Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa
File: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (raw, json)
Hash identifier: /togfiKp/esHW/5NXVI5ia6O80flF7M0uGoRMDTj9cQ=
Subject key identifier: 17:E6:90:A8:82:5B:99:DA:E0:C2:B2:1C:20:7A:32:4B:6E:9C:0E:85
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 78096C8215F3E983B1D0C840C3C49D165C16CD2B
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa
Signing time: Thu 24 Jul 2025 15:54:13 +0000
ROA not before: Thu 24 Jul 2025 15:49:13 +0000
ROA not after: Thu 23 Jul 2026 15:54:13 +0000
asID: 212238
IP address blocks: 185.37.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 08:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:09:6c:82:15:f3:e9:83:b1:d0:c8:40:c3:c4:9d:16:5c:16:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Jul 24 15:49:13 2025 GMT
Not After : Jul 23 15:54:13 2026 GMT
Subject: CN=17E690A8825B99DAE0C2B21C207A324B6E9C0E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:b5:8c:d7:8e:10:9f:a4:5b:16:57:29:4b:
1e:19:44:2b:8a:7f:a1:b1:0a:a5:f4:6b:9a:6e:87:
f9:57:44:7b:79:79:fe:76:6c:41:1a:db:37:a4:83:
4e:ca:e2:8d:7c:86:fe:ae:4d:cb:84:16:34:5a:3c:
56:0c:7e:30:14:33:9b:ff:97:fa:9d:88:b7:f4:84:
81:39:6d:18:52:2d:42:bc:a6:93:65:69:69:7b:cf:
45:59:b2:ea:05:e9:77:0f:3f:0c:c3:6f:7d:d8:3a:
76:49:7a:e1:8a:6e:28:db:c7:25:17:2a:e6:00:2d:
db:8b:6e:e8:af:63:47:0f:2d:eb:7d:53:f8:6e:90:
70:12:ee:b2:7d:7c:ed:f1:98:bc:18:c7:40:9b:ac:
df:1c:75:da:50:33:e5:cf:bf:74:b3:43:16:c2:7a:
45:94:55:04:f3:a0:3c:a7:d2:fe:df:5f:95:56:52:
ac:1e:19:de:89:c4:f8:6a:73:06:71:a7:b8:30:54:
15:85:9b:6f:14:bf:ca:ba:54:30:2f:f4:78:df:12:
ea:af:53:6e:fc:4a:99:a7:e4:44:60:31:b5:7b:ef:
59:d4:d2:fa:ea:88:6c:70:ba:e4:c0:b6:e2:0a:a6:
26:c2:ea:92:5c:0b:5a:45:d3:d9:a1:98:28:4f:d6:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:90:A8:82:5B:99:DA:E0:C2:B2:1C:20:7A:32:4B:6E:9C:0E:85
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.218.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:7f:cd:af:b9:f5:1e:cb:c0:1b:44:d3:2c:3f:5e:02:e6:f0:
6f:68:12:25:36:c7:da:fe:ed:fb:48:56:cd:b1:b7:7a:d4:83:
11:a7:d5:f0:e0:62:52:89:a4:7a:0f:e2:29:29:10:06:05:32:
8c:ec:48:94:7b:2a:b2:47:0e:08:e0:c2:19:45:61:32:20:aa:
17:ab:93:74:a4:a9:13:31:8c:59:56:12:d3:42:49:a8:75:57:
85:69:82:25:63:a7:62:42:9c:45:6f:04:ed:fa:16:44:c7:ff:
13:bd:2a:3a:ce:75:9a:53:91:39:39:ec:f1:fd:7a:01:61:82:
40:87:62:20:f8:72:62:ef:50:29:12:cc:2b:f6:e1:c6:43:ee:
c4:1c:b9:dd:3e:df:36:61:ce:c1:dc:0c:d4:4c:78:d6:f1:b6:
80:e6:d0:34:d3:73:b6:0b:00:d3:36:10:90:45:a6:d7:34:0c:
ef:5b:60:9f:31:5d:ce:4e:be:21:44:bb:d9:be:f9:d9:64:84:
85:cc:28:e9:f2:75:7d:ab:77:af:36:26:fc:35:4b:91:3f:fc:
95:44:7a:84:e8:8b:37:26:98:a6:2e:78:68:f3:e8:5d:db:a1:
a0:76:e6:02:cd:13:ba:4e:ce:e7:5d:dc:d0:0c:ba:88:fb:cd:
8c:57:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:54 2025 by rpki-client