Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa
File: 323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa (raw, json)
Hash identifier: XRyQMpoBe8x6EMniDPh04vxDxr/1vEp6eUzfE5psDfU=
Subject key identifier: 77:2F:EA:5F:D5:7A:51:F6:42:78:9E:F8:FB:E2:6B:5B:AE:DE:9F:27
Certificate issuer: /CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
Certificate serial: 0F7A91FA91302DE44EB8EED74C300180CC6AFCC3
Authority key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa
Signing time: Wed 13 Aug 2025 12:27:04 +0000
ROA not before: Wed 13 Aug 2025 12:22:04 +0000
ROA not after: Wed 12 Aug 2026 12:27:04 +0000
asID: 213605
IP address blocks: 2001:678:120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl
rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7a:91:fa:91:30:2d:e4:4e:b8:ee:d7:4c:30:01:80:cc:6a:fc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
Validity
Not Before: Aug 13 12:22:04 2025 GMT
Not After : Aug 12 12:27:04 2026 GMT
Subject: CN=772FEA5FD57A51F642789EF8FBE26B5BAEDE9F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:7c:2f:6b:10:36:af:11:7b:89:70:23:1c:
d1:41:44:82:48:03:5d:fc:20:bb:99:9d:93:d6:de:
d9:59:d0:d0:6b:33:78:fe:68:dc:b1:ac:1c:f4:3d:
72:a5:f8:30:9c:5f:b5:4e:c7:9e:00:73:12:03:3f:
51:4e:2d:c7:3b:08:72:0b:c4:a6:ae:fa:d3:56:d7:
e5:cf:88:b9:9a:87:c4:ec:2a:32:1f:82:d8:60:1a:
0a:26:56:28:0d:10:15:ea:47:84:cd:f5:e3:3e:90:
c4:c7:0d:b5:6b:c5:d2:a1:fe:5c:1b:e9:8a:31:c8:
f4:3f:c4:e1:50:c0:b4:7e:3d:31:58:f6:4e:4b:06:
04:3f:eb:e4:ea:ba:29:14:4d:33:ee:14:65:32:51:
35:06:08:d8:9b:cd:6f:1b:48:1b:cb:f6:54:8f:cd:
1e:ef:d7:0c:b4:45:8f:7d:4e:53:70:61:c0:ce:8f:
59:85:70:7b:7b:f3:dc:26:1f:53:c6:5e:85:49:a9:
9d:e5:7d:e0:e3:1f:06:6c:5e:5d:c7:3b:7d:dd:41:
fc:37:6e:a9:d3:7c:7c:f8:29:79:6d:ae:47:f7:fd:
9f:40:36:b5:86:a0:04:d2:b6:7f:d3:88:6a:25:04:
3b:5d:f7:c6:2f:c4:61:94:d2:fc:d0:39:a1:bb:67:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:EA:5F:D5:7A:51:F6:42:78:9E:F8:FB:E2:6B:5B:AE:DE:9F:27
X509v3 Authority Key Identifier:
keyid:6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:120::/48
Signature Algorithm: sha256WithRSAEncryption
64:9d:55:6f:b9:85:98:4c:29:51:0e:f5:24:32:03:10:0d:e6:
a9:18:79:9a:b5:94:9b:b0:2c:17:aa:9b:35:89:a6:74:c1:6e:
86:fc:06:a7:43:19:e4:d1:92:b4:61:cb:a9:66:b9:06:ef:fc:
ab:e9:68:a1:db:76:19:93:68:ea:24:01:20:31:fc:fa:d2:4c:
e2:dd:62:51:fd:4b:46:eb:6f:28:29:fe:0c:83:b5:29:f5:84:
55:b4:24:de:f7:ff:5f:16:c9:72:ee:ca:0f:1e:df:0a:bb:48:
b8:89:f3:54:17:14:40:b7:9a:a3:33:1b:04:2d:5c:ed:8f:de:
60:56:b7:53:96:67:60:5b:42:8e:6d:6b:49:33:01:fe:44:2a:
c2:18:c5:72:1d:7f:94:32:1c:63:5f:6c:5f:0f:51:fd:cc:8f:
69:21:49:25:61:55:dd:1b:78:0c:42:c6:b5:55:f4:f7:7c:f1:
8b:bd:39:de:d5:b6:09:11:23:02:70:1c:80:c8:b6:2c:59:62:
98:7b:de:42:22:79:6a:6a:bc:7b:68:50:eb:8f:91:7d:f7:e2:
d4:12:42:c3:29:58:d1:54:b7:d3:de:1f:db:6c:1c:aa:c1:18:
f9:96:54:30:f9:42:d0:5d:00:5f:be:32:5f:7c:02:f0:04:ed:
44:74:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:01 2025 by rpki-client