Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135372e302f32342d3234203d3e2032393134.roa
File: 3138352e35382e3135372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: lpWXt6uFvU2PZ1sNhgr10rMfQuglN6ZjbNveDXRK2tg=
Subject key identifier: 09:CE:A5:FA:B1:1D:E7:F9:9A:0E:4C:C8:AB:8E:BB:3D:6C:D4:CB:28
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 62D0B7C3B5B0F26B80045052C316ADB2A9FBFEF7
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135372e302f32342d3234203d3e2032393134.roa
Signing time: Sat 07 Jun 2025 18:14:53 +0000
ROA not before: Sat 07 Jun 2025 18:09:53 +0000
ROA not after: Sat 06 Jun 2026 18:14:53 +0000
asID: 2914
IP address blocks: 185.58.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d0:b7:c3:b5:b0:f2:6b:80:04:50:52:c3:16:ad:b2:a9:fb:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jun 7 18:09:53 2025 GMT
Not After : Jun 6 18:14:53 2026 GMT
Subject: CN=09CEA5FAB11DE7F99A0E4CC8AB8EBB3D6CD4CB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:12:13:14:07:de:57:bc:10:6c:5c:54:7e:
a9:81:c1:65:d6:22:ee:50:6f:63:65:3c:ea:c6:78:
f1:b7:f7:05:c8:3f:93:8b:3a:c6:74:da:1a:b8:f7:
78:00:7b:1a:48:65:eb:0b:92:41:c8:6f:de:5b:cc:
63:a4:4d:a3:be:a8:0e:b3:8e:8d:b0:fe:0d:a5:8a:
1e:47:aa:f9:6c:96:36:c0:55:33:e3:9c:54:bd:97:
fc:b3:74:57:54:5a:93:39:b4:fa:5d:b8:2d:7d:f9:
26:3a:aa:1b:02:71:53:f1:a4:6f:7b:35:43:ee:83:
2d:7f:d9:c4:c8:d8:59:66:14:11:ef:45:eb:e6:10:
22:18:b9:63:22:eb:2b:e6:fb:c1:a9:c4:f8:6c:06:
46:57:57:52:44:12:26:9d:cb:42:cd:50:ab:2c:b8:
e6:8f:4b:2f:44:3b:54:73:6e:dc:d2:df:89:21:b9:
25:d5:5c:21:b7:35:bf:18:e7:a1:9b:59:35:da:d2:
b2:f9:39:9e:d6:7c:a6:64:85:a8:aa:25:38:a7:0b:
63:a2:28:0c:af:74:47:96:95:90:83:17:a1:98:b1:
60:4c:18:f3:78:4c:12:eb:5d:6b:17:c7:5d:62:49:
e9:6c:2f:91:5e:25:e1:84:b8:7e:85:e6:76:bd:fe:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:A5:FA:B1:1D:E7:F9:9A:0E:4C:C8:AB:8E:BB:3D:6C:D4:CB:28
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9a:a4:c9:ad:e8:d3:74:46:8c:1b:ee:45:05:63:2f:ba:78:
42:85:9e:b5:90:81:8e:b9:c5:07:91:05:1f:93:8d:d6:c4:aa:
fd:30:3b:fb:d9:56:88:72:a8:37:f8:62:90:0f:55:4f:41:db:
39:c5:67:fe:25:79:c2:7e:88:82:e3:fc:10:45:91:61:c2:95:
1e:7f:b2:c6:8a:88:52:71:ce:98:46:bb:e0:b8:d8:45:11:ac:
78:2b:a9:43:3e:f3:45:0b:5c:8f:4b:ab:7d:19:e4:24:77:e6:
fb:4d:0c:48:99:24:2c:ea:a6:01:e8:59:25:a8:23:ba:a4:d2:
23:1b:b4:2d:f9:cf:9a:7c:40:85:1c:11:cc:ae:3c:d2:c4:38:
87:17:18:73:9c:d3:62:19:07:9f:dc:f0:eb:43:33:cc:f9:c9:
92:68:d5:f8:e3:02:f8:d9:aa:b0:0f:37:39:8f:33:d0:18:82:
e4:eb:a5:34:f9:6c:a4:9d:6c:e6:85:64:71:ca:5c:46:4b:a5:
53:ad:74:a4:76:ad:86:3c:86:ee:d8:9e:cc:e4:89:d3:21:91:
66:cd:06:ec:bf:69:6b:c6:1b:8b:ed:77:45:b3:31:b5:29:c1:
0c:d3:b1:9f:4c:26:02:bb:3e:34:0f:5e:90:f9:a5:a1:fd:17:
36:25:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:48 2025 by rpki-client