Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20383334.roa
File: 3135322e38392e3132362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 77cYDQV3Zp1CLNKFzrbXLVRGMyy77A+xdUvKJ6qZeK4=
Subject key identifier: 91:22:88:77:62:BB:C2:0C:E9:C4:88:9B:6C:CD:3C:EA:80:A8:4C:E2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 51804BC0A942448D5E4ED7AB3E65EA3DD46C0014
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20383334.roa
Signing time: Sat 18 Oct 2025 06:10:21 +0000
ROA not before: Sat 18 Oct 2025 06:05:21 +0000
ROA not after: Sat 17 Oct 2026 06:10:21 +0000
asID: 834
IP address blocks: 152.89.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 02:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:80:4b:c0:a9:42:44:8d:5e:4e:d7:ab:3e:65:ea:3d:d4:6c:00:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 18 06:05:21 2025 GMT
Not After : Oct 17 06:10:21 2026 GMT
Subject: CN=9122887762BBC20CE9C4889B6CCD3CEA80A84CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:c2:94:4e:28:4f:4a:65:fc:86:06:95:77:
5a:9e:70:2f:7c:e6:26:b5:4a:0b:b9:9b:56:a0:a0:
3f:7c:4b:97:59:72:4a:c0:93:e2:8b:06:98:a6:a8:
49:1b:5f:10:d5:6e:1f:c4:ec:f4:f4:cc:12:46:20:
1d:94:86:01:74:96:10:a9:d3:b0:88:f3:d2:c4:00:
c1:dd:6d:21:84:17:7d:4a:19:68:db:cd:2b:fe:ee:
9d:53:5f:12:3d:60:6d:e0:ee:cb:92:35:90:1d:bd:
91:b0:99:55:bd:b5:de:6a:b5:b1:01:84:94:c0:3a:
0a:cd:ed:4d:0a:ee:8e:e3:66:aa:40:d8:ee:bf:eb:
64:63:8c:bf:d8:49:8a:44:da:a1:dc:24:92:cc:80:
2d:e5:6f:14:95:64:8c:14:0b:cc:35:23:13:91:ea:
8d:f7:8c:8c:c6:17:d1:ce:21:b9:5f:ba:75:ce:38:
39:b9:c4:b2:1d:ed:bd:0c:95:31:61:e2:58:b0:3a:
d0:d6:79:69:90:0f:2a:79:dd:91:d7:5d:5d:af:71:
b9:b0:c3:eb:fc:27:4c:f0:2b:56:73:df:2b:c9:ec:
af:3a:48:03:fe:23:80:75:72:fb:29:aa:c8:7d:b6:
e4:f7:1e:89:e5:6f:db:49:38:85:e1:40:60:0d:f3:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:88:77:62:BB:C2:0C:E9:C4:88:9B:6C:CD:3C:EA:80:A8:4C:E2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.126.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e1:0e:fd:d1:68:5e:22:4e:c1:58:18:20:03:8e:d4:57:2b:
57:6c:56:3c:f6:1c:7a:f0:0f:28:38:24:17:a8:2d:d0:7d:87:
8b:d2:fc:d4:f0:e3:3e:3a:d7:36:62:69:53:e8:67:00:a9:fc:
0d:79:62:2e:44:00:ce:16:88:79:b3:2a:6a:88:cb:22:35:62:
b4:de:08:7d:25:48:2a:30:d9:76:fa:6c:d6:b2:44:6a:d6:98:
ff:46:aa:5e:04:ec:04:b0:f4:02:12:8e:37:9b:18:56:e6:07:
5d:b6:23:c5:db:e9:38:81:e0:90:b2:50:4f:4b:19:d4:e9:26:
72:22:ce:aa:2a:99:81:13:62:7f:cb:17:30:a2:ff:46:fe:18:
c7:e7:8a:66:72:6f:2b:bf:47:6b:13:0d:cb:b7:8a:23:02:75:
26:41:77:5a:a9:b1:f7:08:e6:1b:0c:8a:3d:f4:cd:0a:58:2e:
d9:f0:7f:00:d9:ae:fc:06:fd:88:6f:8c:2e:b5:54:15:91:b0:
63:dc:31:5f:5b:ea:7b:7b:a8:48:46:82:2b:03:97:3e:80:57:
38:6e:b7:4f:d2:f6:1a:81:1c:1d:03:70:36:b9:61:6e:b3:10:
b9:70:67:de:2d:9f:a0:25:99:09:9b:2b:53:2e:e9:82:9a:e1:
ad:ce:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:24 2025 by rpki-client