Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203535323031.roa
File: 3138352e342e3232312e302f32342d3234203d3e203535323031.roa (raw, json)
Hash identifier: VyJpiS5wPix6gjz/NL/jXeLy5TrKlf4cBc7PU/Vlwmc=
Subject key identifier: 48:C9:5A:3B:2D:DF:19:FF:67:9A:07:85:7F:2D:46:F5:7C:32:B0:BE
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7AA43030AE75850553EDCB01F41F60DD56D2359B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203535323031.roa
Signing time: Wed 06 Aug 2025 14:07:40 +0000
ROA not before: Wed 06 Aug 2025 14:02:40 +0000
ROA not after: Wed 05 Aug 2026 14:07:40 +0000
asID: 55201
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a4:30:30:ae:75:85:05:53:ed:cb:01:f4:1f:60:dd:56:d2:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 6 14:02:40 2025 GMT
Not After : Aug 5 14:07:40 2026 GMT
Subject: CN=48C95A3B2DDF19FF679A07857F2D46F57C32B0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:93:99:26:77:f1:4d:67:77:b2:f7:59:48:
83:bf:d9:80:26:e0:4d:6b:4f:7b:1c:b9:1b:d1:02:
41:49:3b:24:7f:35:30:71:cb:53:f6:13:86:bd:f5:
a9:4e:15:6c:c4:5d:7a:9b:fc:30:9f:7f:64:f1:53:
38:d1:eb:b3:67:9e:d8:99:47:06:f4:e3:26:24:25:
8f:bb:43:52:82:c5:59:15:86:e4:68:91:72:80:bb:
c9:30:da:ab:87:40:37:38:49:10:95:3f:4e:83:18:
29:49:2d:7a:13:7f:2e:47:a1:ed:2b:de:2f:e8:ad:
e0:52:58:e9:25:f9:8e:b8:3a:e8:c2:26:5d:2b:df:
14:3d:e1:10:be:94:40:f5:85:36:14:c7:a2:06:8a:
3e:92:ac:cf:22:bb:cf:6f:27:fb:d8:e5:5f:b0:7e:
12:f4:a2:0b:c1:2f:01:7f:ec:4c:78:ca:e0:e5:98:
f4:0c:19:51:57:fe:b4:e2:4a:09:86:49:e2:5b:5d:
ec:f2:83:2b:2a:1d:51:9c:21:59:1d:d2:11:2a:d3:
9e:09:13:ae:74:77:c2:6c:13:4c:b0:a4:10:88:9c:
97:99:36:c7:07:43:46:fa:d3:a6:bb:b8:19:5b:1a:
e1:83:fd:21:ac:78:53:c7:64:1e:e2:39:dc:e6:29:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:5A:3B:2D:DF:19:FF:67:9A:07:85:7F:2D:46:F5:7C:32:B0:BE
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e203535323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
03:96:bc:57:18:99:d7:eb:94:84:ae:6e:de:83:e9:88:e9:1c:
48:8e:c2:f6:29:ee:2b:fe:bf:51:5c:f6:96:c3:4f:d2:a4:f9:
b3:ca:5c:97:74:9a:72:6e:40:5f:96:9b:6e:a8:90:62:b4:9c:
46:ce:28:59:49:39:91:08:9e:4e:cb:92:0f:58:fd:84:9e:e6:
b2:95:1b:ff:a7:7e:f5:b7:95:d1:79:cd:93:03:a2:2f:b3:6b:
4f:3d:fc:22:f9:c4:8d:1b:e3:a1:a2:b8:39:a6:a4:47:f9:d4:
d0:7d:22:f1:96:19:99:1f:b3:f8:b0:c5:23:5a:ae:09:68:4b:
f3:bf:b2:73:02:55:be:8c:bf:60:f0:54:f5:a7:d1:4a:fd:83:
15:9f:40:ab:76:eb:1a:56:8f:d9:a5:44:75:28:c0:87:e5:1d:
7e:fc:d6:17:47:ed:65:b3:d4:14:72:16:9c:1a:6c:e8:d4:ef:
1b:17:12:2b:80:81:e3:02:8e:55:3e:9c:b9:a9:9a:ee:25:42:
ac:7f:fb:50:7b:25:09:06:05:f2:54:87:38:fe:41:33:09:57:
7b:bf:6d:60:ef:3d:50:00:9e:ec:e6:b3:48:6d:52:dc:7c:e8:
b8:c3:f5:34:76:db:c4:67:c6:16:78:6e:98:af:40:e9:7e:85:
6e:f9:51:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:25:54 2025 by rpki-client