Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa
File: 3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa (raw, json)
Hash identifier: b+SRofjkV6Xx2rMeWx5TR4vueHJ42PGBot6D5/jeyj4=
Subject key identifier: B9:F8:9B:CC:80:DB:37:44:28:7A:C3:1A:2E:20:E7:04:11:60:6D:B0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0CE70C493C047302B4507D253C95A0AC3B935929
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa
Signing time: Fri 15 Aug 2025 15:47:06 +0000
ROA not before: Fri 15 Aug 2025 15:42:06 +0000
ROA not after: Fri 14 Aug 2026 15:47:06 +0000
asID: 42366
IP address blocks: 185.174.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e7:0c:49:3c:04:73:02:b4:50:7d:25:3c:95:a0:ac:3b:93:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 15 15:42:06 2025 GMT
Not After : Aug 14 15:47:06 2026 GMT
Subject: CN=B9F89BCC80DB3744287AC31A2E20E70411606DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:45:ab:83:b0:a1:c1:28:6a:a9:06:df:0b:
a8:34:c9:a3:54:6d:6a:e0:ef:db:fb:96:82:51:d7:
ac:c8:f9:9c:95:e0:56:71:4c:7a:61:a5:86:da:8d:
69:d6:c7:8a:27:64:70:0a:24:73:84:92:9c:92:35:
78:21:fa:0b:ad:5d:b3:ef:3f:ad:1f:2f:02:e5:04:
78:63:42:d4:1a:1c:d8:86:28:ec:ec:45:e8:c3:20:
c8:31:c7:1e:97:f4:2f:db:bb:89:d9:90:f3:38:03:
8a:54:69:28:4c:40:e0:0f:31:67:b6:b8:f2:af:e9:
ab:72:fb:a2:9d:85:36:0c:46:3f:e4:3f:74:5a:11:
6a:80:3b:09:c1:ac:43:c7:74:96:01:f5:b7:65:fa:
eb:8c:b2:d0:08:ab:43:70:e1:33:e7:17:89:34:ed:
56:e1:d5:75:f9:1d:5c:49:ee:22:65:74:e1:1b:03:
63:cb:76:e3:99:e0:fc:cc:89:db:33:90:95:a1:4f:
85:bf:ce:10:7b:cf:69:be:d4:cf:a1:8f:2d:ae:a1:
5b:63:46:10:58:f1:4c:cc:a8:f5:a8:29:c5:04:0b:
3d:95:03:90:24:ca:34:c6:11:32:70:77:21:f4:50:
79:72:d8:28:22:f5:56:78:89:05:40:2a:fb:de:88:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F8:9B:CC:80:DB:37:44:28:7A:C3:1A:2E:20:E7:04:11:60:6D:B0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137342e3235322e302f32322d3232203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.252.0/22
Signature Algorithm: sha256WithRSAEncryption
e0:ac:cd:86:f4:29:fd:7e:da:6b:8f:72:be:65:db:c4:d8:ee:
d7:1c:a9:df:39:51:2d:4b:f7:a8:06:c0:d3:c2:b3:c4:50:05:
1c:5a:18:67:66:40:ac:38:4b:42:98:ce:4b:d6:a9:75:20:2c:
8a:8f:64:80:d7:f4:0c:ce:db:72:d5:d8:f3:93:99:24:ca:3b:
72:e3:6f:a4:7b:19:b9:69:9d:5f:77:af:8e:4b:21:f4:d8:20:
08:7a:02:2d:8d:cc:87:74:e3:36:21:bf:8e:1f:8f:1a:e5:86:
11:8f:dc:fb:ae:40:d8:7d:c4:29:fe:29:5a:71:22:2f:5a:b8:
78:11:60:87:7e:a9:38:55:f5:33:a0:9a:62:8e:39:b5:bc:5d:
6b:3d:49:75:c4:70:5d:97:c7:94:55:f0:a5:bf:54:6a:d5:b6:
d4:a2:e9:c8:52:e6:c3:bb:bd:8c:d6:12:80:d5:41:c1:45:dd:
5d:63:ca:fb:14:68:0d:1d:a7:56:33:40:07:89:35:65:67:92:
6e:d8:a2:c9:d8:01:5b:53:84:d4:1f:bd:60:ce:05:a3:89:ef:
ad:11:c0:20:e2:78:9f:11:db:0e:5c:c1:0d:bc:a7:39:3d:18:
41:94:b0:d4:94:99:7b:39:0b:6e:55:44:e3:10:54:f8:ce:16:
c8:d1:b4:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:25 2025 by rpki-client