Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e203230343733.roa
File: 3231322e362e34382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: bd7pfUAPd2iEntBrKkW4CYU1BhJJKWx1CGTXOchFWn8=
Subject key identifier: E5:D5:4B:73:0F:01:50:2E:EC:34:44:12:40:DA:AC:25:1D:84:E6:8D
Certificate issuer: /CN=0dd4cfa21d83abd8b565498180680d141a81960f
Certificate serial: 24C160EB3E1438237F28B9EA56BFEA368CE36E4A
Authority key identifier: 0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e203230343733.roa
Signing time: Wed 30 Jul 2025 14:46:39 +0000
ROA not before: Wed 30 Jul 2025 14:41:39 +0000
ROA not after: Wed 29 Jul 2026 14:46:39 +0000
asID: 20473
IP address blocks: 212.6.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c1:60:eb:3e:14:38:23:7f:28:b9:ea:56:bf:ea:36:8c:e3:6e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd4cfa21d83abd8b565498180680d141a81960f
Validity
Not Before: Jul 30 14:41:39 2025 GMT
Not After : Jul 29 14:46:39 2026 GMT
Subject: CN=E5D54B730F01502EEC34441240DAAC251D84E68D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:07:e5:6e:fe:68:63:ce:0e:5f:70:99:2b:
a1:5d:2b:f6:21:11:9e:4c:db:de:95:0d:0b:63:99:
f3:2e:00:66:ed:b5:0c:82:33:8e:24:e0:10:3c:0f:
4c:9d:00:86:c9:51:97:19:5a:77:f4:bf:a9:bc:63:
1f:4d:6d:2f:d1:c0:06:14:b2:2b:4d:4e:a0:45:81:
e7:02:1b:b0:b2:36:19:7f:94:92:28:ff:8a:07:78:
ea:61:41:12:b7:b7:47:0f:27:57:39:33:99:2b:35:
01:70:0a:69:39:0b:be:ca:ea:8c:6f:62:1c:f9:c8:
cb:ee:bc:93:fc:1f:1c:b8:45:19:24:51:55:06:d3:
e8:36:0a:3d:07:36:50:c8:a2:ae:5c:96:96:fd:3c:
f6:61:34:48:69:22:35:6b:b0:db:97:4f:f0:80:5e:
7e:a4:a8:76:84:82:80:ed:be:86:57:d1:34:fb:c6:
f1:7e:83:20:d9:81:49:4f:ec:df:8a:ad:97:1c:b9:
49:cc:1a:4d:b6:92:32:be:72:6b:89:b6:1a:71:55:
73:84:66:1f:f8:72:6d:5e:f9:60:a7:3e:6a:0c:04:
88:c2:52:45:7b:1e:2f:0e:4f:18:7f:5f:5a:ed:59:
11:17:96:70:7d:8e:a7:18:ea:d6:cf:16:54:64:e5:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:4B:73:0F:01:50:2E:EC:34:44:12:40:DA:AC:25:1D:84:E6:8D
X509v3 Authority Key Identifier:
keyid:0D:D4:CF:A2:1D:83:AB:D8:B5:65:49:81:80:68:0D:14:1A:81:96:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/0DD4CFA21D83ABD8B565498180680D141A81960F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdTPoh2Dq9i1ZUmBgGgNFBqBlg8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/212531c8-b248-4431-a18e-4e6dc8d6b6e8/0/3231322e362e34382e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.48.0/24
Signature Algorithm: sha256WithRSAEncryption
44:75:29:6e:3b:3d:33:21:5e:4c:11:80:06:49:4b:af:41:2d:
a5:f3:b1:60:f3:39:f1:be:7f:36:63:a6:e5:74:41:8b:20:91:
0e:21:aa:c7:70:06:b5:83:38:53:e9:a6:cb:ca:e2:9c:b1:07:
68:88:80:26:50:72:da:78:dc:a1:d6:a9:53:7e:a6:61:c5:47:
e5:c6:53:ec:fd:b6:ea:e2:a7:a5:e0:92:a8:38:6f:40:45:c0:
fa:1b:07:f5:35:60:a3:00:ba:d6:6b:55:db:66:43:72:a0:1a:
44:97:3b:78:5b:8f:05:30:e8:73:18:06:8e:ef:c8:d8:61:35:
e2:31:e0:03:5e:c7:34:a7:22:2e:fb:cc:24:8d:eb:16:b0:df:
72:3c:8d:ee:4a:5d:f6:c2:8e:4a:71:cf:89:b9:3e:1a:0c:40:
a7:69:b7:50:7d:1a:58:7a:c7:6f:18:48:41:4e:9b:84:e4:35:
46:9d:6a:c5:0b:e6:16:dc:18:4a:7b:95:22:38:30:5e:27:79:
43:2d:18:12:55:4d:6b:42:ed:66:cf:51:de:9c:6e:42:3d:49:
22:79:9b:af:d5:d2:bb:ac:c5:cd:c5:1d:b7:85:51:95:bc:34:
20:37:1f:3c:33:d1:5b:bd:5e:d2:4a:a8:1d:86:c2:3d:c4:8d:
bb:80:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:35 2025 by rpki-client