Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa
File: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=
Subject key identifier: BA:80:5D:C1:44:3B:C3:81:5A:B1:C0:72:C0:9C:75:C8:38:D3:BB:07
Certificate issuer: /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial: 3267000F007EF8990EB8DFDBB4E4E9F844F355BC
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa
Signing time: Thu 30 Oct 2025 23:26:16 +0000
ROA not before: Thu 30 Oct 2025 23:21:16 +0000
ROA not after: Thu 29 Oct 2026 23:26:16 +0000
asID: 0
IP address blocks: 2001:7f8:14b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:67:00:0f:00:7e:f8:99:0e:b8:df:db:b4:e4:e9:f8:44:f3:55:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Validity
Not Before: Oct 30 23:21:16 2025 GMT
Not After : Oct 29 23:26:16 2026 GMT
Subject: CN=BA805DC1443BC3815AB1C072C09C75C838D3BB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cd:a9:fb:89:4f:0f:49:83:c6:c5:90:e8:00:
b1:fb:3a:30:f2:28:47:41:7a:3d:a4:d5:70:b3:c0:
7e:dd:d0:ad:d0:89:5c:ac:5d:86:13:37:f6:75:c3:
07:7c:04:55:03:ab:c8:43:0f:79:1b:2c:68:3e:3e:
de:64:af:79:8a:b0:04:ba:0e:09:4f:b7:36:52:97:
78:b2:0f:7c:fe:f1:84:ad:da:64:cb:9a:59:45:68:
a2:e1:cd:cd:6f:fd:17:0a:94:e6:be:8c:15:bf:b2:
13:88:35:82:04:dd:db:be:71:e3:97:e3:46:58:5b:
4c:25:af:4c:55:35:f7:f4:07:66:30:7b:57:9c:57:
9d:ff:34:dd:9f:14:9b:13:f7:ec:0b:28:79:22:84:
94:1b:f0:15:35:c6:d3:b2:85:50:a3:45:2d:6f:a0:
df:63:db:d4:94:a6:92:2f:0d:98:0b:e4:71:4b:c5:
e1:de:aa:c5:80:0f:ab:6a:2c:73:e5:73:39:12:c7:
53:b8:39:db:f3:99:0f:a6:55:58:e8:5a:1b:4e:df:
02:72:0b:76:03:b5:c8:68:a3:59:67:d2:98:15:ea:
35:c1:ec:10:71:bb:fa:fa:23:45:1f:85:b3:02:23:
16:0f:42:ff:e2:1b:92:06:4a:b2:96:6e:56:7a:ce:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:80:5D:C1:44:3B:C3:81:5A:B1:C0:72:C0:9C:75:C8:38:D3:BB:07
X509v3 Authority Key Identifier:
keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:14b::/48
Signature Algorithm: sha256WithRSAEncryption
2a:67:bd:51:b4:93:de:18:d2:35:0d:66:18:d7:84:eb:1a:47:
2f:eb:af:7a:f4:81:c7:e4:e3:d7:b1:e5:9e:45:7c:2e:43:ed:
3b:9f:6e:e5:50:16:4b:24:8d:1d:0d:30:dd:4d:6e:52:1e:d8:
f3:bd:94:da:03:ab:84:f4:4f:47:51:9f:55:d3:8c:ab:73:e4:
15:2a:71:08:49:7a:aa:a6:b7:8f:15:0c:70:31:79:e2:6d:5d:
55:46:38:32:26:e2:87:07:7c:92:37:8a:d2:e3:28:d2:fc:f5:
a6:14:e4:df:f9:19:e1:2d:91:c0:ae:7d:e9:22:5e:44:63:56:
c4:f3:c3:97:f4:40:e5:a5:b4:4b:7a:b7:e2:89:f4:5e:56:45:
52:5c:fd:20:49:2d:e1:da:6b:8c:9c:01:07:84:fb:21:db:bd:
5d:c2:6e:ba:2c:8f:7c:89:76:ec:e9:12:5b:77:52:74:0c:ef:
19:a1:d0:62:ba:1f:60:14:2c:69:3b:67:64:46:2c:a0:c0:dd:
e5:9a:00:bb:ff:62:ab:eb:a8:21:f7:ac:c1:bf:43:59:99:eb:
1e:a0:36:db:60:7a:e9:ff:cb:0e:15:73:f2:1a:29:18:34:50:
83:99:b3:e7:01:2b:01:31:3f:f7:89:7b:85:22:1f:92:2f:2c:
e2:29:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:37 2025 by rpki-client