
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/3139352e39352e3134392e302f32342d3234203d3e203236393534.roa
File: 3139352e39352e3134392e302f32342d3234203d3e203236393534.roa (raw, json)
Hash identifier: 4RKcXrOywUF2n3zLGUholuQfQjsDw3jfgXGtm0jfONU=
Subject key identifier: 1B:35:94:FC:F9:48:3D:3A:F3:AA:53:0B:31:E5:53:E5:CF:3F:6D:78
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 6CCA56FB97D90E7783E3B70175E959EC12F640BE
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/3139352e39352e3134392e302f32342d3234203d3e203236393534.roa
Signing time: Tue 29 Jul 2025 13:41:59 +0000
ROA not before: Tue 29 Jul 2025 13:36:59 +0000
ROA not after: Tue 28 Jul 2026 13:41:59 +0000
asID: 26954
IP address blocks: 195.95.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ca:56:fb:97:d9:0e:77:83:e3:b7:01:75:e9:59:ec:12:f6:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jul 29 13:36:59 2025 GMT
Not After : Jul 28 13:41:59 2026 GMT
Subject: CN=1B3594FCF9483D3AF3AA530B31E553E5CF3F6D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:7b:06:08:62:bd:3b:85:b7:d3:90:cf:d0:
08:f5:91:0f:d6:96:5d:3d:4a:d3:32:e2:9f:50:5b:
b2:01:e6:f8:55:8a:7c:5c:d7:a6:f6:9e:d2:38:be:
45:0b:3b:53:cc:e1:95:66:9a:4f:de:92:95:ef:18:
ce:62:a4:f2:f3:1d:aa:82:85:0f:66:40:19:16:91:
aa:64:9c:61:a5:3d:c4:6a:d8:c5:58:b6:b5:33:b7:
33:2b:7b:b9:42:ff:7d:0e:4d:06:24:42:b1:8f:1b:
3b:a5:f1:2c:1c:11:a3:c6:ca:df:45:53:3b:f2:0f:
b9:92:1e:8a:44:38:3c:79:0e:9d:e5:11:3e:a1:00:
05:c2:6e:88:d2:b9:fa:b5:12:35:d2:d4:c8:6a:c7:
b9:49:de:1a:2a:ce:76:83:29:0a:40:69:a0:99:e9:
c2:2d:11:f7:d3:f9:6e:58:af:15:f9:88:ea:a1:70:
74:f7:bc:a9:26:03:0d:65:ee:27:79:df:ec:3b:87:
ff:73:b5:62:e3:e0:a4:a9:fb:c8:73:bd:69:6c:67:
95:7c:1b:c3:66:97:ff:1b:97:75:d9:86:9e:59:1e:
7e:9e:95:be:d7:30:48:19:a1:3d:d9:2d:84:09:94:
e8:f1:4f:be:b6:5e:4e:1d:f0:06:fa:ef:10:23:90:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:35:94:FC:F9:48:3D:3A:F3:AA:53:0B:31:E5:53:E5:CF:3F:6D:78
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/3139352e39352e3134392e302f32342d3234203d3e203236393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.149.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:35:00:ae:71:28:bb:2c:af:48:23:b8:52:df:1a:1c:25:5a:
f1:0b:41:30:c7:a2:39:e1:1d:c7:fc:95:e2:60:bc:fd:f2:7d:
2d:12:0d:4f:e3:57:e9:87:52:8a:b9:70:05:23:3c:a9:25:8f:
ae:0e:cd:4b:5b:74:00:d4:41:2a:b0:b4:e1:31:5c:84:72:b3:
c0:ea:b4:90:e9:bf:ae:7b:16:f8:2b:df:ee:77:42:26:58:30:
68:20:47:61:ea:15:a0:15:f1:e2:f9:76:27:ee:84:d5:59:2c:
48:e9:ec:d9:17:34:1d:1f:db:77:a4:7c:d5:f5:65:df:cf:b7:
bb:24:05:f5:ab:9a:d8:f1:6d:63:8f:47:4f:6a:32:75:97:b4:
16:5f:e6:c1:1f:fe:9a:82:f3:9d:98:2d:47:7d:19:79:a4:3d:
12:7c:4b:e9:5b:a7:20:46:7a:b1:6f:50:39:75:37:02:de:e3:
09:19:4e:8f:8b:c5:8e:00:24:8d:00:e3:a2:8d:8a:0a:e9:6a:
fa:b7:a6:da:a4:d5:40:09:69:dc:c5:bc:b6:12:b1:c0:31:41:
64:1f:21:5d:76:04:4b:3c:2d:86:bc:c9:59:c0:97:e0:41:67:
ee:c7:a4:09:27:38:17:c5:5a:65:ba:9b:47:10:b2:01:52:98:
f5:72:5f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:34 2025 by rpki-client