Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
File: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=
Subject key identifier: 2E:C3:9D:08:1C:8D:BD:4F:95:2E:6E:AB:A2:1E:C7:C4:26:A5:58:4F
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 650AF129F54D2FD12FE9E6C6F7B081A310D48373
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
Signing time: Wed 25 Jun 2025 12:54:11 +0000
ROA not before: Wed 25 Jun 2025 12:49:11 +0000
ROA not after: Wed 24 Jun 2026 12:54:11 +0000
asID: 61317
IP address blocks: 93.113.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0a:f1:29:f5:4d:2f:d1:2f:e9:e6:c6:f7:b0:81:a3:10:d4:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Jun 25 12:49:11 2025 GMT
Not After : Jun 24 12:54:11 2026 GMT
Subject: CN=2EC39D081C8DBD4F952E6EABA21EC7C426A5584F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:e4:6f:5a:d2:3d:32:a5:ed:ee:12:06:28:
54:dc:45:a8:8b:f2:d4:24:85:d6:76:67:99:e1:76:
63:88:c9:7a:08:b7:5e:e9:aa:fa:c4:a2:2b:b1:fa:
80:2d:18:8f:51:ba:76:99:dc:97:1a:81:66:74:0a:
52:4c:ce:19:34:e7:3d:75:91:33:c0:86:0b:84:7c:
df:92:1c:d5:fd:62:89:b5:aa:da:d5:7a:1b:b7:88:
d9:6a:d4:9f:04:84:6b:fe:3d:28:33:c1:95:96:d8:
19:41:b3:77:eb:17:24:4e:a3:6a:ca:3a:7a:5d:2e:
8e:b1:5a:c0:b7:48:f1:0f:26:a1:f5:c2:86:29:11:
3a:9c:0c:d9:25:72:5b:44:aa:fc:9d:09:d2:3d:f4:
dc:59:d2:d9:d9:46:c9:60:2f:7b:20:0b:5a:5f:14:
61:3c:de:b5:5f:1b:88:df:cb:fa:8a:cd:d2:e8:65:
51:36:02:2e:7f:e5:84:6a:2f:98:34:70:da:33:1c:
1f:46:3a:51:f8:9a:7b:2a:1e:63:a4:95:66:38:cf:
e9:7c:62:90:fb:c4:9b:db:c3:53:d8:47:ff:51:1f:
e9:4c:92:c2:a7:da:ea:50:40:87:af:72:24:79:d6:
47:89:5d:95:eb:67:07:fa:93:41:e2:8d:7a:a7:12:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:9D:08:1C:8D:BD:4F:95:2E:6E:AB:A2:1E:C7:C4:26:A5:58:4F
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.212.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a7:69:7e:1c:28:f3:95:52:96:b7:ac:7e:78:66:10:01:38:
91:42:66:45:5b:c1:24:d0:4b:f6:f2:ef:32:0c:64:b3:69:66:
10:d0:f0:9f:69:c4:82:b8:57:36:72:61:36:84:7e:92:62:8a:
79:89:d6:4f:c0:83:d3:3f:f0:f7:d2:f4:a8:45:79:2b:e7:b8:
4c:01:b8:f2:c0:df:83:ea:4e:cc:0c:11:06:bd:fe:a4:87:e4:
5b:cc:1e:53:57:a7:57:b5:b6:b9:15:d8:ee:de:f5:09:02:12:
18:16:91:dc:75:f8:74:24:de:87:2d:5c:87:19:a9:41:c7:76:
f7:88:cc:ec:03:10:0c:74:74:a9:12:b7:98:f4:e9:10:e9:53:
e9:d5:8a:87:85:8f:dd:00:27:63:19:40:44:38:da:52:4a:2f:
ca:4c:3c:62:83:f5:26:ac:aa:15:a5:2f:9a:f7:26:9d:0e:57:
37:9a:d5:dd:ee:ac:d9:65:0b:d7:96:06:22:fd:ba:a6:6f:b9:
a3:d1:03:22:bf:07:39:9f:0e:f2:21:74:cd:22:d9:59:49:ac:
53:72:b0:f8:dc:29:8e:11:6a:cf:57:f5:45:ef:4f:45:80:36:
04:ac:20:2c:69:55:3f:5d:cc:f8:5c:c8:80:83:82:ab:05:9f:
6b:44:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:06:03 2025 by rpki-client