Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20383334.roa
File: 3135322e38392e3132342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: huhL0u9Pcny2XudZ1lg+wKDCIVwU51tZqT34TH6iXCo=
Subject key identifier: 8F:8E:84:D7:AE:AA:4A:E9:55:67:73:E7:75:87:83:2F:92:44:4F:8D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 442ED71AAF562264122DFF9876CFD3962AFDE4F5
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20383334.roa
Signing time: Sat 18 Oct 2025 06:09:59 +0000
ROA not before: Sat 18 Oct 2025 06:04:59 +0000
ROA not after: Sat 17 Oct 2026 06:09:59 +0000
asID: 834
IP address blocks: 152.89.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 02:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:2e:d7:1a:af:56:22:64:12:2d:ff:98:76:cf:d3:96:2a:fd:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 18 06:04:59 2025 GMT
Not After : Oct 17 06:09:59 2026 GMT
Subject: CN=8F8E84D7AEAA4AE9556773E77587832F92444F8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:69:cf:f3:6a:1d:7f:aa:f8:e5:c1:94:b0:
66:ee:14:37:b0:33:ba:0b:23:4f:85:af:71:da:05:
43:8f:b4:89:29:a1:b4:62:ff:14:db:b4:96:41:18:
f0:9b:3a:e6:20:0c:d8:00:47:7b:2e:e5:12:75:02:
b5:0a:fe:3e:0b:8f:5f:2e:09:cd:64:27:04:72:54:
2c:41:68:1f:d2:66:b9:a9:15:53:ca:c2:fa:5c:f8:
04:2f:06:15:73:05:13:e9:22:15:13:88:4a:6a:9e:
e6:8b:58:6a:52:41:e8:f0:cf:ef:41:0b:28:01:0e:
ca:d0:cd:50:38:35:7b:b5:45:bb:16:76:7c:59:de:
47:e7:d5:81:3b:de:10:de:d4:7d:b8:89:22:54:05:
ad:22:c9:46:40:f8:3c:74:e4:6b:12:a2:a7:cd:1e:
23:7f:8d:c5:07:de:75:cb:4a:e9:61:db:44:58:ff:
23:8e:c7:50:6f:4f:bc:75:0d:d4:da:42:06:0d:3a:
6d:41:ff:57:44:4b:2d:74:32:e5:68:19:56:1d:f5:
a2:1d:f5:81:63:20:d2:86:04:49:98:a7:0d:fb:ef:
0c:a8:77:bb:31:bb:e9:89:63:0d:82:d1:16:1d:75:
15:5c:50:38:07:85:d3:49:40:9d:cb:4b:bd:f8:13:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:84:D7:AE:AA:4A:E9:55:67:73:E7:75:87:83:2F:92:44:4F:8D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.124.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1c:d1:dc:19:a5:ae:9a:a3:9d:10:7f:d5:39:5c:85:8c:7e:
60:6c:af:52:bc:51:56:f7:26:bc:b4:64:d5:a2:be:ff:cd:c0:
85:6e:d0:dd:f5:c6:20:dd:b8:c4:cb:cb:04:ff:aa:f2:ac:e5:
e7:ce:d1:84:c2:c2:1b:e6:e0:2a:de:38:d6:aa:20:37:37:88:
4f:cb:82:df:4c:31:64:63:79:75:ed:45:c2:8e:73:6f:f7:30:
7a:6f:2b:2a:89:d0:7d:91:b4:2c:30:3f:f1:b0:86:4c:3c:61:
77:fd:52:81:e1:9d:d5:91:d0:ff:c6:d8:0a:60:2d:c9:be:f3:
2a:ea:ec:66:18:e2:0a:eb:7f:ba:32:c8:4f:01:a9:f9:57:d8:
08:ee:2c:21:f8:0f:f9:fe:bf:a9:d7:11:3d:b5:e8:43:81:d6:
de:a4:02:bc:1c:0f:67:52:5d:fe:29:30:99:4b:a3:51:05:33:
9f:18:6a:e1:da:7a:9d:9f:be:71:b6:14:ab:56:ec:62:6e:68:
90:30:7b:e0:a2:80:d6:92:40:76:6b:0a:1f:c5:8b:6d:43:f4:
ae:3d:a3:3c:a5:00:50:3e:b6:c0:7c:77:fe:4e:5e:9d:09:ab:
fb:2c:63:7e:99:4a:5a:7d:9c:c6:d9:a3:e1:86:64:ab:c2:9c:
f9:7d:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:23 2025 by rpki-client