Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: p9YeWm9o5vpqAUGJb5jv6r7erdrJIjc0ly7Quxrrsmw=
Subject key identifier: 7E:BB:E9:E2:53:86:FF:94:51:53:75:5C:84:C1:B7:8C:2C:3F:91:9F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 63E26F04CF65F860A4570B9C670E8EFA093CF515
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Aug 2025 22:47:04 +0000
ROA not before: Thu 14 Aug 2025 22:42:04 +0000
ROA not after: Thu 13 Aug 2026 22:47:04 +0000
asID: 136787
IP address blocks: 185.165.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e2:6f:04:cf:65:f8:60:a4:57:0b:9c:67:0e:8e:fa:09:3c:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 14 22:42:04 2025 GMT
Not After : Aug 13 22:47:04 2026 GMT
Subject: CN=7EBBE9E25386FF945153755C84C1B78C2C3F919F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:8c:f4:40:51:66:50:eb:21:42:bf:95:a2:
fe:5b:fa:2f:52:cb:90:fa:52:63:c6:91:5c:d4:bf:
fe:75:72:3b:1f:7f:4f:ec:b5:6f:1d:83:9e:32:1c:
85:db:82:a9:b4:1f:87:e2:7e:a7:5b:6c:56:2a:5a:
61:f4:c5:82:04:77:36:cc:e1:e5:ca:74:b5:bd:4f:
d8:c0:d4:bb:5c:94:b8:dc:7b:7c:44:c1:46:50:d4:
97:01:9b:61:a2:a0:8f:b5:94:fe:04:62:fc:28:9e:
b8:fc:95:01:24:ac:0b:69:67:08:29:06:65:24:60:
45:52:88:f4:5b:28:6f:e8:a5:50:00:3e:02:40:e5:
0d:a1:8c:3f:bd:5f:e7:4a:b3:26:93:5d:47:ab:b1:
9b:8f:85:9d:62:3e:1a:9e:54:3e:ab:14:a7:50:49:
69:27:23:5c:25:c7:3d:53:0e:e1:9d:af:ff:dc:a1:
f3:f7:ea:cc:59:53:00:0d:ac:51:53:a3:50:dd:5d:
2e:04:df:77:86:4b:ca:b8:3c:9f:21:0c:c1:3e:39:
39:b3:cc:39:4d:ad:bf:f6:2e:ab:e1:a6:a3:10:5f:
fc:13:01:38:4f:14:2c:dd:36:9c:87:cc:90:48:be:
49:46:03:02:74:70:be:3e:d9:a3:a1:fc:8c:29:a5:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BB:E9:E2:53:86:FF:94:51:53:75:5C:84:C1:B7:8C:2C:3F:91:9F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136352e38352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.85.0/24
Signature Algorithm: sha256WithRSAEncryption
98:44:e3:e1:11:83:ca:44:43:c5:cf:e4:1f:fc:e3:7c:cb:30:
d5:97:27:4f:62:95:1f:fd:6f:28:ba:de:f4:a3:7c:e1:0f:aa:
22:ae:13:0b:92:09:f6:ff:65:8c:93:ca:04:0e:05:eb:0b:b1:
87:a1:c7:11:5e:b5:86:17:06:2a:49:f3:49:da:1a:61:00:b8:
f8:1a:45:01:46:f8:18:69:86:dd:1c:b8:1b:02:ae:62:2f:e4:
fc:ec:4a:1c:af:76:1a:6a:74:13:37:51:34:43:f0:f4:38:8e:
94:c3:04:20:ee:bf:5e:98:29:49:c8:9d:f1:07:6a:b9:48:d8:
d5:c1:04:e6:e3:08:eb:f9:52:d7:d4:34:ac:cd:36:7f:f9:74:
45:50:fc:c9:ff:22:37:78:60:0a:f9:68:b8:7b:0b:ae:e2:33:
bc:f1:8e:94:26:2d:d5:eb:9a:94:79:03:84:15:20:8a:93:8c:
c2:c8:41:ba:30:71:69:10:15:7f:f9:8e:38:2f:35:af:4f:af:
fc:46:16:75:4d:7c:12:4b:8b:b6:bb:8b:40:f3:1a:31:0e:05:
57:44:0c:b5:51:b1:40:0a:bd:c2:46:03:23:34:14:01:98:21:
fb:bf:a0:13:eb:44:56:a1:69:7b:85:a4:6b:b7:39:5e:00:76:
85:f2:72:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:55 2025 by rpki-client