:7e:2d:d4:52:f4:3b:53:61:88:9f:f4:
68:f4:64:c9:ce:23:3c:77:66:a4:33:93:0c:43:90:33:81:4d:
de:78:a0:04:be:0e:fc:31:09:20:f3:ba:fb:81:fa:66:07:3a:
8e:2a:73:f7:32:67:93:42:34:7c:b7:81:71:97:cc:b6:44:3d:
24:ab:42:17:c8:30:af:e8:d1:4a:64:7f:a3:fd:64:56:b5:48:
0c:a3:b9:9e:7f:ef:c4:5d:b7:e9:64:e6:11:9d:c5:b8:c8:b3:
32:ed:05:f9:7d:24:bc:52:06:5f:15:81:c4:cc:96:0c:68:22:
95:0f:d4:f1:64:68:96:e2:a0:e6:16:07:5c:b8:53:1d:22:4f:
0d:92:24:07:1d:1d:c3:db:0b:5e:3e:3a:7b:74:d8:ca:40:d2:
14:17:a2:15:26:3a:06:48:03:5e:7c:92:a1:40:6e:f0:08:b1:
67:28:79:e2:17:8b:8f:bd:89:db:d9:35:ba:a8:c5:77:56:99:
61:22:ec:f0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeJ6/7wZ+PFCzIQrwVGHnwKt9lvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNTA4MTEyMTQ5MTNaFw0yNjA4MTAyMTU0MTNaMDMxMTAvBgNV
BAMTKDNDMjFBNTg4MjU1RDNBMTkzQkJFRDA2RTk3RjJDQjg3NzE2MzM2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueHj9VPUPERtdp5Z4bD3NPhYV
e9t1MW1wmYQBoeqztayXxewpSyvxL1sdPA6wnLyipBCQeyUM+8Q8Ik4Fp2c/Ux8A
tPcEqhGV1xE9RKj4wGI1ixT73qlEIfnttKGyPHodw/xLNyqveh3u6rKcTk4QO/d1
jKCTVXRX4rgJWZfum4CK7UOnxzQv8q3faNWokUlfZnEvUneKTVPxYmSmAqL01qEU
ftYTYZIonrNHnilUJWw4Odf6g3zFjZRTL2IlUoOzauo5X1MQRt8l+B0CpPoMvHYj
+fBkPRTr0QpOhlggRz7rEmq8eG8DG7o9GWDfiFa3ZB6lvORB5N5/zqbqpqYVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUPCGliCVdOhk7vtBul/LLh3FjNnswHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzgzMzJlMzEzMzM4MmUzNTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM2MzAzMjM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
U4oyMA0GCSqGSIb3DQEBCwUAA4IBAQCE3SKCM/ZmfxnvBqWWBD4Zy8hcFG9vyFz3
+UJLIKO9/zOG9D9acECEnr7fnZfrCfvICthkJXfKAem5ObuYfi3UUvQ7U2GIn/Ro
9GTJziM8d2akM5MMQ5AzgU3eeKAEvg78MQkg87r7gfpmBzqOKnP3MmeTQjR8t4Fx
l8y2RD0kq0IXyDCv6NFKZH+j/WRWtUgMo7mef+/EXbfpZOYRncW4yLMy7QX5fSS8
UgZfFYHEzJYMaCKVD9TxZGiW4qDmFgdcuFMdIk8NkiQHHR3D2wtePjp7dNjKQNIU
F6IVJjoGSANefJKhQG7wCLFnKHniF4uPvYnb2TW6qMV3VplhIuzw
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:21:03 2025 by rpki-client