Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa
File: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (raw, json)
Hash identifier: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=
Subject key identifier: A6:2C:D5:09:B6:DC:00:E6:C3:35:BD:E7:8E:74:18:21:85:7A:5B:46
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 478508D6E7051D338F347FACDA31EF9B7CFA7657
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa
Signing time: Mon 21 Jul 2025 20:15:47 +0000
ROA not before: Mon 21 Jul 2025 20:10:47 +0000
ROA not after: Mon 20 Jul 2026 20:15:47 +0000
asID: 215248
IP address blocks: 2a14:38c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:85:08:d6:e7:05:1d:33:8f:34:7f:ac:da:31:ef:9b:7c:fa:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Jul 21 20:10:47 2025 GMT
Not After : Jul 20 20:15:47 2026 GMT
Subject: CN=A62CD509B6DC00E6C335BDE78E741821857A5B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:77:44:af:8e:9f:1f:c2:13:74:97:fb:39:
57:50:32:8c:fe:9c:59:0c:5f:80:90:1a:4d:c8:ec:
8b:25:3f:34:75:5b:a3:2b:a9:5b:f4:b3:b9:24:c6:
47:30:77:21:a8:5c:b0:75:c4:ce:c9:ca:c5:83:7a:
3a:5f:c9:b7:fa:62:10:30:e0:ef:a0:28:31:2f:f2:
bd:12:8d:ee:0f:e3:11:d7:6d:2a:59:16:00:fb:0e:
99:1b:99:6f:07:fa:05:28:7a:9b:02:b4:df:31:79:
e2:91:12:0a:41:1a:f9:19:44:e0:2b:d0:1c:e8:4b:
14:40:71:cf:40:b8:e9:29:4b:9a:5e:6c:34:12:fc:
b2:0a:50:80:2e:51:b8:ae:ee:da:66:8c:88:0d:e9:
03:62:71:62:9f:39:67:85:af:72:9c:ac:28:d9:22:
be:d8:4a:96:5d:04:2f:07:0f:79:ae:f4:52:87:5d:
bb:24:3d:5f:08:36:cc:18:86:23:50:1d:64:82:05:
e6:19:09:4b:65:c0:1e:83:02:2e:2b:3f:50:40:5c:
53:65:2c:d2:9e:08:f1:84:a6:ed:1c:37:8c:6f:aa:
18:3f:e0:b6:32:70:af:90:7f:05:96:47:ee:44:9a:
7c:4d:4d:12:8c:83:54:3b:50:bc:fb:52:ec:a9:df:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2C:D5:09:B6:DC:00:E6:C3:35:BD:E7:8E:74:18:21:85:7A:5B:46
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:38c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
81:9c:36:41:22:cd:d9:b0:25:d7:35:a6:d4:43:4a:4d:58:65:
8f:65:ca:e2:dd:82:e7:15:0d:63:4e:cb:d2:b4:44:43:91:87:
87:51:44:01:b8:00:08:fb:85:18:c3:0e:86:67:55:f2:cb:34:
ab:8c:cf:b1:d8:2f:ea:7b:17:7c:72:e3:98:9f:89:8b:09:fa:
71:0b:4c:1b:d1:75:c3:f2:36:ba:e8:01:69:65:7f:77:5a:8c:
ec:cd:2e:3e:04:91:e1:0b:4d:2f:9b:b4:0a:ce:ff:d8:a3:f4:
42:2d:97:1a:c4:c6:45:0d:9f:2a:ea:5e:a0:e4:72:4e:89:21:
16:1a:28:24:5f:88:de:fe:dd:a7:41:75:9a:78:79:53:ac:78:
61:f8:4a:d1:ce:c4:92:eb:8c:6c:8f:8e:ee:46:46:c0:08:f4:
39:e8:fd:e8:04:db:07:6b:f8:0c:7c:99:dd:57:2a:fe:41:b9:
0c:59:0c:a6:d7:b6:e7:48:45:f8:3b:80:2d:0e:dd:17:3c:48:
f7:d4:ea:d6:30:81:5d:06:c8:fa:11:0f:ed:ed:a1:d9:f6:ef:
7d:35:1f:be:42:a9:d9:0e:36:bb:c9:4a:7d:98:9f:5b:53:21:
38:07:53:ad:a0:8a:e3:7b:de:32:08:57:71:99:9b:a9:08:ba:
4e:c7:b9:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:34 2025 by rpki-client