Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20383334.roa
File: 3138352e342e3232312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: /R1fVKT7e9IRF7Yuk1isiXIkoJq8em0L440i0DbT7BA=
Subject key identifier: D1:8E:B2:A7:96:22:31:9C:71:4F:93:37:DC:36:A0:6C:47:AC:C4:65
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 15223DB76816F90CAEB99F927482E1D351C49A3B
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Jul 2025 00:05:12 +0000
ROA not before: Wed 23 Jul 2025 00:00:12 +0000
ROA not after: Wed 22 Jul 2026 00:05:12 +0000
asID: 834
IP address blocks: 185.4.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:22:3d:b7:68:16:f9:0c:ae:b9:9f:92:74:82:e1:d3:51:c4:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 23 00:00:12 2025 GMT
Not After : Jul 22 00:05:12 2026 GMT
Subject: CN=D18EB2A79622319C714F9337DC36A06C47ACC465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:d1:9f:bb:80:da:96:14:83:60:ec:60:12:
30:73:07:08:eb:42:12:85:61:a6:c1:61:58:a8:02:
b0:b8:ec:9b:6d:48:0e:8f:29:09:46:0f:ea:09:e5:
59:0f:fb:5e:96:5b:ee:24:5f:45:c1:e9:bf:be:a4:
24:66:7e:e5:74:23:6a:07:ee:ad:9e:70:bf:a7:65:
54:4a:28:54:c8:9e:78:24:79:e9:f3:06:b3:03:0a:
8b:9b:65:80:30:72:44:31:b0:0e:0c:26:6d:cc:ed:
f4:97:38:4a:68:b3:d6:18:75:4f:64:a3:3f:14:df:
23:90:73:60:2c:4d:cf:78:16:dc:2f:87:bb:c9:26:
49:e8:04:5b:99:2c:f8:d2:64:95:9b:b8:49:a9:c1:
9d:a5:40:17:56:10:a1:5d:cf:c4:9d:5b:6a:6d:a5:
99:27:fa:26:af:56:9a:e1:f2:f4:08:50:f3:df:98:
85:2e:9a:64:f8:56:cb:e0:57:56:b0:f0:9e:af:af:
96:4d:5e:3b:d8:c9:dd:60:66:a8:95:7b:90:ba:c1:
1d:b7:17:74:c5:8c:32:06:8b:02:c8:d2:fd:ef:7b:
13:23:af:59:52:8b:a9:cf:7b:e0:ed:bb:19:8b:4a:
e7:60:9a:c0:6b:8e:dc:6d:19:dd:f7:32:0f:81:51:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8E:B2:A7:96:22:31:9C:71:4F:93:37:DC:36:A0:6C:47:AC:C4:65
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3138352e342e3232312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:89:2e:a8:8f:6b:81:a1:3d:9a:95:c9:c5:0c:97:60:aa:e3:
c5:16:e6:ae:7c:44:ff:6c:12:11:f4:99:17:c2:7f:78:be:52:
d9:fe:88:90:34:41:ba:28:1c:08:34:c0:25:bb:df:da:f6:f5:
60:eb:88:37:93:4b:3a:81:42:fb:91:ff:a2:21:7b:fd:8b:9c:
b0:d8:12:19:f8:78:7f:95:65:ff:5e:b9:08:a5:6a:fb:ae:37:
61:b7:6d:3c:14:a5:da:e7:25:6e:0a:2d:8d:ce:95:7d:78:36:
ea:8a:bb:94:c5:bf:c9:e0:92:3f:6a:f3:2e:66:85:93:ff:ca:
fe:c4:ca:9f:de:76:a2:8c:fe:ee:9c:4e:cb:96:19:bb:fc:bb:
11:12:15:9c:42:fa:65:b9:13:8c:94:7d:e6:66:f2:2a:b0:76:
24:da:a5:5b:c5:e8:ce:49:99:a6:f2:88:3e:bc:32:c1:eb:22:
f7:a4:78:4e:c1:7d:90:18:34:60:19:c1:60:c2:c4:7a:ff:42:
c6:f5:93:1b:25:e6:4f:06:fc:cd:7f:0a:4e:5a:5b:46:4d:7b:
94:cf:98:f0:5a:59:c8:72:cf:9d:1b:38:8b:4b:ed:e3:d9:f8:
45:3e:c5:40:8b:d8:4a:59:9c:68:63:1c:b4:92:70:5a:c3:e1:
92:15:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:06 2025 by rpki-client