Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
File: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (raw, json)
Hash identifier: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=
Subject key identifier: 84:8E:E0:EB:BE:1D:33:0E:7B:BF:D9:8F:01:09:71:9F:5D:EF:46:20
Certificate issuer: /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial: 455C168BD9C94E4968FB9AF29EC568EDD1FCE6C1
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
Signing time: Thu 21 Aug 2025 16:37:36 +0000
ROA not before: Thu 21 Aug 2025 16:32:36 +0000
ROA not after: Thu 20 Aug 2026 16:37:36 +0000
asID: 205329
IP address blocks: 2001:67c:2800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5c:16:8b:d9:c9:4e:49:68:fb:9a:f2:9e:c5:68:ed:d1:fc:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Validity
Not Before: Aug 21 16:32:36 2025 GMT
Not After : Aug 20 16:37:36 2026 GMT
Subject: CN=848EE0EBBE1D330E7BBFD98F0109719F5DEF4620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:88:98:a7:77:6e:dd:91:4f:f5:be:4a:3f:
9b:f1:1f:ae:de:54:b2:e2:56:9f:4b:0f:27:8c:43:
bd:71:1c:c5:f3:d6:c6:14:f1:af:55:be:0d:24:ec:
8f:4a:af:96:91:5c:c8:f6:09:1d:11:d9:e9:7f:d5:
a2:84:76:2e:a5:6d:9c:f7:f8:18:26:86:b3:0e:56:
0b:27:ef:2d:6f:14:ee:cd:ca:c1:fd:2e:99:3a:94:
4d:c9:0a:a2:77:56:74:a5:64:0b:9d:a3:c3:66:ad:
a0:b2:a9:e3:54:34:1a:b7:2c:42:52:48:3d:40:8e:
f2:9b:40:b5:f8:28:88:66:fc:48:74:f4:ad:f7:87:
96:64:b2:07:db:9f:06:22:b9:df:b0:ef:52:a4:3f:
b1:98:41:d4:b3:3d:43:a7:71:40:d6:10:56:06:71:
57:bb:6c:90:02:e7:02:52:b8:6c:fa:91:5f:02:14:
fe:5c:4f:79:17:03:50:0e:45:62:94:ba:f3:6c:b1:
88:1a:ed:c9:55:a2:2d:60:58:84:61:9e:92:99:e8:
ad:e1:18:40:88:60:84:e3:6d:7f:6a:90:8a:43:de:
4e:b4:d5:c2:ce:85:e8:c7:53:c9:e1:98:05:bb:34:
e9:ec:22:39:35:4e:4d:22:61:e5:5a:13:18:64:e0:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8E:E0:EB:BE:1D:33:0E:7B:BF:D9:8F:01:09:71:9F:5D:EF:46:20
X509v3 Authority Key Identifier:
keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2800::/48
Signature Algorithm: sha256WithRSAEncryption
78:b9:03:2f:5a:96:05:c9:7b:dd:3d:92:d8:41:5f:65:93:31:
e5:a9:c3:47:09:b8:6a:e5:82:40:f9:de:30:3b:47:cf:3b:34:
ac:05:45:0c:0b:73:2b:73:9b:d3:7d:6f:3a:6f:ae:9a:07:0d:
11:10:e7:33:bd:d4:d2:0d:8c:eb:e1:88:e5:13:db:3c:90:2d:
82:09:aa:9d:58:b2:3a:82:35:32:c6:d7:3d:4e:8f:f0:32:0f:
45:89:33:2f:b3:65:50:4d:f1:8a:cf:66:68:a8:28:c0:46:72:
7c:7f:31:2a:4d:07:27:56:12:1d:b1:08:ba:02:52:f1:90:eb:
6c:53:c9:ca:e4:75:99:4b:1a:8a:7d:78:47:24:29:84:a1:d8:
af:fc:e5:ab:3f:a1:43:f3:1c:da:dc:b9:0e:05:81:10:fb:80:
b0:06:f3:c1:b0:1e:c6:a5:3a:9d:1d:1d:91:1b:91:38:e6:dd:
40:72:0b:f3:1e:07:05:0d:03:3c:32:d5:71:b6:39:d6:38:6d:
3d:26:02:b0:d7:c1:fe:a0:d5:18:26:2a:96:e7:6d:0c:25:50:
27:08:f3:40:f1:c7:04:a0:70:5f:1b:bc:84:4c:81:51:9f:43:
61:43:25:b6:69:0a:76:7f:28:fa:6d:be:89:6a:76:ec:82:c4:
96:33:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:02 2025 by rpki-client