Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e203231383539.roa
File: 38352e3233372e3231312e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: asbmtWkT3GHhuZPi2bbYNIxpM9Wgm5QltRFD+IXS6Oc=
Subject key identifier: 1B:D2:11:D5:5B:78:A0:69:92:FC:DC:F3:CA:B6:CA:05:45:90:E2:AE
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 12201C250A1526FCE8933E6846E179F9101265B7
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e203231383539.roa
Signing time: Wed 11 Jun 2025 06:54:09 +0000
ROA not before: Wed 11 Jun 2025 06:49:09 +0000
ROA not after: Wed 10 Jun 2026 06:54:09 +0000
asID: 21859
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 09:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:20:1c:25:0a:15:26:fc:e8:93:3e:68:46:e1:79:f9:10:12:65:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jun 11 06:49:09 2025 GMT
Not After : Jun 10 06:54:09 2026 GMT
Subject: CN=1BD211D55B78A06992FCDCF3CAB6CA054590E2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:07:ff:88:6a:ed:df:36:d8:80:9f:40:10:
fe:d8:2d:15:74:88:e3:f2:8b:e3:41:e4:82:9e:15:
cc:53:74:93:81:2d:34:40:59:fb:87:1d:7b:33:73:
6d:b6:d7:c0:0f:50:3d:6d:20:eb:bc:1e:1a:fa:24:
6a:af:bf:6d:c9:10:a3:5d:a8:d9:9a:ad:09:c5:dd:
3e:62:76:6b:68:88:16:23:0e:fc:a8:dd:ff:73:4c:
2a:1e:5a:20:31:a8:ec:36:cd:e2:79:d8:b7:98:ba:
de:86:70:fd:bc:e5:d0:1f:b0:76:b3:6b:9a:42:d7:
39:54:45:4e:3d:b8:f0:9e:66:8a:a9:3d:3f:ab:7b:
c9:01:1d:b9:45:84:3e:02:76:31:97:39:98:93:ba:
c9:7b:af:58:b4:60:81:5f:9e:40:e4:9a:9b:eb:67:
3e:09:5c:74:eb:6b:4c:e5:a1:bf:c0:90:50:dc:ee:
91:2b:f2:a0:a7:90:18:60:4d:a3:34:18:35:05:cc:
52:ce:c3:35:fa:0e:8a:2d:f1:1e:d7:8c:bb:c7:52:
b3:15:f1:ce:67:aa:55:82:42:c6:dc:58:6b:b4:df:
dd:2c:a7:1f:80:e7:f8:08:32:2d:89:7c:c9:01:28:
52:eb:46:47:47:06:4a:c2:bf:77:d7:06:7e:3c:5d:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:11:D5:5B:78:A0:69:92:FC:DC:F3:CA:B6:CA:05:45:90:E2:AE
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231312e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
76:09:12:a6:01:3a:7a:3c:be:d8:ff:d7:c5:b6:4a:a8:1d:1f:
1e:52:bd:91:fc:a5:c6:3f:33:d0:7d:81:92:c1:8c:11:cf:73:
30:87:c9:4e:59:e4:62:05:20:71:a4:fe:2d:2f:15:f3:37:35:
eb:3e:b8:23:c8:b4:98:ac:97:f2:75:2b:51:a8:b9:d2:09:02:
ac:66:e2:77:3d:9f:21:b9:c3:79:2e:3b:5f:0c:54:d7:dc:c9:
78:c5:65:d8:5a:24:37:bf:14:ee:1f:3e:5d:04:d5:2e:f3:3e:
3e:c1:a8:51:27:18:62:5d:f6:60:f3:db:15:d7:8d:25:3c:47:
eb:b7:87:bd:0f:37:9b:f8:29:b2:cd:65:6b:04:54:98:23:55:
f8:5f:f4:34:d7:d2:22:9f:dd:00:57:4b:aa:9d:6e:86:ef:c6:
5e:fb:14:fe:ef:c4:d1:9e:aa:0f:ab:e9:6c:f0:76:e6:8a:d1:
22:c9:60:3c:28:4f:cd:4d:f8:6b:98:7e:88:2c:b2:72:ea:ab:
f9:21:64:37:ca:48:51:c3:04:ae:89:af:ae:5e:03:67:b2:65:
de:d2:37:fc:68:29:d8:f6:82:8d:e5:bc:a2:26:04:c7:23:e6:
f8:5a:fb:18:83:1c:48:fe:ed:86:4b:80:cf:0f:d6:ac:53:0a:
86:94:24:4f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEiAcJQoVJvzokz5oRuF5+RASZbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM5NDNjYzJhN2NkYzM3OGEzNzcwMjU3M2JiNGY4MjEx
NzBiNTMwZDAeFw0yNTA2MTEwNjQ5MDlaFw0yNjA2MTAwNjU0MDlaMDMxMTAvBgNV
BAMTKDFCRDIxMUQ1NUI3OEEwNjk5MkZDRENGM0NBQjZDQTA1NDU5MEUyQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW4Qf/iGrt3zbYgJ9AEP7YLRV0
iOPyi+NB5IKeFcxTdJOBLTRAWfuHHXszc22218APUD1tIOu8Hhr6JGqvv23JEKNd
qNmarQnF3T5idmtoiBYjDvyo3f9zTCoeWiAxqOw2zeJ52LeYut6GcP285dAfsHaz
a5pC1zlURU49uPCeZoqpPT+re8kBHblFhD4CdjGXOZiTusl7r1i0YIFfnkDkmpvr
Zz4JXHTra0zlob/AkFDc7pEr8qCnkBhgTaM0GDUFzFLOwzX6Doot8R7XjLvHUrMV
8c5nqlWCQsbcWGu0390spx+A5/gIMi2JfMkBKFLrRkdHBkrCv3fXBn48XeJDAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUG9IR1Vt4oGmS/NzzyrbKBUWQ4q4wHwYDVR0j
BBgwFoAU3JQ8wqfNw3ijdwJXO7T4IRcLUw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYtNjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0
MTAxLzAvREM5NDNDQzJBN0NEQzM3OEEzNzcwMjU3M0JCNEY4MjExNzBCNTMwRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNKUTh3cWZOdzNpamR3SlhPN1Q0SVJj
TFV3MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmFiMDcyMmYt
NjRkOC00Y2E5LTkyNjctNGU1MTU0NDM0MTAxLzAvMzgzNTJlMzIzMzM3MmUzMjMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Ve3TMA0GCSqGSIb3DQEBCwUAA4IBAQB2CRKmATp6PL7Y/9fFtkqoHR8eUr2R/KXG
PzPQfYGSwYwRz3Mwh8lOWeRiBSBxpP4tLxXzNzXrPrgjyLSYrJfydStRqLnSCQKs
ZuJ3PZ8hucN5LjtfDFTX3Ml4xWXYWiQ3vxTuHz5dBNUu8z4+wahRJxhiXfZg89sV
140lPEfrt4e9Dzeb+CmyzWVrBFSYI1X4X/Q019Iin90AV0uqnW6G78Ze+xT+78TR
nqoPq+ls8HbmitEiyWA8KE/NTfhrmH6ILLJy6qv5IWQ3ykhRwwSuia+uXgNnsmXe
0jf8aCnY9oKN5byiJgTHI+b4WvsYgxxI/u2GS4DPD9asUwqGlCRP
-----END CERTIFICATE-----
Generated at Tue Jun 17 19:41:27 2025 by rpki-client