Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e2038313030.roa
File: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=
Subject key identifier: 6F:AB:C5:47:AA:DD:F2:89:4E:D6:3F:83:96:FD:C6:EF:1D:C1:18:4F
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 7BCB48B35EBCB7D00AF4D822E7078825B16AD357
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e2038313030.roa
Signing time: Sun 15 Jun 2025 10:54:09 +0000
ROA not before: Sun 15 Jun 2025 10:49:09 +0000
ROA not after: Sun 14 Jun 2026 10:54:09 +0000
asID: 8100
IP address blocks: 85.209.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:cb:48:b3:5e:bc:b7:d0:0a:f4:d8:22:e7:07:88:25:b1:6a:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jun 15 10:49:09 2025 GMT
Not After : Jun 14 10:54:09 2026 GMT
Subject: CN=6FABC547AADDF2894ED63F8396FDC6EF1DC1184F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:da:99:45:4c:aa:50:dd:0a:64:28:bf:2e:
30:ba:9b:22:bc:f2:7e:ed:f1:73:85:a5:05:d4:89:
48:40:40:8c:f2:f8:12:af:a2:5a:2f:f2:3b:5c:49:
10:c2:66:31:eb:78:86:66:2a:e0:15:a7:21:8d:5e:
41:d3:47:3f:2b:36:08:9d:01:7f:d2:ce:48:d2:db:
09:ce:ae:a3:27:6c:00:93:63:0d:93:68:3e:24:53:
00:03:fe:db:46:d1:e7:23:e3:c4:73:6f:78:dd:c3:
19:d0:95:46:f6:d6:9f:8b:3a:06:2b:6e:0b:12:be:
b0:83:f6:57:ff:7c:dc:69:cf:30:81:87:5d:42:b0:
00:22:78:3e:03:72:b4:46:1b:8d:b0:64:9b:67:76:
65:0e:99:b5:d5:34:83:f7:1f:33:5d:be:29:b5:c7:
29:fc:d2:5d:fe:88:32:f6:83:9b:40:6f:30:63:ed:
21:ca:4f:4a:de:5b:09:89:64:97:0b:55:c3:06:1c:
91:62:b0:da:d2:6a:b7:1f:c2:9c:e7:9b:d8:46:86:
7f:75:7b:29:a0:9e:f9:a4:2e:0e:06:71:99:87:ee:
ea:3b:ee:e8:ac:3a:2d:a1:35:03:77:d0:a6:2e:aa:
f0:d8:39:f8:cd:ad:a4:93:30:b4:c1:d1:b8:d8:be:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:C5:47:AA:DD:F2:89:4E:D6:3F:83:96:FD:C6:EF:1D:C1:18:4F
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31372e302f32342d3234203d3e2038313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1e:fd:3c:10:28:2d:e3:53:04:1c:cc:41:b9:14:64:a5:05:
d3:45:97:0f:ca:fa:12:72:dd:aa:37:6e:b0:85:d7:da:e2:a6:
40:8f:0c:29:75:f2:07:fe:f0:59:d8:50:7d:a8:90:48:88:c6:
47:34:66:8a:6d:6e:cf:a4:3e:e0:d2:37:46:f8:0a:77:bb:12:
31:c4:45:6e:58:5d:e6:12:32:59:cb:78:f3:38:d1:59:e5:e6:
b2:73:f4:ff:c6:d9:e3:46:12:9a:49:e0:39:20:dd:57:f4:de:
1a:0a:33:88:ad:e4:67:48:d0:1d:f9:ed:ba:62:20:de:f8:13:
e9:d9:5c:67:ed:04:3e:c9:8c:1c:7b:00:14:8a:8c:91:c3:d1:
82:39:ea:37:a5:4a:a1:ff:ac:af:ee:9b:81:87:3b:61:80:b2:
e2:a7:9e:89:95:f7:cc:2e:98:a1:b9:74:f0:1a:b7:0f:41:f6:
9e:8e:59:e9:62:04:d8:21:c6:67:a3:9f:9a:f7:88:94:b0:e3:
86:53:53:3c:5e:a0:b5:9d:2c:8d:68:8c:aa:8d:79:07:6a:f9:
b4:d8:71:63:b2:94:05:2a:cb:b5:d0:29:86:96:ff:c2:2d:f6:
04:2a:ea:8c:51:14:a9:28:32:e3:2d:4b:69:c5:f8:7a:68:1b:
ae:09:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:22:18 2025 by rpki-client