Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa
File: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: Y4VGjNKxdM1kt8f9/kG9Dub6HzXbG7OXpVqySki/RW4=
Subject key identifier: 54:1F:D4:AA:74:55:AF:2E:A0:5F:74:A3:D4:EB:3D:EE:F8:D5:99:51
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 52AEC409EEFE9E4CC8540715FB409961CFAAE52D
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa
Signing time: Fri 25 Jul 2025 06:54:13 +0000
ROA not before: Fri 25 Jul 2025 06:49:13 +0000
ROA not after: Fri 24 Jul 2026 06:54:13 +0000
asID: 135391
IP address blocks: 185.13.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 22:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ae:c4:09:ee:fe:9e:4c:c8:54:07:15:fb:40:99:61:cf:aa:e5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: Jul 25 06:49:13 2025 GMT
Not After : Jul 24 06:54:13 2026 GMT
Subject: CN=541FD4AA7455AF2EA05F74A3D4EB3DEEF8D59951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:98:1e:2f:d0:2c:47:20:2a:7c:c2:86:20:
7e:d6:58:b0:e4:75:86:ae:03:65:75:50:77:38:54:
5a:44:c5:32:df:94:22:64:7d:1a:e1:60:ba:e5:3f:
0c:70:19:f3:47:6f:2b:ea:50:f2:53:e1:bc:67:70:
0a:43:92:72:a0:8e:83:ca:bc:11:fc:93:f5:f5:28:
24:40:8e:82:5a:e7:48:e7:d0:f8:e3:41:02:62:4f:
be:85:90:e7:c4:77:8d:8f:c5:97:d0:c8:14:11:94:
a6:56:2a:51:2a:e6:2e:e6:ea:8d:fc:af:a8:d9:15:
ac:a0:0f:34:00:41:6d:71:61:de:7d:6d:f2:e0:44:
ea:09:00:20:2e:3a:c8:d7:fe:20:ad:1c:47:11:2e:
32:19:01:eb:83:fb:f5:cb:f3:b5:3e:d6:3d:af:aa:
55:c8:07:cb:e0:ee:6c:0c:43:65:75:dd:b3:f8:80:
a2:42:1e:1a:c3:77:87:d9:17:e2:e7:87:e8:93:70:
14:0d:a6:b8:0a:53:87:8e:21:13:64:03:73:ed:51:
2b:1f:cb:d7:8c:d1:20:de:75:f9:c5:d2:b9:f2:90:
fa:1c:e6:cc:9e:9a:6a:c7:77:bb:df:04:2d:4b:8f:
ed:b9:20:19:d2:31:2d:9b:f5:8f:3a:d3:0f:b5:99:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1F:D4:AA:74:55:AF:2E:A0:5F:74:A3:D4:EB:3D:EE:F8:D5:99:51
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.224.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b1:9c:c2:a1:3d:48:11:7c:9d:07:fb:e0:2c:09:e2:5c:f6:
42:10:0f:ec:b4:e3:b8:84:7b:fb:00:89:eb:e8:69:ae:e0:a7:
6c:94:c0:08:b7:bf:55:77:3e:cf:1f:61:95:d0:cb:7d:3b:92:
34:26:3e:6b:c1:ea:d8:39:e2:84:a3:f4:5a:0b:00:d5:0a:79:
7e:0f:22:29:18:cd:69:fa:f2:3e:5f:43:93:3d:3a:23:1a:ff:
c7:bd:d3:65:f9:37:78:37:60:2b:57:5d:54:5c:b1:54:8c:b4:
15:85:50:3f:9f:9e:a2:f9:25:2a:a9:f8:3d:a5:01:be:73:f3:
65:27:4a:8c:72:3e:55:4b:4f:09:c3:48:2a:ee:fc:93:81:c7:
92:09:6d:3a:31:7c:66:eb:28:45:b2:a3:87:a6:21:61:76:0e:
4d:52:81:e2:51:a6:d8:20:86:0f:16:59:af:e9:1d:5a:8f:80:
bf:3b:7e:c1:1f:33:0a:b1:a7:3a:9d:e1:47:7d:fb:2a:11:65:
7f:36:cd:2b:35:be:8b:7d:ef:8b:60:27:16:1b:96:20:49:eb:
d8:6d:eb:02:5f:f6:ef:6e:4b:08:c7:ac:f5:85:e3:29:47:23:
53:ec:a8:37:6d:0c:1a:c0:e5:e3:1a:d5:c4:27:42:6d:67:52:
4e:bb:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:55:43 2025 by rpki-client