Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20383334.roa
File: 3137382e3230382e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +Z+qgVstTvJ+0EEFum8hzT38gzQkNftyUkj4tf0hOuw=
Subject key identifier: 33:2F:E5:D7:58:4B:07:1F:3A:95:1E:9B:DB:80:41:E1:B2:C9:02:E3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 64E730D43A6059D2C00CCA40C9F23A1F36E2EF67
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20383334.roa
Signing time: Sat 14 Jun 2025 00:02:51 +0000
ROA not before: Fri 13 Jun 2025 23:57:51 +0000
ROA not after: Sat 13 Jun 2026 00:02:51 +0000
asID: 834
IP address blocks: 178.208.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e7:30:d4:3a:60:59:d2:c0:0c:ca:40:c9:f2:3a:1f:36:e2:ef:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 13 23:57:51 2025 GMT
Not After : Jun 13 00:02:51 2026 GMT
Subject: CN=332FE5D7584B071F3A951E9BDB8041E1B2C902E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:b2:46:45:b0:1f:1b:3d:6e:98:6a:fc:96:
37:5c:54:29:e8:bc:84:be:93:05:15:6d:e5:45:fc:
62:60:e4:ad:77:2a:d9:27:b8:3c:83:e7:23:7f:bb:
e5:26:af:86:f6:91:3b:fa:c1:31:b6:79:52:f4:bb:
b0:05:ff:e6:88:81:d1:fc:47:6c:68:4e:b6:9e:26:
e3:b0:60:04:e3:6a:aa:1c:dd:53:96:4d:ca:93:73:
53:9b:62:e1:5e:b0:7c:65:28:b8:94:b9:d7:a6:3e:
7b:d2:cb:91:f3:9f:39:50:44:34:5d:6b:7d:57:e7:
ba:ca:79:0a:e7:f7:4a:63:f1:15:32:36:57:9f:51:
8c:ae:80:21:a9:34:d0:96:85:77:8c:60:d2:dd:86:
59:5a:31:7b:b5:52:d5:d8:9d:77:5a:32:f4:84:64:
9c:5c:20:4e:4b:60:9e:41:8a:26:ae:81:9d:86:96:
fe:b5:70:bb:1e:c3:65:b5:09:e3:ff:e8:8d:30:9a:
42:84:5d:a7:b0:7c:ce:be:f8:17:f0:17:e4:d5:a7:
13:f0:65:52:77:03:5e:80:75:e0:ef:f1:3d:00:fb:
b9:b8:20:d7:51:a5:63:fc:54:32:4d:19:f5:a9:4c:
71:05:02:5a:b6:bb:10:bf:1b:f0:ab:da:06:2b:73:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:E5:D7:58:4B:07:1F:3A:95:1E:9B:DB:80:41:E1:B2:C9:02:E3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.183.0/24
Signature Algorithm: sha256WithRSAEncryption
15:36:b4:5b:b5:c8:39:66:c4:b6:ad:6f:ae:ce:b5:ff:9a:4d:
8e:4e:3e:a6:58:71:bf:a4:0a:20:c3:30:9f:0e:71:e3:66:55:
e6:04:3f:ae:dc:60:ef:4a:ad:a3:b3:1c:b4:0f:67:fc:4b:d6:
15:e2:92:58:71:80:fc:d1:46:27:eb:a9:92:0b:12:4b:c5:ca:
f0:56:98:25:88:7c:15:97:47:40:2a:ef:d1:4b:3b:75:89:22:
57:98:1e:b1:95:51:23:5f:cb:61:5c:34:87:02:fd:09:d9:c5:
23:01:c6:7c:35:1f:fa:66:2c:d4:26:7a:ee:3e:1e:c2:da:b6:
0a:5e:16:9e:f3:41:85:91:cb:dc:db:28:dd:18:73:50:6d:24:
a5:da:ad:7c:ad:30:e0:82:70:1a:e2:37:91:05:ee:42:2b:de:
37:93:cd:19:0a:dd:48:fe:69:bb:77:51:5e:da:af:54:18:a9:
50:06:fb:93:65:45:7f:44:92:00:7f:5a:11:24:e0:62:ff:ca:
fd:46:d0:f3:70:95:d9:44:6f:63:90:e7:03:40:c6:1b:9a:99:
5a:59:d4:3b:f4:ca:6a:67:e1:1e:88:6f:47:d7:b1:f2:69:9b:
48:72:e1:fa:4c:fa:a4:0b:4c:a7:a4:e0:d6:3c:80:13:14:42:
4b:c6:6d:10
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZOcw1DpgWdLADMpAyfI6Hzbi72cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA2MTMyMzU3NTFaFw0yNjA2MTMwMDAyNTFaMDMxMTAvBgNV
BAMTKDMzMkZFNUQ3NTg0QjA3MUYzQTk1MUU5QkRCODA0MUUxQjJDOTAyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxv7JGRbAfGz1umGr8ljdcVCno
vIS+kwUVbeVF/GJg5K13KtknuDyD5yN/u+Umr4b2kTv6wTG2eVL0u7AF/+aIgdH8
R2xoTraeJuOwYATjaqoc3VOWTcqTc1ObYuFesHxlKLiUudemPnvSy5HznzlQRDRd
a31X57rKeQrn90pj8RUyNlefUYyugCGpNNCWhXeMYNLdhllaMXu1UtXYnXdaMvSE
ZJxcIE5LYJ5BiiaugZ2Glv61cLsew2W1CeP/6I0wmkKEXaewfM6++BfwF+TVpxPw
ZVJ3A16AdeDv8T0A+7m4INdRpWP8VDJNGfWpTHEFAlq2uxC/G/Cr2gYrcwhbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUMy/l11hLBx86lR6b24BB4bLJAuMwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLQ
tzANBgkqhkiG9w0BAQsFAAOCAQEAFTa0W7XIOWbEtq1vrs61/5pNjk4+plhxv6QK
IMMwnw5x42ZV5gQ/rtxg70qto7MctA9n/EvWFeKSWHGA/NFGJ+upkgsSS8XK8FaY
JYh8FZdHQCrv0Us7dYkiV5gesZVRI1/LYVw0hwL9CdnFIwHGfDUf+mYs1CZ67j4e
wtq2Cl4WnvNBhZHL3Nso3RhzUG0kpdqtfK0w4IJwGuI3kQXuQiveN5PNGQrdSP5p
u3dRXtqvVBipUAb7k2VFf0SSAH9aESTgYv/K/UbQ83CV2URvY5DnA0DGG5qZWlnU
O/TKamfhHohvR9ex8mmbSHLh+kz6pAtMp6Tg1jyAExRCS8ZtEA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:21:36 2025 by rpki-client