Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e2039333034.roa
File: 3137382e3230382e3138332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: A8NZxZSGcypzeEFNn+WbFas9/6EOsvbpiM6DR2gc3Yo=
Subject key identifier: 30:0C:6C:60:61:91:76:D0:54:15:2F:85:C1:E9:10:9F:BA:46:68:F6
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 639DCF2104672645FA748F215230AB0D38E6C4BB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e2039333034.roa
Signing time: Mon 04 Aug 2025 13:49:42 +0000
ROA not before: Mon 04 Aug 2025 13:44:42 +0000
ROA not after: Mon 03 Aug 2026 13:49:42 +0000
asID: 9304
IP address blocks: 178.208.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9d:cf:21:04:67:26:45:fa:74:8f:21:52:30:ab:0d:38:e6:c4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Aug 4 13:44:42 2025 GMT
Not After : Aug 3 13:49:42 2026 GMT
Subject: CN=300C6C60619176D054152F85C1E9109FBA4668F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:04:07:94:ce:c5:5b:1a:65:d3:6e:21:76:
a9:28:cd:26:ff:69:32:45:4c:76:bc:4c:03:9f:38:
06:71:a9:24:91:83:b9:04:a1:d1:d8:cf:ae:b3:c8:
80:99:18:b3:f0:1a:24:38:8b:15:fa:4d:1d:13:30:
5a:2b:db:f3:d5:ca:99:e3:1d:d6:c3:30:48:66:62:
e9:af:b0:3e:97:9b:c1:2f:0d:a3:be:52:8b:8f:64:
0d:7c:5d:6c:f7:fa:94:6b:d9:68:43:32:95:5b:30:
98:85:74:7f:fd:40:c8:34:c3:64:57:31:c5:60:bd:
2a:a6:b2:a4:6d:2c:95:15:01:5f:37:aa:28:7a:54:
bf:08:8b:3c:32:f1:2c:af:43:5d:5a:c7:6f:a5:33:
31:df:ff:3b:42:a8:20:86:5a:24:32:e0:f6:8c:db:
49:85:6c:01:dd:fe:c5:05:be:23:31:6e:a3:b7:2e:
3a:e3:3d:a2:b4:74:f1:dc:e4:e4:f8:1e:8e:bd:95:
87:3b:3b:95:4d:87:86:49:c8:e6:8c:2a:07:40:d0:
9f:e3:a3:1c:1a:b1:a6:7a:a0:46:12:d0:66:c1:d9:
fb:e1:f7:58:61:20:6f:85:61:52:cd:49:b6:3c:2d:
89:ce:dd:ab:54:d1:70:c6:48:dc:75:dc:0c:7a:75:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0C:6C:60:61:91:76:D0:54:15:2F:85:C1:E9:10:9F:BA:46:68:F6
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.183.0/24
Signature Algorithm: sha256WithRSAEncryption
97:77:cb:15:c9:bf:e0:aa:7c:87:7f:74:5c:23:ff:dc:b5:c1:
06:13:eb:7c:9e:79:60:8d:68:1c:2e:0f:05:38:56:22:a1:38:
26:ee:96:e6:a1:16:a8:08:f1:42:30:4f:06:24:4c:c7:ea:a6:
13:44:0b:5e:6e:46:98:dd:51:e9:a1:2a:06:a6:d5:d0:df:b7:
95:61:65:f2:66:71:02:cf:bc:e0:31:66:47:6b:be:f2:c2:a0:
6d:f6:08:d8:57:c8:1e:b3:65:45:be:1c:97:24:9e:58:7d:ec:
5a:39:0f:bf:3f:33:4e:ee:60:3a:da:d4:23:fa:f0:78:0b:1e:
5e:37:5e:1b:85:a1:b9:e9:47:23:f3:2a:81:be:e7:c7:2a:2c:
15:61:9d:be:bd:ae:3c:5a:b3:92:f9:3e:81:16:e5:b2:65:7b:
1c:48:96:0f:66:75:28:41:56:a1:1f:3b:a0:f2:db:03:94:6b:
54:a6:b0:d7:a1:67:9f:06:01:1b:ef:df:f3:b9:45:9b:e5:23:
66:6f:b0:af:ba:ad:a5:2b:8d:e6:1c:db:2a:22:a0:36:3c:6e:
fc:21:91:a2:e4:8c:33:43:47:0f:87:d7:10:1f:d0:5c:de:c8:
0d:5c:65:34:1c:89:5d:84:ce:ac:94:89:66:f7:9a:b9:f0:60:
42:66:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:54 2025 by rpki-client