Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (raw, json)
Hash identifier: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=
Subject key identifier: 8E:4A:A3:D3:B9:95:01:9A:22:A7:18:F1:FF:23:F5:42:CA:77:13:5B
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 76D137265A39337DB583A45D9720FB9C3C0CAA42
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa
Signing time: Tue 29 Jul 2025 02:54:13 +0000
ROA not before: Tue 29 Jul 2025 02:49:13 +0000
ROA not after: Tue 28 Jul 2026 02:54:13 +0000
asID: 198883
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d1:37:26:5a:39:33:7d:b5:83:a4:5d:97:20:fb:9c:3c:0c:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 29 02:49:13 2025 GMT
Not After : Jul 28 02:54:13 2026 GMT
Subject: CN=8E4AA3D3B995019A22A718F1FF23F542CA77135B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:1d:f2:71:e8:c0:b3:87:18:36:9b:1c:7a:
0c:44:c0:a9:27:db:1b:f8:6e:e5:f7:bb:e8:c9:d6:
9f:d6:46:b3:5d:47:31:59:69:03:ce:9e:dd:2c:a9:
77:5a:52:f7:d7:87:2c:c8:83:84:fc:1f:9f:57:cf:
49:f7:d7:b8:8a:80:63:44:72:f1:89:2f:d3:1a:57:
4d:c4:03:74:b0:d8:36:97:c9:e9:31:2d:a4:7e:8a:
7f:bb:48:78:ab:56:c8:ce:88:d3:47:c9:d1:bf:80:
07:52:48:6a:56:5c:31:2e:37:aa:58:59:13:9a:c6:
0b:25:59:b8:7c:19:ac:9a:13:00:ed:77:3e:21:70:
fa:c7:bb:9e:55:b6:5e:58:21:c3:73:86:90:fc:5a:
ec:7f:2a:4d:76:57:bc:5f:7a:be:41:40:65:12:dc:
e2:f2:b9:ad:4b:60:c3:07:04:ee:58:e5:27:b4:4b:
77:48:69:0a:ac:e9:2e:95:ac:e9:e1:21:ea:8f:ac:
56:f8:b8:8d:48:22:2f:29:29:8b:8d:44:a5:c3:78:
92:99:47:e0:c2:3e:80:1e:a8:02:08:28:3a:a3:ca:
2b:a4:d1:34:88:cd:a4:0a:da:87:22:22:02:62:81:
84:d4:83:c8:2e:63:ec:da:aa:4a:12:35:23:c6:36:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4A:A3:D3:B9:95:01:9A:22:A7:18:F1:FF:23:F5:42:CA:77:13:5B
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:4c:83:d7:66:59:39:17:37:a8:59:50:11:c6:84:b9:a9:4b:
e3:b9:4d:75:d4:ee:dc:c5:e1:65:69:b5:88:06:4a:28:4c:7c:
0c:60:ee:2d:4d:5a:a0:0c:bc:bd:f5:09:36:ac:08:fe:14:bf:
5b:8b:9a:f4:61:4b:83:39:76:75:6e:2f:69:24:00:c3:11:ac:
6e:38:a3:08:ef:18:e0:e6:23:21:4d:3d:57:68:fa:ee:ea:39:
9b:e1:9f:13:61:a4:f4:de:4e:dd:09:82:5d:98:4d:9e:4e:49:
8d:2f:a7:f5:76:76:a6:ff:72:db:3f:be:96:77:c5:ec:9b:88:
e9:d9:3e:6f:3a:79:13:cd:58:b8:a1:69:a1:e6:d3:7a:13:c7:
fa:28:58:6e:1d:d8:99:3c:61:e9:fc:80:0f:8c:aa:9d:87:bd:
20:3b:12:ec:1c:25:f9:64:36:9c:f1:74:65:fe:8d:bb:03:66:
b3:58:48:3b:08:90:da:c6:2a:5f:6a:fa:e9:6b:d2:38:49:00:
bd:91:99:99:72:b2:15:d1:b9:f5:50:91:c7:10:88:b0:a3:1e:
08:78:46:a2:dc:9d:35:59:62:d1:ad:ff:cd:1f:9f:c4:34:6e:
00:89:6d:e3:6d:20:4f:f9:fb:dc:87:06:62:f0:ad:c4:7d:c7:
a0:55:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:13 2025 by rpki-client