Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231372e302f32342d3234203d3e203537303433.roa
File: 38352e3233372e3231372e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: KA5cRATVdgrT7+aBp7YwunEawb9uqpOEnZWVU9/ZEwE=
Subject key identifier: 34:31:CE:70:AF:58:7B:9A:AC:8A:4D:89:14:57:B6:4B:71:E8:7C:D3
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 4B8DCA006C3D23D08BD452DFB51AAEC87A07B8F5
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231372e302f32342d3234203d3e203537303433.roa
Signing time: Wed 30 Jul 2025 14:41:46 +0000
ROA not before: Wed 30 Jul 2025 14:36:46 +0000
ROA not after: Wed 29 Jul 2026 14:41:46 +0000
asID: 57043
IP address blocks: 85.237.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8d:ca:00:6c:3d:23:d0:8b:d4:52:df:b5:1a:ae:c8:7a:07:b8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jul 30 14:36:46 2025 GMT
Not After : Jul 29 14:41:46 2026 GMT
Subject: CN=3431CE70AF587B9AAC8A4D891457B64B71E87CD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:e3:bf:f1:d3:5f:18:39:a6:78:f4:72:67:
61:2f:32:d2:db:79:33:51:f4:f4:a1:dc:07:0f:b5:
b9:da:ba:9e:63:f5:4b:41:9f:53:e3:d3:a6:c6:af:
e8:46:55:13:48:64:b1:5b:ac:e1:9c:86:93:a4:ce:
14:97:58:2d:94:e4:4c:d7:a4:0e:cf:48:81:5b:28:
da:89:8e:92:52:53:98:e4:69:64:25:7f:d7:e3:33:
47:4e:c8:68:9c:b6:3c:65:87:8a:64:de:5a:d1:a9:
49:c7:91:dd:52:8e:bd:6e:e1:70:d1:28:3a:8a:fd:
ce:57:e0:b5:16:72:30:e8:45:4f:8d:8d:e0:19:00:
09:18:23:10:e3:b7:f5:ee:0c:5f:2d:37:64:03:19:
ea:19:1f:99:2f:2f:f0:89:83:6b:7a:49:83:03:f6:
83:81:fd:79:d0:c8:6f:0a:7b:ed:72:e5:af:43:57:
e5:63:98:b4:1e:3b:8c:4c:dd:56:72:d4:bd:6a:11:
79:d1:f9:6b:2e:0f:ea:96:de:d4:5d:3b:12:ed:48:
be:8b:44:7d:c4:bb:b5:24:04:2a:e1:1a:33:e6:81:
c6:d0:5e:5f:d0:55:2a:e7:0d:ae:f5:da:22:ce:32:
93:40:e0:4d:22:ba:f6:e4:59:57:2b:c0:96:db:3f:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:31:CE:70:AF:58:7B:9A:AC:8A:4D:89:14:57:B6:4B:71:E8:7C:D3
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3231372e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f8:d2:9f:9a:36:03:e8:18:7c:c2:13:27:dd:bc:33:68:26:
f1:98:03:18:e9:a0:67:63:5a:eb:af:80:b9:44:0e:34:c5:1b:
a8:17:61:60:40:05:dc:12:bd:8a:29:d3:ec:32:67:c2:fa:28:
a9:df:9d:ed:8e:56:d9:8c:ff:08:18:33:d5:3c:47:f1:21:01:
3f:41:59:da:20:5c:bb:44:42:c5:47:bb:fa:7b:fb:38:9f:19:
34:6d:a7:c4:a0:b1:5e:19:0c:80:e0:ad:28:b8:9d:88:a8:1a:
3a:5e:86:70:96:ed:18:72:64:b5:e0:22:15:56:c2:c3:90:cb:
46:92:a9:c2:34:ae:4e:85:b4:bf:8c:5f:b2:32:49:bd:8c:02:
54:1c:f1:68:c3:1f:9b:4f:fa:82:f4:10:34:24:f8:e9:0b:fa:
f3:48:23:17:bc:5f:aa:7c:e1:28:4e:a7:e9:68:b5:60:dd:f3:
96:37:9d:2d:c2:2e:d5:ae:9a:ce:f5:a0:e4:72:d1:12:09:43:
c7:5e:e5:22:70:fb:7c:e3:39:95:f9:51:1e:3e:ce:d3:d9:e9:
76:7b:5f:45:06:6a:c3:5c:b4:45:bc:6c:38:9e:c7:9c:fb:ff:
bb:ff:15:d8:4d:64:61:39:fb:d7:46:0e:a9:35:45:1d:fa:40:
ca:45:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:52 2025 by rpki-client