Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/326130653a666363303a3a2f32392d3239203d3e20323031393633.roa
File: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (raw, json)
Hash identifier: 8+yPsa43TFpd5bryniVq+R/mS0l3RvJVwdUmjJuuDIk=
Subject key identifier: D2:CE:36:EA:FE:FE:05:B4:A3:F3:9B:E3:32:13:ED:14:38:7A:3E:34
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 2AD4BC295EC63FB29A00127FE84A784ACB94AB49
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/326130653a666363303a3a2f32392d3239203d3e20323031393633.roa
Signing time: Sat 26 Jul 2025 13:54:13 +0000
ROA not before: Sat 26 Jul 2025 13:49:13 +0000
ROA not after: Sat 25 Jul 2026 13:54:13 +0000
asID: 201963
IP address blocks: 2a0e:fcc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d4:bc:29:5e:c6:3f:b2:9a:00:12:7f:e8:4a:78:4a:cb:94:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 26 13:49:13 2025 GMT
Not After : Jul 25 13:54:13 2026 GMT
Subject: CN=D2CE36EAFEFE05B4A3F39BE33213ED14387A3E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:3b:53:d5:3b:45:fa:f7:a3:59:1f:e5:57:
4a:d5:e9:bc:59:d0:ea:ae:ad:d2:be:12:f5:42:07:
2d:39:40:c0:90:62:6b:ba:14:07:67:12:c0:b6:10:
72:b0:b2:f8:bc:22:34:13:6b:b0:60:72:9a:34:2a:
23:ed:98:63:39:47:50:c8:1e:54:24:9a:e4:27:ae:
47:d2:55:3d:8e:70:91:9b:88:41:9c:c8:e1:b2:48:
18:dc:f0:7b:a4:40:3f:5e:87:61:ea:a4:d1:92:95:
ac:22:68:4b:5e:50:f3:d0:d0:8a:34:03:af:d7:9d:
fa:a2:d3:be:02:ec:97:03:20:bd:3e:d7:81:7b:1d:
a7:78:3c:ee:9b:4e:9d:f5:3e:61:ec:32:95:ad:1d:
19:53:6b:39:24:c5:17:13:32:b2:76:b7:33:48:5a:
b1:32:8c:59:cd:c0:de:8c:20:73:a8:44:9f:96:83:
ad:00:9d:27:09:b9:d9:0a:e8:e6:51:06:91:37:a9:
2c:d0:55:3c:a5:5d:ac:db:24:af:2c:1d:ee:7f:dd:
83:8f:dd:ab:0e:eb:58:f7:7a:8a:23:50:4f:1d:80:
94:f0:1c:53:90:c9:2f:bc:3a:b4:99:e9:69:08:92:
ca:fd:17:db:da:9a:90:9e:06:84:02:a8:a2:4e:85:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:36:EA:FE:FE:05:B4:A3:F3:9B:E3:32:13:ED:14:38:7A:3E:34
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/326130653a666363303a3a2f32392d3239203d3e20323031393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
31:2b:46:44:3a:dc:64:09:64:0d:1f:76:e2:6c:b9:2c:a2:82:
a2:8d:f5:64:2a:61:7f:57:9e:71:24:81:00:5d:2a:31:0a:e3:
f8:52:36:60:d9:18:5c:63:c8:fb:d1:02:73:66:13:96:53:fb:
a5:29:d6:d2:0e:ce:66:f3:59:94:cb:51:4d:c0:30:92:3e:03:
36:e3:09:d2:9b:21:f8:2f:ac:5e:60:ae:70:8b:45:bc:35:82:
17:d0:e6:1a:6b:8d:59:8c:71:9c:d2:95:fa:c4:e7:b3:5a:03:
45:72:e3:a9:17:74:e2:57:01:7c:3e:07:df:c3:ff:9e:dd:43:
35:b2:b7:29:61:a5:45:13:e1:98:dc:b5:bc:ff:ce:d1:41:cd:
e8:69:b8:6c:94:09:6c:9a:ad:1b:a0:cb:bb:7f:4a:23:5b:c3:
20:a9:56:79:9b:22:85:c7:f8:a6:48:19:de:da:d0:e6:cd:32:
95:d2:e6:9d:1a:63:25:33:95:54:5b:78:9f:69:9b:a8:e5:0b:
7e:40:3e:09:5a:a7:5e:ff:82:72:74:73:e0:ea:48:c4:e5:ba:
eb:92:f6:8f:59:41:41:6a:b9:3b:fa:83:8f:99:45:87:57:3a:
ff:9f:52:f3:4d:aa:32:e1:cd:0c:8f:5a:fb:2f:22:91:1f:80:
7d:b0:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:41 2025 by rpki-client