Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa
File: 3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: JMPMOpLF1bcIvbG82aj+pie4xIbRE8z3aJEr+Ha5GDQ=
Subject key identifier: A2:0A:72:8A:22:1E:72:9E:B3:9E:14:3F:67:D6:3F:B4:4C:95:65:A5
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 6E26790D312CBE3EA742EDFCFC878EE387FA0834
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa
Signing time: Fri 01 Aug 2025 06:42:17 +0000
ROA not before: Fri 01 Aug 2025 06:37:17 +0000
ROA not after: Fri 31 Jul 2026 06:42:17 +0000
asID: 20473
IP address blocks: 185.240.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:26:79:0d:31:2c:be:3e:a7:42:ed:fc:fc:87:8e:e3:87:fa:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Aug 1 06:37:17 2025 GMT
Not After : Jul 31 06:42:17 2026 GMT
Subject: CN=A20A728A221E729EB39E143F67D63FB44C9565A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:5f:1f:cf:ea:9f:73:6c:66:97:76:75:49:
8c:07:ac:4d:54:72:cf:d0:67:d4:56:6e:92:0f:6a:
65:2d:49:67:ef:67:6e:2b:11:c9:73:19:48:d5:9c:
c0:4f:c8:0c:ed:27:a6:16:d6:33:83:db:62:ff:0b:
d7:a8:a1:16:df:40:c8:64:59:96:f4:12:f5:72:11:
1a:80:4b:17:9c:b2:af:5f:58:aa:39:ac:c1:11:12:
0d:d4:8f:9a:04:98:9d:08:66:eb:ea:f4:c5:5a:1d:
00:b5:72:57:91:0e:36:01:f3:54:58:cb:40:6f:62:
07:63:b7:4c:44:47:84:f0:0c:62:11:aa:8b:71:ad:
ac:37:7c:9f:1d:3d:ee:af:e8:49:54:8a:f7:37:e3:
8d:c2:ad:9f:f3:3c:d9:cc:2d:24:8d:fd:01:0b:28:
ee:d8:89:2f:5e:0f:d5:78:c6:94:e7:39:58:43:4b:
cd:f3:c9:1b:f0:28:25:c2:06:01:23:0b:3c:92:23:
28:3e:60:c0:e7:79:5f:65:0b:07:8b:ce:36:68:8f:
14:5f:cc:9a:1f:a7:57:84:a7:f4:c3:73:72:0f:fc:
c8:a9:73:af:1b:1a:ff:65:7e:e4:60:e2:22:e2:8f:
c3:58:36:c7:50:0e:29:f5:0d:65:06:45:fb:2a:c8:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:72:8A:22:1E:72:9E:B3:9E:14:3F:67:D6:3F:B4:4C:95:65:A5
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c1:a2:f2:11:63:02:c6:6e:6b:50:d8:27:a2:a1:66:9a:47:
48:d9:c6:a5:bc:9b:ca:d0:c4:83:24:f3:bc:29:51:ba:87:35:
b5:44:a9:2f:17:d6:5b:a3:2b:97:21:c1:89:8b:c9:5c:39:51:
68:ca:9a:c4:d9:e1:b2:5b:4c:06:db:35:02:90:79:f0:04:37:
64:ca:99:bd:9d:8a:50:a6:22:83:1c:91:07:d3:8b:47:63:fa:
a3:ce:fd:f5:9d:5b:6c:f7:77:17:56:3f:41:be:0e:a0:5f:f2:
90:12:08:5a:ce:ba:52:a1:5d:7c:10:64:a6:48:9d:e4:85:17:
75:02:4a:44:4e:2e:a3:fb:47:29:7b:30:32:6b:21:27:c3:28:
b4:cd:51:d5:ea:e9:5a:4f:35:25:e3:2d:f7:d7:85:80:88:74:
06:d1:07:13:d1:2e:12:a3:89:29:a2:a8:10:72:4b:2b:b4:37:
58:85:87:24:d3:4e:d3:26:c6:fb:eb:b5:6f:8f:cf:b8:75:e1:
bc:9d:db:16:73:95:96:d5:1e:92:9b:33:4b:50:08:63:27:e1:
af:cb:d2:09:56:21:cc:0a:7b:aa:ef:d6:58:83:f2:15:69:4a:
5e:57:62:90:0f:99:5b:92:f8:20:15:39:0d:29:21:65:2e:82:
07:48:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:55:09 2025 by rpki-client