Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203136323736.roa
File: 37382e33312e3234382e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: oqOmy+icBCXO1cV1Mfmlq1jLulGZEPBln6PD5FiALMc=
Subject key identifier: 97:DE:C9:00:31:D8:88:31:B0:9D:E8:3B:76:8F:0B:41:DD:DE:B3:5B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 378BE7530739A920771ECD623E15E6A91EBC656A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203136323736.roa
Signing time: Sat 23 Aug 2025 07:28:26 +0000
ROA not before: Sat 23 Aug 2025 07:23:26 +0000
ROA not after: Sat 22 Aug 2026 07:28:26 +0000
asID: 16276
IP address blocks: 78.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8b:e7:53:07:39:a9:20:77:1e:cd:62:3e:15:e6:a9:1e:bc:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 23 07:23:26 2025 GMT
Not After : Aug 22 07:28:26 2026 GMT
Subject: CN=97DEC90031D88831B09DE83B768F0B41DDDEB35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a9:8c:13:74:4a:39:60:77:68:0e:e3:7c:b3:
e5:30:53:0a:e9:84:69:56:5c:c5:98:48:d7:29:40:
de:d7:f9:11:c7:c0:4f:7e:73:a0:dd:23:7b:b3:0b:
fd:16:52:b4:c7:41:6e:56:df:83:98:e0:34:2d:7a:
f2:0b:cd:c0:91:43:a2:b6:7d:e3:67:99:48:5a:a4:
ec:b9:d5:2e:98:d7:01:a7:c7:62:e5:f2:2d:cf:33:
a2:03:a2:18:f2:02:d3:a6:a1:42:66:95:13:5d:55:
c2:8e:9e:b7:d1:b5:fc:f5:d8:5e:2b:4b:0d:d1:20:
6b:39:68:c5:c4:d6:c6:da:46:5a:6c:4c:42:49:2d:
0e:81:db:ac:e0:73:9d:f1:7d:c0:c7:86:bc:dc:82:
40:d8:4f:e8:c6:85:e0:05:c7:8b:f2:86:9a:43:db:
ec:80:c1:a8:8f:85:ef:33:2d:a7:2b:57:7b:00:67:
8f:e6:8f:4c:e7:71:ab:e6:60:fd:0b:a1:60:80:59:
d5:67:1d:52:0a:a2:a1:7c:f6:25:c8:20:11:6d:b3:
5d:ef:09:f1:d5:13:72:e1:5c:e6:da:64:b2:51:02:
b6:28:89:0a:f0:26:d0:3e:a3:a2:19:a9:a1:29:0c:
b3:c8:b8:e0:f4:ba:db:18:c2:35:f4:1d:b3:9e:93:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DE:C9:00:31:D8:88:31:B0:9D:E8:3B:76:8F:0B:41:DD:DE:B3:5B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1a:54:f1:b6:cf:24:43:1f:6b:2f:d6:74:fb:6d:52:9e:0c:
85:6f:91:d7:72:52:79:d4:4a:68:33:bf:81:86:52:c1:38:58:
be:bc:43:48:83:19:77:a8:3d:e3:1b:a3:ee:b5:ab:ff:7c:5d:
b7:b5:62:1a:27:ee:2b:56:1e:9b:a7:be:e1:14:b2:92:1a:45:
91:8c:d3:30:06:63:83:7e:3c:0d:b8:b8:be:a4:02:51:40:ff:
b3:18:29:e9:ae:51:8c:d6:7c:d0:2f:91:01:35:e0:8a:fa:2e:
d8:da:7d:99:bf:25:fd:11:0b:ae:3d:23:be:9d:fb:c2:ba:86:
6f:9f:14:eb:41:c6:3d:8e:c3:99:77:59:97:7d:27:e3:ed:6d:
82:4a:62:fd:47:f3:75:77:15:f8:c5:6f:3e:ff:d9:4b:e3:2d:
e7:c5:32:94:dc:2b:2c:6e:25:da:a3:2b:9f:ed:c0:e1:cd:7f:
cf:df:02:55:11:1a:c2:39:f3:89:a7:f3:bd:5e:29:f1:2a:a8:
49:c3:19:c1:03:32:d9:e6:01:9e:33:e3:cd:cf:b2:f2:78:ba:
c2:53:2a:02:05:f0:e7:b2:5a:13:35:21:bf:23:ac:43:71:6d:
a6:84:bf:b2:db:d0:16:3c:de:c4:69:23:ff:a2:4b:62:2a:35:
52:a6:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:06:09 2025 by rpki-client