Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203131383738.roa
File: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (raw, json)
Hash identifier: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=
Subject key identifier: EE:4F:89:85:CA:A7:E4:71:85:3E:BF:98:33:9C:09:44:1E:17:28:3A
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 1AAD56E27C0EE748B0CF90F950E4657DABD1688B
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203131383738.roa
Signing time: Tue 15 Jul 2025 14:54:13 +0000
ROA not before: Tue 15 Jul 2025 14:49:13 +0000
ROA not after: Tue 14 Jul 2026 14:54:13 +0000
asID: 11878
IP address blocks: 85.209.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ad:56:e2:7c:0e:e7:48:b0:cf:90:f9:50:e4:65:7d:ab:d1:68:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jul 15 14:49:13 2025 GMT
Not After : Jul 14 14:54:13 2026 GMT
Subject: CN=EE4F8985CAA7E471853EBF98339C09441E17283A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:f1:bb:a5:f5:3b:f3:eb:97:95:ce:ea:8a:
93:ae:86:0a:f8:dd:04:21:35:36:1e:90:11:f1:e0:
f3:81:13:40:87:3a:e7:b4:43:b4:ab:6e:2e:8a:38:
f6:28:5b:e5:dd:f2:8d:8e:c0:89:27:59:8c:1a:ac:
20:7c:68:bd:c3:e6:ec:ec:5a:a2:96:8a:47:78:5e:
1b:89:5c:3f:e6:1b:16:1c:59:23:9b:b5:99:3f:05:
34:60:da:83:e5:0f:00:ab:33:2e:16:27:91:d2:fb:
c8:0d:74:a5:fb:f5:9f:23:cf:23:0e:88:e0:da:97:
90:83:ca:f6:94:11:35:d7:38:61:ba:75:66:10:88:
2c:10:a8:79:dd:0f:e4:2b:62:71:e1:1d:15:91:ca:
a3:ab:13:81:6f:1c:b7:0f:d5:9b:86:fe:d0:5b:0d:
54:4b:71:1c:1b:0a:00:30:a8:2a:d9:45:f0:85:77:
ca:d5:62:1e:cf:12:59:f9:54:03:3f:f1:a7:c9:34:
50:17:3e:17:cf:9c:f0:4c:7b:8e:d8:4f:c8:58:2c:
0d:76:01:86:02:5d:65:5b:a5:5d:d5:2a:35:d1:ef:
93:09:f2:64:3e:b6:8b:af:31:89:f6:fd:a6:09:85:
73:73:d6:20:d4:41:c6:53:15:26:18:ae:6a:26:54:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4F:89:85:CA:A7:E4:71:85:3E:BF:98:33:9C:09:44:1E:17:28:3A
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31392e302f32342d3234203d3e203131383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.19.0/24
Signature Algorithm: sha256WithRSAEncryption
48:91:b3:8d:79:e3:8e:60:7f:22:ab:93:2b:f6:8e:d2:cc:84:
87:84:03:6a:a5:75:4f:0b:bd:20:37:c9:ef:ca:0a:0e:63:07:
96:29:da:1d:4d:50:77:4b:1c:b1:bb:af:ea:c9:39:a3:66:93:
c7:c9:9d:43:89:67:91:d2:2f:ea:2e:1d:b3:ca:67:f4:7c:39:
4e:0e:a2:42:d1:fb:24:96:c9:53:7a:1d:80:e2:f1:69:45:c1:
b9:46:c8:9d:b7:e2:72:06:5a:2f:a5:be:ef:29:a5:50:70:15:
46:26:20:bc:2f:8f:2f:2f:20:fd:ee:e9:a1:53:e3:91:51:f1:
44:c3:6d:18:76:e6:2b:b3:55:83:8b:1e:bb:98:3d:1d:85:64:
67:b5:fb:cf:5a:90:66:b3:9a:0c:18:51:dd:b6:1b:b9:ce:0f:
d1:d4:3b:5b:1e:6a:b1:7f:9d:19:62:df:0d:fd:e1:05:b7:f2:
1d:14:43:dc:b3:2b:74:1b:15:49:61:26:b5:cc:0d:23:8b:66:
c3:2c:29:90:32:5f:ec:b7:f0:a1:eb:2e:50:ab:81:d3:2b:cf:
11:b4:75:7d:9b:9b:2c:02:2d:d5:7e:09:d9:a2:67:fe:ff:91:
40:81:8f:eb:97:6a:24:f4:c3:2e:92:40:51:5c:2c:96:17:1e:
0c:74:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:44:46 2025 by rpki-client