Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e20323134313433.roa
File: 3135392e3235332e362e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: ium02BtB+GfbIHn2YGUt7i7of/NJnXnez2EEtYL+duE=
Subject key identifier: B5:99:A1:2A:F1:AC:C5:91:A7:25:83:78:33:59:38:4D:F4:0F:58:F8
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 0B70BF26FA4E5CA81AF5A6DE9246D8B3E450F9C6
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e20323134313433.roa
Signing time: Sun 03 Aug 2025 15:53:16 +0000
ROA not before: Sun 03 Aug 2025 15:48:16 +0000
ROA not after: Sun 02 Aug 2026 15:53:16 +0000
asID: 214143
IP address blocks: 159.253.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:70:bf:26:fa:4e:5c:a8:1a:f5:a6:de:92:46:d8:b3:e4:50:f9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Aug 3 15:48:16 2025 GMT
Not After : Aug 2 15:53:16 2026 GMT
Subject: CN=B599A12AF1ACC591A72583783359384DF40F58F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:45:bf:e0:00:7b:bc:aa:c1:c4:b7:31:65:
b2:7b:85:b2:35:d1:c8:f3:38:1e:b4:44:b2:a1:3c:
41:24:62:5a:67:83:65:e5:db:9f:24:d6:b2:8c:6e:
97:57:5a:a7:57:d4:f0:f7:4c:aa:3d:81:a1:fb:46:
31:58:01:d5:b5:3c:2f:63:24:20:d5:3d:b8:88:a0:
9c:87:46:1e:27:3e:a8:52:d3:2f:f1:a6:85:80:b1:
8a:42:fa:c9:86:4e:89:dd:43:9d:05:bf:00:e9:f7:
41:5d:a8:04:ba:2b:18:8c:cd:39:dc:c3:64:fc:32:
ed:c9:50:56:2e:9d:20:3d:69:56:e2:64:52:ff:ae:
ab:be:f9:6d:83:eb:32:0c:27:e6:d3:0f:52:81:cc:
61:21:eb:de:c3:e5:d9:df:fd:05:b2:34:ca:4a:0b:
f8:a8:3f:0a:70:41:a4:b2:e2:60:81:c6:19:ae:64:
91:b1:b7:a4:6e:40:3f:a9:9b:3b:36:73:a4:3c:fc:
fd:6e:78:5b:62:5e:9d:5c:94:93:1a:87:5e:0b:85:
fb:80:e6:7c:49:63:13:2d:1e:6b:6f:c2:6e:5d:af:
44:f4:e0:c1:7b:63:8a:8c:36:16:02:e1:2a:a0:f4:
f8:79:96:f4:cb:36:9a:1f:cf:a5:01:96:5b:4c:29:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:A1:2A:F1:AC:C5:91:A7:25:83:78:33:59:38:4D:F4:0F:58:F8
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e362e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ef:4a:6e:3e:2c:6e:14:e8:84:78:f6:82:0f:27:54:3d:48:
ab:78:18:b5:54:5b:48:8f:c7:d0:18:d5:23:df:7e:59:d4:9f:
86:c6:b9:04:f0:7d:88:01:77:cd:b8:6f:c4:98:d1:bf:e4:81:
b1:bb:52:4f:6f:dc:be:b5:34:5d:ef:5c:6e:b8:25:a0:04:32:
65:28:2a:47:f5:7a:cc:fb:cd:99:ec:8c:31:68:ec:24:11:8c:
a1:84:84:e1:b0:f9:8f:1b:4d:0e:86:3b:14:96:8a:dc:1f:c0:
32:49:57:66:2a:c8:9d:9d:23:53:06:50:14:b1:2f:95:77:ef:
ef:58:ee:ee:64:b1:88:5d:54:ed:e7:af:92:3d:9d:c1:fb:11:
9a:94:f1:6d:a9:70:e9:f5:67:04:3a:21:3c:8e:3d:82:8e:ff:
bb:f1:f8:d7:9d:b4:a8:d0:c4:c5:b0:78:f7:e5:5c:0d:8c:ed:
2f:13:9d:87:3c:5d:15:6f:7b:7a:81:1d:e0:b5:c1:ee:d4:6b:
38:db:32:72:79:d3:3c:ae:bd:24:b2:18:59:e8:91:99:0c:80:
b5:05:2a:15:69:72:94:c3:c4:c5:7c:e2:cb:79:28:30:d0:b6:
9d:ee:f4:45:5b:9d:d9:fc:cd:85:41:3f:6d:2b:b8:d1:ac:2d:
58:ed:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:09 2025 by rpki-client