Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e20313533303538.roa
File: 3134362e31392e32322e302f32342d3234203d3e20313533303538.roa (raw, json)
Hash identifier: 2SLKnEVPZMy3usNHsHt5Ch/LNVXs09hZIVJwRKFQFr4=
Subject key identifier: EA:0E:D6:D5:6D:C4:A4:D3:F9:F9:46:BA:FA:A5:20:5D:A9:9C:C4:E1
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 6B2B4FCA447A5493D6E64697276FE1213BD0D036
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e20313533303538.roa
Signing time: Mon 26 May 2025 17:25:46 +0000
ROA not before: Mon 26 May 2025 17:20:46 +0000
ROA not after: Mon 25 May 2026 17:25:46 +0000
asID: 153058
IP address blocks: 146.19.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2b:4f:ca:44:7a:54:93:d6:e6:46:97:27:6f:e1:21:3b:d0:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: May 26 17:20:46 2025 GMT
Not After : May 25 17:25:46 2026 GMT
Subject: CN=EA0ED6D56DC4A4D3F9F946BAFAA5205DA99CC4E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:43:df:b4:de:f4:01:d5:84:53:b0:19:87:
ee:e0:3e:8f:11:5e:1f:cc:c5:33:1e:ac:8b:e0:bc:
a5:14:1a:2c:82:ba:a7:e9:32:26:87:d7:f5:6e:2d:
51:38:88:85:db:41:0f:bc:49:0f:99:c5:45:32:f2:
fb:25:61:e5:5a:50:3f:fd:53:c2:61:dc:f9:7c:56:
38:e8:85:c4:1f:3f:83:bf:d7:88:ed:ac:75:c8:f1:
e7:95:3c:f3:1c:fd:da:69:56:fe:88:ee:17:23:9b:
90:13:37:c3:ec:d9:7e:09:0e:1f:dd:05:11:ce:0f:
cc:9f:ff:17:cb:14:00:e6:ac:a9:a1:a0:c5:fc:ee:
84:11:3a:83:69:f0:49:30:d8:5b:13:0b:99:63:26:
27:a7:0a:d3:26:4c:04:b2:0c:6d:86:c6:77:33:83:
ae:f1:8c:97:bb:d4:e9:37:27:1f:64:95:29:bd:8f:
26:76:7b:0b:eb:aa:d0:be:9c:55:30:d1:20:1a:76:
74:68:6e:26:5b:6d:8a:da:85:8a:99:6e:1a:8a:30:
d1:77:ae:f4:1a:ec:35:a0:90:3a:ce:97:3b:80:5f:
0a:a9:1d:28:1f:69:26:ca:91:2e:07:10:e4:6e:a1:
c3:bd:17:b9:25:0d:a8:c5:a1:72:fb:1e:12:21:b5:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:D6:D5:6D:C4:A4:D3:F9:F9:46:BA:FA:A5:20:5D:A9:9C:C4:E1
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e20313533303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.22.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d4:b6:f8:fa:89:c9:a3:c5:a2:3a:64:0e:82:f9:37:a5:ba:
8f:5e:55:98:70:53:45:71:2e:4e:72:c9:1b:e2:37:41:4f:b7:
bf:d4:c2:e3:ad:5e:68:7e:d7:c7:26:0c:f6:ee:ab:0f:04:73:
5a:ef:b2:48:62:4f:54:c2:a6:cf:41:8b:2b:7c:1e:69:ff:01:
19:bc:cd:90:29:8f:c7:5c:31:c3:98:40:fe:93:f2:db:33:93:
dd:b1:13:2b:4b:85:33:39:31:f8:d8:15:6a:83:fa:4c:dd:27:
27:d9:e6:52:14:be:fa:84:5c:05:64:43:03:94:e0:79:e0:b7:
44:45:7c:b6:e6:64:ce:cd:fe:fd:bb:6d:4c:88:49:5a:65:02:
44:c7:f6:88:69:cb:ae:ea:8a:2c:75:98:0a:40:79:5b:ef:8f:
88:73:5d:a3:3d:e0:c2:41:e9:36:41:29:ac:8e:b3:bc:9d:a6:
6e:75:39:df:6e:31:1b:79:f0:38:6d:07:33:39:47:0a:ce:ed:
9c:54:5b:23:c1:c7:65:59:dc:61:ec:7f:86:d9:fa:b2:a4:e1:
57:41:f2:4d:15:d4:f5:08:4a:68:bf:b7:d1:74:dc:e5:30:eb:
53:cd:2d:76:03:bc:2a:f1:28:ed:d9:31:76:c7:8a:62:c5:0a:
27:e6:e0:6c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaytPykR6VJPW5kaXJ2/hITvQ0DYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm
NTg3M2RjNDAeFw0yNTA1MjYxNzIwNDZaFw0yNjA1MjUxNzI1NDZaMDMxMTAvBgNV
BAMTKEVBMEVENkQ1NkRDNEE0RDNGOUY5NDZCQUZBQTUyMDVEQTk5Q0M0RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmEPftN70AdWEU7AZh+7gPo8R
Xh/MxTMerIvgvKUUGiyCuqfpMiaH1/VuLVE4iIXbQQ+8SQ+ZxUUy8vslYeVaUD/9
U8Jh3Pl8VjjohcQfP4O/14jtrHXI8eeVPPMc/dppVv6I7hcjm5ATN8Ps2X4JDh/d
BRHOD8yf/xfLFADmrKmhoMX87oQROoNp8Ekw2FsTC5ljJienCtMmTASyDG2Gxncz
g67xjJe71Ok3Jx9klSm9jyZ2ewvrqtC+nFUw0SAadnRobiZbbYrahYqZbhqKMNF3
rvQa7DWgkDrOlzuAXwqpHSgfaSbKkS4HEORuocO9F7klDajFoXL7HhIhtfU9AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU6g7W1W3EpNP5+Ua6+qUgXamcxOEwHwYDVR0j
BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj
ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX
SFBjUS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt
NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzEzNDM2MmUzMTM5MmUzMjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
khMWMA0GCSqGSIb3DQEBCwUAA4IBAQBS1Lb4+onJo8WiOmQOgvk3pbqPXlWYcFNF
cS5Ocskb4jdBT7e/1MLjrV5oftfHJgz27qsPBHNa77JIYk9UwqbPQYsrfB5p/wEZ
vM2QKY/HXDHDmED+k/LbM5PdsRMrS4UzOTH42BVqg/pM3Scn2eZSFL76hFwFZEMD
lOB54LdERXy25mTOzf79u21MiElaZQJEx/aIacuu6oosdZgKQHlb74+Ic12jPeDC
Qek2QSmsjrO8naZudTnfbjEbefA4bQczOUcKzu2cVFsjwcdlWdxh7H+G2fqypOFX
QfJNFdT1CEpov7fRdNzlMOtTzS12A7wq8Sjt2TF2x4pixQon5uBs
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:29 2025 by rpki-client