Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203631333137.roa
File: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=
Subject key identifier: 1F:9A:58:7D:85:EC:70:F7:2D:5A:C5:2E:5D:F8:2D:CC:6D:62:34:42
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 54A69FBFBEDC0F99C5D57947314A6F464EEC765E
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203631333137.roa
Signing time: Wed 25 Jun 2025 12:54:11 +0000
ROA not before: Wed 25 Jun 2025 12:49:11 +0000
ROA not after: Wed 24 Jun 2026 12:54:11 +0000
asID: 61317
IP address blocks: 89.42.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a6:9f:bf:be:dc:0f:99:c5:d5:79:47:31:4a:6f:46:4e:ec:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Jun 25 12:49:11 2025 GMT
Not After : Jun 24 12:54:11 2026 GMT
Subject: CN=1F9A587D85EC70F72D5AC52E5DF82DCC6D623442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:f3:9c:0d:f6:3c:9d:48:45:43:32:cd:77:
fb:95:10:ff:ca:ba:55:37:ee:3f:fc:b0:84:ec:09:
92:16:1d:fb:20:5c:fd:45:6f:53:c9:2b:bd:d0:40:
66:af:2c:81:7d:ec:74:32:66:88:75:e6:2e:f5:3b:
71:9f:be:b6:af:f7:77:11:89:bd:1c:7d:de:f2:a2:
31:7b:47:71:d6:1e:9d:ce:6a:4a:78:87:94:77:cc:
57:f5:a3:1b:39:92:f8:76:2a:33:bd:ca:e1:b1:fb:
54:be:f4:b9:48:ac:a0:af:59:2b:c1:07:24:75:55:
1b:5a:53:f5:cb:06:ed:8f:ae:00:88:19:29:ba:1d:
aa:bf:e2:d5:5a:15:a9:9b:52:50:7b:74:fd:db:cb:
81:a8:34:41:cc:66:7b:35:ea:66:b6:af:05:f2:b1:
95:ce:9e:13:f0:40:58:b9:92:0f:ab:42:bf:75:86:
59:f0:f9:ce:6f:0a:c5:78:43:7c:1a:ee:fd:81:be:
c7:5a:03:7b:a7:1f:eb:ad:ea:7f:e6:41:88:f2:82:
17:0f:f5:bf:6d:d5:53:2f:b0:b4:8b:ee:e6:9a:3f:
3b:a5:fe:40:da:be:68:f2:5a:62:c1:f2:d8:51:f1:
28:8b:51:d5:34:8a:1d:2c:27:cc:40:9e:f5:c1:a1:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:58:7D:85:EC:70:F7:2D:5A:C5:2E:5D:F8:2D:CC:6D:62:34:42
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e34322e3131302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:21:e8:5e:12:1d:93:88:b4:c2:b0:da:ce:4d:95:77:a8:9e:
b6:74:6d:29:2b:54:bb:a8:0b:0e:46:d2:f9:7c:0f:74:e3:25:
75:59:37:98:60:ee:b0:73:ed:33:41:62:89:e7:04:48:77:26:
06:b4:d5:d5:c5:d8:b4:6a:07:0d:56:e5:7a:0b:a4:41:29:78:
87:80:55:2d:06:fd:81:8f:b1:0a:80:04:63:28:a7:76:c7:64:
d9:2e:35:8a:e6:4e:ce:c9:1a:07:aa:ca:c4:d9:8f:80:d3:be:
0d:07:2b:05:52:05:4a:51:44:03:97:a3:3a:fb:31:40:e9:9e:
3c:61:00:36:4b:7a:5c:0e:99:26:7b:45:f1:b6:37:3c:ce:5e:
12:c9:6b:6e:4c:f2:8e:2c:a3:cf:c0:45:8e:fc:f2:25:45:9b:
18:d5:75:48:f2:69:b0:7f:36:7d:f8:3c:5a:dc:8c:75:2a:e6:
5d:0c:61:97:04:7a:ff:42:70:a3:1d:a1:02:80:05:8e:b9:5b:
91:01:6c:74:13:1a:b9:16:c9:38:9e:12:67:e1:9e:3b:3a:86:
a2:4a:87:55:8a:5f:cb:88:59:37:37:25:e5:30:1b:65:e7:62:
0f:11:ae:6b:7c:e3:8b:a3:4e:5c:20:44:5d:ee:0f:14:11:60:
d3:c1:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:38:40 2025 by rpki-client