Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20323132323338.roa
File: 3139332e3230332e31322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: vsLHgLllSgJtKkXYOYJgfXKdUs1DDda+plspJYjnfNk=
Subject key identifier: E9:E6:DA:F3:2A:F1:AD:9F:89:2F:A5:93:C7:9E:7D:2D:33:92:9E:C5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39F97775DEA1984778C052C70EFD3B70B87C3EFB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 27 Jun 2025 11:53:52 +0000
ROA not before: Fri 27 Jun 2025 11:48:52 +0000
ROA not after: Fri 26 Jun 2026 11:53:52 +0000
asID: 212238
IP address blocks: 193.203.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f9:77:75:de:a1:98:47:78:c0:52:c7:0e:fd:3b:70:b8:7c:3e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 27 11:48:52 2025 GMT
Not After : Jun 26 11:53:52 2026 GMT
Subject: CN=E9E6DAF32AF1AD9F892FA593C79E7D2D33929EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:93:99:26:e9:ee:18:43:73:67:50:a9:38:
0a:13:6c:78:52:55:60:fa:6c:7f:7c:da:21:11:bb:
4f:aa:01:88:be:4c:df:26:55:d5:1b:e9:7e:b4:7a:
e2:98:62:d5:1f:49:8a:45:d2:a4:cd:ba:d6:d9:f6:
48:7a:42:32:4d:5b:9d:51:05:2d:de:8c:5b:d6:18:
68:dc:de:1c:64:a3:d7:71:9e:a0:8e:ac:b0:b7:b3:
29:08:a9:2e:ee:0b:25:44:17:4a:22:1d:93:a0:d9:
67:88:31:2f:fe:38:d5:02:62:8c:7a:52:92:99:87:
08:a9:34:8c:99:24:df:e6:82:4a:ff:bf:49:e0:d1:
a6:93:87:7d:cf:53:e0:fc:fb:c1:31:8e:f7:ae:cf:
61:9d:43:84:a5:3a:50:ed:f9:a1:d4:3f:4e:09:06:
b2:d8:6b:ab:06:ea:3d:b1:4c:a6:d2:ef:18:b2:11:
f3:fe:75:00:ab:ac:10:cb:fb:51:3f:c3:b9:1c:4f:
05:ec:b8:77:d6:16:56:85:b1:3e:6b:e8:39:0a:1a:
cc:59:88:9a:31:01:b5:bc:51:af:e0:9c:5a:30:18:
88:f5:c5:27:a1:60:73:9a:9d:3b:17:3f:9f:35:3a:
86:51:e2:1f:2f:40:f8:c0:9d:50:2d:29:8d:2b:4f:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:DA:F3:2A:F1:AD:9F:89:2F:A5:93:C7:9E:7D:2D:33:92:9E:C5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.12.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bd:50:05:e9:38:35:de:59:6e:2e:cb:aa:4c:bc:fa:2f:57:
fd:14:6d:68:f8:7a:69:24:a5:b5:1d:06:65:47:7f:49:21:46:
21:4c:de:b6:f1:6c:26:6e:ad:81:7c:72:e6:c1:94:34:5e:5c:
5f:5e:ec:6b:55:72:ed:d0:9e:48:1a:da:93:03:c6:c4:63:72:
06:59:02:0d:16:fc:21:52:ce:9d:44:67:15:f1:59:94:ba:c1:
26:3d:a4:98:40:7b:8f:5d:e7:ae:85:c7:75:00:a1:da:b5:d1:
cd:a3:e0:fe:70:9f:d1:f0:82:e0:9f:4a:11:39:57:52:40:4e:
46:80:85:88:e0:25:c6:f3:d0:f7:39:25:2a:cf:1e:8b:ca:3e:
51:88:e8:1d:9e:1b:2c:3d:ca:8c:6f:69:a7:3b:5b:a7:0d:d9:
1a:e1:a6:34:17:82:62:c2:49:77:c6:a0:5c:83:0c:83:00:ac:
f3:2f:51:46:4d:fa:67:50:c5:54:8e:20:67:1a:bf:80:c1:9c:
fd:32:c3:b0:5b:8b:a1:7d:6f:01:c8:fc:05:8f:4e:b1:fb:39:
04:d3:33:b7:72:87:f0:66:ca:f9:f1:15:8d:e2:d4:9a:4e:97:
2f:b0:08:87:cf:03:98:77:88:6a:33:c4:99:df:5d:9c:41:1f:
14:a8:ab:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:03:31 2025 by rpki-client