Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203632323430.roa
File: 3139342e36302e38362e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: IiFwNOIx20dTldvXw/4sUyL/otK7W+9SDMztNjWlUa4=
Subject key identifier: 48:C8:98:65:43:97:01:94:BA:0C:AE:9F:D3:73:0F:FE:19:F2:2E:B4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0897E58D923F66E67CD49CD4258A3C16FDD3FC1E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203632323430.roa
Signing time: Wed 06 Aug 2025 10:16:34 +0000
ROA not before: Wed 06 Aug 2025 10:11:34 +0000
ROA not after: Wed 05 Aug 2026 10:16:34 +0000
asID: 62240
IP address blocks: 194.60.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:97:e5:8d:92:3f:66:e6:7c:d4:9c:d4:25:8a:3c:16:fd:d3:fc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Aug 6 10:11:34 2025 GMT
Not After : Aug 5 10:16:34 2026 GMT
Subject: CN=48C8986543970194BA0CAE9FD3730FFE19F22EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:86:05:4b:ac:3e:b6:f8:e8:ac:6d:05:13:
d8:71:4b:5a:05:f8:ad:50:a0:4d:aa:07:73:d9:8b:
f2:21:75:2d:b9:18:1d:a7:d3:51:de:30:b9:8c:0f:
94:2d:22:52:1e:e8:00:30:9b:25:ad:59:c1:59:90:
70:f0:b9:75:30:d3:6e:e1:f3:07:a6:97:86:93:fd:
73:0c:dd:23:c2:1a:2a:bb:a5:04:1a:b2:e9:6a:30:
ab:84:5b:93:fd:d6:96:f8:2f:b3:cd:f4:72:23:ab:
c9:a1:eb:45:ea:26:66:6d:d7:c8:27:00:1f:70:30:
5b:03:a6:97:b2:1d:cf:18:5f:77:24:60:32:6f:c0:
a3:d8:fd:37:58:ad:30:91:7c:02:cb:30:8e:e4:65:
51:be:19:33:8a:ae:6e:2c:15:bc:e8:2a:cf:d1:ec:
05:d2:fb:df:71:b6:c8:c0:a8:b9:a8:20:2c:29:bd:
e7:a4:83:77:3d:e4:dc:da:2c:ec:82:19:8b:54:b6:
76:7e:4d:e5:e0:74:12:6c:b7:cc:5c:68:f2:1a:70:
2b:c9:b3:60:38:8b:bd:08:27:05:b7:f5:bc:bb:8d:
73:a8:9a:e5:45:f5:17:7e:d7:5c:1e:b6:5e:37:35:
a2:10:d1:bc:04:e7:a3:64:f1:34:8e:96:83:c1:04:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:98:65:43:97:01:94:BA:0C:AE:9F:D3:73:0F:FE:19:F2:2E:B4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3a:87:30:78:e8:8b:23:83:37:60:31:22:a9:4a:13:c4:25:
a2:5c:c3:c8:74:14:7f:65:52:86:4d:90:d6:23:54:aa:65:9f:
eb:3c:07:1b:1d:c9:a7:17:65:be:1d:2d:06:3a:c9:6f:d8:ae:
8d:d1:3f:10:a0:7e:7e:30:c8:bd:16:9e:db:9a:e7:32:11:8c:
22:cc:c6:d7:08:90:4e:c2:eb:c4:3a:22:ef:99:ec:e7:ea:4e:
02:bc:fb:7a:56:b6:96:06:98:e9:f7:b9:85:73:8b:cc:c3:ef:
6d:b2:8d:d1:80:7f:f0:5a:ad:a8:56:02:46:e8:6f:c7:20:e2:
51:ab:b8:c8:47:10:16:9b:d2:0d:a1:3d:06:37:0f:15:91:60:
3c:12:e9:d8:21:95:35:6e:95:a0:ba:aa:10:aa:c9:fd:55:c1:
64:a0:89:ee:87:69:5d:0a:67:1f:29:b4:f7:7c:c5:d5:37:4f:
c2:64:84:94:37:d7:4b:08:71:5e:61:3d:f4:96:9b:ea:66:e8:
27:42:1e:ba:7d:b5:02:5d:e2:d7:3a:ac:86:eb:b3:b2:0e:84:
c4:41:44:8d:cd:94:29:13:a2:b1:55:62:95:af:35:e9:15:f4:
63:59:38:18:b4:d4:fa:bb:2e:84:35:ef:f2:0f:4c:49:77:9b:
6d:56:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:39 2025 by rpki-client