Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
File: 3138352e3130302e3231342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ndWcI6QW+5+TL3cPDHSRmOMfjXZOHwJOcyLG27PyKv4=
Subject key identifier: 2D:A6:1F:6F:B2:82:96:AD:63:27:79:F2:D0:8B:02:93:64:4B:04:73
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 59D6F0E8E8DAB2ED4C8CB27D197D6148B5A12414
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 00:12:05 +0000
ROA not before: Tue 04 Nov 2025 00:07:05 +0000
ROA not after: Tue 03 Nov 2026 00:12:05 +0000
asID: 834
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:f0:e8:e8:da:b2:ed:4c:8c:b2:7d:19:7d:61:48:b5:a1:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 4 00:07:05 2025 GMT
Not After : Nov 3 00:12:05 2026 GMT
Subject: CN=2DA61F6FB28296AD632779F2D08B0293644B0473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:ed:44:95:62:0c:e4:64:15:d1:f8:aa:10:
40:97:7a:c8:85:db:64:1a:7e:69:2a:c1:e7:c7:4a:
e9:ce:6b:7a:e1:d2:d0:d9:01:b2:4f:0a:bb:c3:19:
07:a8:70:02:01:4c:73:32:bf:25:b5:b0:ac:a4:2d:
24:38:f1:bb:2b:9a:20:65:c1:37:9a:81:a9:0d:63:
b2:80:14:80:9c:df:90:e5:52:ea:2a:5b:db:18:75:
ae:db:f8:96:bc:25:cc:02:34:27:df:71:01:47:08:
f7:a5:33:5c:e9:cf:e3:ca:78:f7:5a:19:aa:ae:ee:
e7:fb:d4:a6:3f:ba:b4:92:f6:22:4c:76:9d:4d:5c:
a7:5e:9e:e1:81:18:18:e9:ef:2e:c0:06:b9:04:1f:
af:3f:03:db:af:37:91:bd:17:e4:fe:c3:32:fd:25:
51:69:32:b6:c9:5f:91:9b:78:5d:e2:16:b0:5d:40:
fa:01:bb:19:13:7d:73:1b:b8:9d:73:2f:77:6f:a6:
5c:3b:d7:ab:9a:f2:ba:30:7d:2d:db:2b:9f:f5:5c:
14:f3:8f:29:4f:c3:b7:04:f7:75:38:7e:66:e9:41:
d7:ab:59:95:e4:7f:2f:97:e4:c5:61:51:29:20:84:
1f:6f:58:e0:57:7b:4f:00:7d:42:24:b8:cf:f6:21:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:1F:6F:B2:82:96:AD:63:27:79:F2:D0:8B:02:93:64:4B:04:73
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e3130302e3231342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
01:94:e7:15:b5:a7:10:a1:e2:6b:6d:80:68:ac:70:9f:c1:4e:
37:ee:eb:fa:41:16:bb:72:38:ec:6d:c6:6e:c0:f9:01:2e:43:
36:3a:cd:7e:de:4e:44:24:5f:b4:fb:de:6f:3d:fb:45:c1:96:
d6:71:d6:18:3a:e0:81:b4:eb:fb:32:a0:08:65:29:d7:49:c6:
db:83:66:5e:88:03:55:11:f6:d5:2b:f6:e7:58:64:13:04:e2:
c8:b1:5c:77:d8:31:f7:34:cd:14:80:00:9e:fb:9a:0e:a7:b9:
74:42:7c:c6:eb:68:f5:a8:70:99:0c:4d:af:54:d8:06:f5:16:
52:72:54:4a:f8:55:bb:7a:34:9b:c8:48:af:35:b9:b7:bb:91:
28:b3:82:4b:55:8f:ec:a1:9d:9e:b7:10:8e:5e:43:22:63:27:
a8:8e:dd:3c:07:5d:1f:9a:6c:9e:d1:ef:3d:31:69:05:c7:de:
ad:18:19:07:dd:88:ca:6a:f9:35:67:f6:10:3d:b9:3a:93:7f:
0c:3e:2e:ff:79:be:1b:60:13:c2:fe:5b:e4:91:90:62:c4:8e:
b8:b2:93:28:1a:4d:9b:79:70:c7:44:a8:c2:14:88:5c:d8:9d:
87:89:c5:7a:45:8e:e6:af:f5:6c:ad:88:b3:65:b1:54:11:e5:
34:ce:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:30:43 2025 by rpki-client