Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203439393831.roa
File: 3138352e3139372e33312e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: FW+HgXnunca1DZbEpATSF/rn3V3mEeFtwOrEjnU7eTU=
Subject key identifier: 6C:DE:25:B9:61:A3:AE:79:FA:A2:DE:8D:A6:0A:BE:4B:E9:BA:E9:73
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 632DAB6A25513CF81EC43FEA49BABB4226E289F2
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203439393831.roa
Signing time: Thu 07 Aug 2025 07:28:16 +0000
ROA not before: Thu 07 Aug 2025 07:23:16 +0000
ROA not after: Thu 06 Aug 2026 07:28:16 +0000
asID: 49981
IP address blocks: 185.197.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2d:ab:6a:25:51:3c:f8:1e:c4:3f:ea:49:ba:bb:42:26:e2:89:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 7 07:23:16 2025 GMT
Not After : Aug 6 07:28:16 2026 GMT
Subject: CN=6CDE25B961A3AE79FAA2DE8DA60ABE4BE9BAE973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:29:03:e2:45:58:2c:e8:7a:85:d1:39:dd:
f0:99:ea:a3:74:d4:e0:6f:0c:31:80:4f:63:68:e5:
d7:27:c0:b8:1c:9c:ac:fe:a3:ab:e0:7f:3a:b3:98:
8d:68:4d:b7:b6:6d:f3:02:9e:a8:37:48:ad:b0:d3:
f8:82:23:a7:62:36:c4:b4:96:98:29:5b:e1:aa:10:
4c:0f:e6:2c:10:64:46:60:7e:c0:39:fc:b8:c2:2a:
fc:53:ce:f9:e9:a7:4e:6d:6f:e7:7c:60:8b:70:0f:
49:aa:6c:b3:87:04:20:ea:3f:f3:c3:ae:ef:54:8d:
ed:10:0e:9b:6c:3a:fb:53:4d:c3:4f:ed:6c:9e:35:
3b:1c:6b:5e:54:a1:29:0e:e2:72:69:1a:66:8c:0f:
db:c5:83:45:85:a6:80:4c:e3:98:62:89:d3:00:9b:
5e:cf:6f:89:6d:40:64:eb:68:6a:76:44:4a:78:7a:
77:67:94:ba:c7:38:14:99:a6:96:ae:7c:53:90:6b:
01:6b:e1:16:44:23:c5:76:18:c3:ec:54:14:32:7f:
8b:24:3e:3d:90:29:89:83:e4:33:5a:77:e8:24:a0:
31:0a:4d:f1:dc:94:66:24:f4:1e:0b:ac:54:b1:b3:
a8:96:76:d5:05:3a:34:61:ea:9e:e8:c1:64:a7:b8:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DE:25:B9:61:A3:AE:79:FA:A2:DE:8D:A6:0A:BE:4B:E9:BA:E9:73
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3138352e3139372e33312e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c5:5c:db:5a:ab:b8:9d:5b:50:63:03:67:75:d1:48:cd:b9:
24:ff:b1:41:a7:2e:4c:7b:9d:2d:61:f3:db:09:b5:4a:52:c8:
ca:fb:fa:7e:0a:9c:b7:c0:83:e4:40:c7:0c:24:42:60:3f:d0:
21:6b:5e:67:1d:1f:30:fd:67:96:f9:c8:99:0b:f7:94:de:c5:
6e:96:af:09:c3:a7:12:ec:4b:4e:28:c4:60:19:79:c4:4b:40:
80:c3:91:5c:c8:cd:6d:fb:39:75:5a:4f:2d:2d:1f:2f:1f:77:
e3:7d:c6:43:8c:cd:3d:16:97:06:ae:16:a6:77:de:2b:2b:6d:
f9:f8:b0:a1:36:ca:84:30:d1:6b:b9:23:1f:e0:d2:35:98:4f:
67:41:7b:5c:70:13:f3:10:f4:34:97:03:f9:2d:f9:ec:13:06:
96:b7:96:16:ca:04:28:5f:57:29:56:b8:be:c4:03:c9:dc:d0:
a8:b8:d1:47:ef:2b:ed:1b:69:2c:06:11:c2:d8:47:8d:16:49:
98:d0:5c:1c:e6:d9:ea:c6:44:23:1d:ab:bf:e1:dd:02:b4:3c:
8c:30:91:ef:8a:38:cc:6b:ed:a9:98:7f:12:32:9c:b5:f9:83:
0c:f6:20:b2:96:3d:51:af:e4:61:02:99:7e:99:6c:a3:e6:e6:
c7:28:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:58:43 2025 by rpki-client