Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32322d3232203d3e203632333837.roa
File: 39322e3131392e31322e302f32322d3232203d3e203632333837.roa (raw, json)
Hash identifier: P05Fr8CbIZdEuOftN3RWkzHf2n+iRhjGmELi++Pdwv4=
Subject key identifier: A3:EF:3C:4B:67:BA:88:56:21:02:A2:D1:97:F1:6D:EF:10:5B:0D:5B
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 4B4A76DCC5BE56DC2DC5A4198B8374BBA3A0458B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32322d3232203d3e203632333837.roa
Signing time: Mon 14 Jul 2025 17:54:13 +0000
ROA not before: Mon 14 Jul 2025 17:49:13 +0000
ROA not after: Mon 13 Jul 2026 17:54:13 +0000
asID: 62387
IP address blocks: 92.119.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 07:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4a:76:dc:c5:be:56:dc:2d:c5:a4:19:8b:83:74:bb:a3:a0:45:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 14 17:49:13 2025 GMT
Not After : Jul 13 17:54:13 2026 GMT
Subject: CN=A3EF3C4B67BA88562102A2D197F16DEF105B0D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:3c:37:c8:80:f3:dc:ea:02:c5:e2:6a:50:
96:58:cf:22:13:3b:e5:f9:d2:cb:7c:76:4d:f0:89:
49:d2:a6:47:66:d9:34:8c:63:b3:17:84:d8:a6:99:
58:9c:55:16:ac:5c:5e:09:37:3e:86:06:7e:2c:71:
38:d7:59:c2:64:4e:78:a1:c1:13:19:d9:44:4a:21:
ab:ed:ed:de:21:bf:be:c0:cf:c4:87:fd:35:f7:4e:
e7:b1:60:b6:1e:ac:e9:7b:26:01:51:fb:ed:65:37:
df:24:41:e0:78:5a:7b:aa:a7:0c:54:5d:40:d9:87:
46:f7:10:94:91:57:44:a4:e5:80:88:c3:05:c5:55:
a6:c6:d6:d2:fb:69:56:38:e9:a7:3f:8b:e2:fa:ab:
ee:aa:f9:a4:02:28:97:86:1c:c6:c1:3d:13:13:92:
a5:2d:f3:ac:e7:b4:3f:07:ab:64:2a:ca:29:80:57:
24:ec:54:56:64:37:86:27:28:b6:56:4a:3d:ad:78:
0e:69:23:39:79:24:b8:fb:97:7c:e5:77:e4:27:18:
5f:ed:60:49:62:95:79:1a:09:fa:1d:2a:cb:77:82:
b8:94:7c:4c:c0:ac:c3:38:c7:32:15:b0:ee:aa:89:
a6:1f:30:de:fb:9b:92:96:3b:1b:c2:00:04:15:1e:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:3C:4B:67:BA:88:56:21:02:A2:D1:97:F1:6D:EF:10:5B:0D:5B
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32322d3232203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
65:d3:b6:fc:c4:d9:5f:4e:51:fd:f1:0d:6f:e5:5e:fc:45:d6:
9d:48:66:27:39:44:0e:82:7e:08:85:24:d2:54:31:46:f4:69:
21:25:b0:cb:0b:f8:21:73:77:f8:09:32:d8:77:68:3b:b5:d6:
de:4d:19:8e:24:04:b6:1e:5b:45:fd:b1:e2:d2:d9:16:8d:cc:
01:16:f7:c6:b7:c3:16:31:c7:b2:5e:fb:e9:0a:95:33:9e:6f:
92:50:f5:d9:77:55:43:bf:ac:5a:9a:b9:6b:3b:f0:d2:14:27:
c3:f0:86:4f:09:e0:c2:6c:a8:c2:41:90:95:f3:94:6b:0a:f2:
0f:79:81:7f:b4:03:d2:b9:7f:56:a7:fe:aa:8b:76:da:fd:65:
8b:86:d8:df:8c:ba:de:c7:04:5a:27:5e:88:88:63:aa:8b:63:
5c:17:c5:82:1b:8a:72:6a:a9:20:c6:e3:39:86:17:82:42:33:
0e:7a:29:5b:d0:28:6b:53:db:eb:89:16:a6:64:84:5d:e7:0e:
ed:38:b5:c9:b9:c8:4c:b3:0b:0e:e1:05:56:1c:f8:51:66:18:
62:ba:db:8e:c3:f6:4e:56:58:69:3f:ab:f3:3e:50:5b:f9:9e:
8c:2a:c6:fd:b7:8f:af:3c:d7:e9:32:b5:0d:aa:c8:ea:57:49:
32:dc:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:12 2025 by rpki-client