Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa
File: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (raw, json)
Hash identifier: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=
Subject key identifier: 58:03:20:E7:96:91:4A:0D:2A:1E:0C:00:9D:05:80:E8:1B:08:31:8F
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 30BB19CE4FF45AECA4AC76BB7AF8980ACC1A25DF
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa
Signing time: Mon 16 Jun 2025 14:09:27 +0000
ROA not before: Mon 16 Jun 2025 14:04:27 +0000
ROA not after: Mon 15 Jun 2026 14:09:27 +0000
asID: 202359
IP address blocks: 2a11:f2c0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:bb:19:ce:4f:f4:5a:ec:a4:ac:76:bb:7a:f8:98:0a:cc:1a:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 16 14:04:27 2025 GMT
Not After : Jun 15 14:09:27 2026 GMT
Subject: CN=580320E796914A0D2A1E0C009D0580E81B08318F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:9c:51:d7:97:33:bb:a6:55:4d:1a:6b:ae:
c0:65:56:7c:f6:78:eb:92:58:b5:63:f6:7a:cb:21:
70:1c:2c:f4:fa:fe:89:28:77:12:35:86:cd:a1:02:
2c:da:ff:b0:99:bc:31:8e:c7:bd:60:93:f4:fb:5b:
5a:28:1b:63:be:e7:5c:f5:fa:aa:68:38:3f:33:38:
df:01:9a:1e:9c:e7:12:94:44:de:36:8f:f8:0c:27:
03:3b:df:5c:7a:db:25:5b:af:d9:34:67:13:07:92:
f1:39:6b:a7:c6:09:e9:26:7d:27:16:51:43:54:7c:
5c:fd:db:22:95:aa:20:12:6a:b3:aa:b1:14:e7:5b:
0b:34:83:50:cd:1b:66:3d:14:cb:d3:d7:8f:a9:25:
71:0f:09:b4:d5:b9:95:15:5a:25:4e:a7:86:0f:66:
66:76:11:1a:cb:1e:6a:a6:28:a5:e4:78:9e:f8:ba:
6b:37:d3:5a:d7:27:34:c1:a8:69:ac:3d:95:e1:3e:
f0:af:fd:97:76:06:96:62:2e:52:e2:12:e4:67:53:
62:5d:6b:fb:cd:8f:5e:c6:51:5d:90:ea:0a:78:e4:
c4:4e:98:7c:e0:a7:e2:78:57:83:f0:6e:a2:3f:9b:
69:7e:f3:e3:39:10:87:f5:63:e1:80:10:c3:80:29:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:03:20:E7:96:91:4A:0D:2A:1E:0C:00:9D:05:80:E8:1B:08:31:8F
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:4::/48
Signature Algorithm: sha256WithRSAEncryption
7d:a3:e2:b1:4f:d9:d9:47:31:35:bd:12:bc:0d:c4:b2:22:5d:
0c:8d:a0:74:ee:e0:46:c4:e7:03:9c:cb:3e:9b:e5:aa:84:35:
ff:97:f5:3b:9e:bc:8b:6d:47:e9:da:84:ac:47:10:ff:9a:c1:
52:23:cc:c9:19:6a:3c:41:8a:7b:bf:4c:07:10:fc:16:4e:75:
ff:b9:0a:5b:27:0a:b7:47:0d:7b:17:b2:ac:88:de:84:78:be:
de:56:82:3c:39:9e:e2:6e:93:d4:20:e6:f4:2a:0e:7f:dc:a9:
66:ec:aa:2c:6f:b2:fa:e2:2f:f0:85:de:84:a2:41:50:c1:a5:
64:cc:45:fe:f0:50:7d:12:96:af:01:b6:2f:66:2b:70:ab:a3:
59:c4:5f:c5:a0:1a:cd:9c:b7:4f:25:45:14:d4:f8:ed:47:c6:
b7:b2:2f:7c:99:ee:ea:26:e9:b3:21:4d:c1:35:c4:7d:12:e6:
4c:b0:01:f2:a3:83:86:32:57:8b:e1:2d:6a:bb:a5:b3:bf:29:
c1:ee:d9:8e:c7:d4:56:06:df:aa:fa:a4:8c:63:d5:18:42:9f:
72:4f:25:28:d9:da:68:a9:99:18:a9:d3:b1:b9:51:c4:69:fe:
23:b9:f9:0d:2e:a7:73:eb:40:ac:3b:f6:b1:09:30:82:ac:b6:
7d:88:a3:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:23:14 2025 by rpki-client