Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20323132323338.roa
File: 37372e3234332e38362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: P4zkeDsAS2oI3U4d6MaZhlF67ZKIa2guETH2FCh3R/E=
Subject key identifier: 99:3D:4E:9E:B4:41:D7:C9:C1:D3:AC:EE:2A:BF:8F:00:1B:28:8A:E7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 57F8BD5B0DA301ADEEDFD3BF0F42BC667AE5B036
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 27 Jun 2025 11:54:03 +0000
ROA not before: Fri 27 Jun 2025 11:49:03 +0000
ROA not after: Fri 26 Jun 2026 11:54:03 +0000
asID: 212238
IP address blocks: 77.243.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f8:bd:5b:0d:a3:01:ad:ee:df:d3:bf:0f:42:bc:66:7a:e5:b0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 27 11:49:03 2025 GMT
Not After : Jun 26 11:54:03 2026 GMT
Subject: CN=993D4E9EB441D7C9C1D3ACEE2ABF8F001B288AE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:0c:fa:14:5b:91:74:da:38:ba:3f:e2:32:
de:c5:05:ff:b5:9b:77:db:b7:f2:99:c7:31:4b:4a:
45:1d:64:ee:81:be:20:12:c4:b1:37:05:bc:f6:4e:
0c:d1:d7:9b:07:4c:7c:db:7f:21:55:57:f6:86:72:
d2:1e:b4:87:bb:2b:6c:34:d2:cd:84:ac:ac:46:e8:
b3:87:9a:33:ce:dd:0f:15:8d:37:16:7f:a7:a3:2b:
73:f6:1f:48:00:7f:6d:6b:94:53:09:42:a9:00:0a:
db:c6:f3:3e:2a:cd:ab:e5:a2:a2:79:58:77:44:68:
f1:8f:49:c6:f8:ab:c1:5c:46:c2:12:34:94:2e:e6:
0b:ac:81:98:56:01:1f:57:8b:88:b9:a3:3a:f1:ed:
53:ce:da:da:e7:6e:62:34:f0:ab:9d:19:c9:1e:f7:
41:13:88:06:30:16:4a:a9:37:de:f6:42:97:96:94:
d4:65:57:93:cd:64:04:6e:ce:08:38:1e:ed:50:fd:
2f:1e:f5:2c:cb:3a:7a:04:20:29:f9:90:02:14:97:
c4:fe:db:4d:51:f6:83:9e:c4:e9:60:51:1b:83:a4:
26:5e:d6:7d:65:19:4f:00:d7:cc:e2:c0:31:ba:3e:
93:a7:75:43:5e:b0:df:13:e6:52:7d:d1:6e:89:8a:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3D:4E:9E:B4:41:D7:C9:C1:D3:AC:EE:2A:BF:8F:00:1B:28:8A:E7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.86.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ba:12:26:ca:49:c9:8d:a0:9f:5a:bb:aa:a0:fb:29:c7:99:
92:ad:58:44:d1:56:2c:3a:ac:8b:d4:13:d7:80:2d:4a:7b:be:
5a:a4:26:fc:d1:24:84:3c:fc:a3:c7:b2:98:a1:f8:8c:bc:84:
19:f3:07:9d:c3:9b:cf:5f:01:7f:bc:bc:b3:f8:ec:66:64:11:
f2:fe:7a:c4:32:84:b0:f2:4b:59:4c:53:7a:52:90:a7:34:56:
49:08:d3:d7:d0:8d:49:11:8b:a1:c6:8f:32:a6:f4:d4:12:62:
75:d5:43:92:c1:39:e9:15:9c:cd:5a:3e:97:8a:fb:7d:a8:7e:
3b:3b:35:5f:8b:87:c8:e3:47:53:c4:1a:19:dd:98:f4:cc:4a:
33:36:86:b2:93:bb:2f:35:d6:8b:68:c8:47:3c:95:da:ae:63:
aa:d9:c1:d3:80:31:0e:d2:bc:66:a2:b0:46:7e:c8:22:13:a7:
d3:1c:38:b0:e3:72:e4:cf:45:01:fa:32:96:b5:bb:bd:1d:04:
9a:ad:e8:52:49:c3:25:14:a2:d1:ff:f8:d2:33:1c:14:91:39:
bc:22:13:a5:0d:53:f3:ab:c5:fe:fc:68:42:e7:84:71:e5:f4:
9d:5c:01:8d:6b:12:f4:87:e6:fc:a8:6c:fd:ad:08:5e:d0:74:
db:01:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:08:11 2025 by rpki-client