Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
File: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (raw, json)
Hash identifier: SVc+06+kSTZLFSZYHt+18ILRTqVegdlc2kojDgxmDjY=
Subject key identifier: 9F:D7:18:E0:74:44:B0:9A:FA:C5:7B:B8:B7:8F:8A:6F:0E:A8:33:7E
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 625D383BE4409EC222AC63A0C96120FBBD595587
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
Signing time: Thu 21 Aug 2025 16:37:36 +0000
ROA not before: Thu 21 Aug 2025 16:32:36 +0000
ROA not after: Thu 20 Aug 2026 16:37:36 +0000
asID: 202881
IP address blocks: 2001:67c:2be8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5d:38:3b:e4:40:9e:c2:22:ac:63:a0:c9:61:20:fb:bd:59:55:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Aug 21 16:32:36 2025 GMT
Not After : Aug 20 16:37:36 2026 GMT
Subject: CN=9FD718E07444B09AFAC57BB8B78F8A6F0EA8337E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:e5:3a:2b:3c:81:f9:33:87:de:86:3b:de:
43:28:bf:e2:bc:bb:1f:43:7c:03:9d:eb:95:19:07:
44:08:75:e9:10:3e:1f:16:e8:e8:f2:21:d5:39:ed:
91:0c:2b:71:db:4e:b8:e5:d8:92:ec:40:28:88:2f:
38:f2:03:5f:23:3a:8a:ec:60:60:d4:c5:c8:b5:84:
df:df:cc:f4:34:64:75:17:08:02:83:43:ce:5b:cb:
92:fe:5f:fd:e2:3d:d7:47:68:00:29:be:b3:46:d2:
af:4e:d9:80:88:5c:2b:b9:35:74:71:a6:e4:d2:dc:
7a:e0:64:71:ef:89:e5:d3:18:91:e1:c6:14:58:5c:
e6:c6:1a:f4:29:27:0d:40:55:15:1e:19:37:4e:b6:
d7:5b:7b:e9:2c:d6:cc:3f:9a:20:b2:51:e9:13:06:
ab:76:14:ec:4b:84:f9:65:16:4b:20:59:61:ce:34:
b2:a4:b2:e1:b8:33:e3:84:a5:4a:36:27:37:50:b8:
b3:52:4a:fe:c4:67:64:f9:40:19:ab:4b:e6:d7:8d:
c7:e5:13:5a:48:8a:fb:b9:fa:22:98:99:08:c9:b1:
3b:cf:d2:73:0c:6a:ae:b9:d9:99:0a:fa:51:1c:9d:
6d:f5:f6:95:e8:7a:d0:1a:a1:c0:0d:07:b8:f2:e5:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:18:E0:74:44:B0:9A:FA:C5:7B:B8:B7:8F:8A:6F:0E:A8:33:7E
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
Signature Algorithm: sha256WithRSAEncryption
70:eb:0a:8f:28:ba:87:12:51:f0:d5:cd:41:62:19:e3:ca:0d:
5e:26:b3:73:90:04:74:b2:60:65:bf:9b:b5:b9:5f:60:0b:17:
c4:d9:74:29:26:70:f4:ad:64:16:93:43:cd:6b:a0:60:b3:a0:
97:3f:b6:85:75:22:ef:5c:47:23:e6:27:78:1a:61:f5:15:ea:
58:e1:ad:28:a3:99:df:a3:26:c4:37:73:1b:52:6f:08:3d:98:
0d:24:ce:93:61:77:da:0c:38:e0:fe:d9:f4:15:4c:97:3f:21:
e5:2f:51:fc:f3:95:97:71:b1:ef:0d:3a:f4:e1:be:6b:28:21:
df:88:f6:b6:88:e3:09:80:bd:25:5a:e9:c0:72:f6:57:57:d5:
33:0d:53:f7:9d:f1:e8:ac:17:1b:ba:29:c0:a2:9d:df:6b:7f:
91:2d:07:50:48:a6:ee:1a:75:c9:0b:97:5a:d7:05:9d:06:d6:
bd:bd:62:81:78:78:5a:5a:25:1b:4d:66:6b:35:be:f8:c4:7d:
1f:7c:81:27:cf:83:90:4f:83:de:ba:5a:bc:3e:dc:25:75:40:
77:14:2a:cf:6e:e6:b2:7f:7e:05:72:88:53:8a:22:0d:99:95:
a8:53:c3:62:3d:56:44:b0:46:d7:94:2e:8b:dc:42:f2:1f:90:
2f:31:c8:de
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUYl04O+RAnsIirGOgyWEg+71ZVYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0
YmM5ZDhkODAeFw0yNTA4MjExNjMyMzZaFw0yNjA4MjAxNjM3MzZaMDMxMTAvBgNV
BAMTKDlGRDcxOEUwNzQ0NEIwOUFGQUM1N0JCOEI3OEY4QTZGMEVBODMzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiuU6KzyB+TOH3oY73kMov+K8
ux9DfAOd65UZB0QIdekQPh8W6OjyIdU57ZEMK3HbTrjl2JLsQCiILzjyA18jOors
YGDUxci1hN/fzPQ0ZHUXCAKDQ85by5L+X/3iPddHaAApvrNG0q9O2YCIXCu5NXRx
puTS3HrgZHHvieXTGJHhxhRYXObGGvQpJw1AVRUeGTdOttdbe+ks1sw/miCyUekT
Bqt2FOxLhPllFksgWWHONLKksuG4M+OEpUo2JzdQuLNSSv7EZ2T5QBmrS+bXjcfl
E1pIivu5+iKYmQjJsTvP0nMMaq652ZkK+lEcnW319pXoetAaocANB7jy5S49AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUn9cY4HREsJr6xXu4t4+Kbw6oM34wHwYDVR0j
BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2
OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2
SjJOZy5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMt
YWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2OTgwLzMvMzIzMDMwMzEzYTM2Mzc2MzNh
MzI2MjY1MzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzIzODM4MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQZ8K+gwDQYJKoZIhvcNAQELBQADggEBAHDrCo8ouocSUfDVzUFi
GePKDV4ms3OQBHSyYGW/m7W5X2ALF8TZdCkmcPStZBaTQ81roGCzoJc/toV1Iu9c
RyPmJ3gaYfUV6ljhrSijmd+jJsQ3cxtSbwg9mA0kzpNhd9oMOOD+2fQVTJc/IeUv
UfzzlZdxse8NOvThvmsoId+I9raI4wmAvSVa6cBy9ldX1TMNU/ed8eisFxu6KcCi
nd9rf5EtB1BIpu4adckLl1rXBZ0G1r29YoF4eFpaJRtNZms1vvjEfR98gSfPg5BP
g966Wrw+3CV1QHcUKs9u5rJ/fgVyiFOKIg2ZlahTw2I9VkSwRteULovcQvIfkC8x
yN4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:15 2025 by rpki-client