Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
File: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=
Subject key identifier: E1:7E:3C:3D:5F:7A:2B:89:1F:BD:C1:5E:E8:9D:03:A0:C5:08:8F:08
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 11684310E0A6BBCA4DE6007E274977D724FAEB45
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
Signing time: Mon 30 Jun 2025 06:02:44 +0000
ROA not before: Mon 30 Jun 2025 05:57:44 +0000
ROA not after: Mon 29 Jun 2026 06:02:44 +0000
asID: 152672
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 19:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:68:43:10:e0:a6:bb:ca:4d:e6:00:7e:27:49:77:d7:24:fa:eb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jun 30 05:57:44 2025 GMT
Not After : Jun 29 06:02:44 2026 GMT
Subject: CN=E17E3C3D5F7A2B891FBDC15EE89D03A0C5088F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:26:28:92:50:3f:09:f7:01:8b:0c:01:e0:d4:
45:90:08:bd:46:a2:a5:25:b2:af:1a:cb:0b:54:6c:
45:ab:09:e6:21:36:7b:2c:8f:64:7c:c3:5a:4a:22:
ae:a4:52:06:fb:38:78:b3:7e:58:f9:ef:72:d7:00:
06:32:af:87:4c:a7:c3:4d:86:fe:ee:6e:e9:b6:ea:
06:00:68:ee:0d:e8:8a:20:82:ef:3d:0d:52:af:c6:
85:26:86:c6:11:e5:18:02:82:63:22:e0:2a:25:19:
2e:2c:4a:15:1b:bd:1b:7b:c3:18:32:14:56:a9:9d:
01:ed:5e:5b:d6:f7:cc:ec:4c:d0:f8:ea:97:dd:76:
75:b2:6e:0f:23:d9:eb:e5:d8:b0:f2:46:24:f0:42:
30:d4:c8:55:65:5a:f3:24:45:d9:96:54:cc:cc:f5:
9a:04:fb:ed:bf:51:eb:70:fe:dd:40:b4:d3:bd:f2:
0f:f2:c8:c0:37:13:4e:b7:17:2a:7d:f4:6b:66:af:
5d:bc:5b:ab:07:9d:d5:05:50:bd:10:10:95:09:56:
08:1d:ae:0f:2e:00:51:59:a5:6b:17:80:e5:2f:19:
5f:ae:aa:70:85:e2:2f:a1:90:98:e0:64:db:ab:b0:
2e:1f:11:28:42:75:8f:ff:23:b4:2c:5e:a8:ff:2d:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7E:3C:3D:5F:7A:2B:89:1F:BD:C1:5E:E8:9D:03:A0:C5:08:8F:08
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
95:13:6f:23:9b:3b:73:9d:6d:74:90:45:4f:3c:ab:4f:94:0f:
7a:14:12:4f:34:b5:ee:ad:43:b5:a3:39:78:de:15:7d:2f:df:
c2:7d:78:8d:50:21:24:20:e7:9a:80:61:ea:fc:c5:c5:2a:50:
3c:2a:e6:0c:4d:3b:71:fd:a2:78:c2:08:57:76:9d:88:a4:c7:
84:bb:39:fd:2e:52:59:24:90:60:07:d5:ab:71:7a:4f:84:50:
1e:bb:06:d4:30:88:4e:ef:6d:c9:2e:7b:20:d3:f8:f0:6b:10:
ed:b2:22:65:2c:bb:d4:0f:45:be:1b:5b:01:5d:85:50:14:f2:
6b:a7:3e:e2:8d:41:36:58:2b:fb:45:1e:43:c3:a2:29:e6:8e:
72:7a:9c:92:0b:30:89:15:b1:d1:21:57:de:d3:81:aa:bc:92:
5c:a4:00:51:17:50:7c:eb:e8:cd:78:df:a7:4e:24:d4:e3:19:
39:3a:25:d8:94:54:07:6f:8b:4b:b1:11:f3:d1:bb:13:d7:be:
49:5d:80:a4:ec:1f:1e:4b:ed:04:c0:d3:03:cd:bb:ac:f3:54:
e5:b9:68:7b:23:2d:c9:24:a8:70:5c:fd:04:a3:5a:b4:de:93:
02:74:4e:f3:9c:6b:72:59:c7:56:ac:d1:2d:fd:3c:59:a6:d5:
d2:73:d4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:51 2025 by rpki-client