Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20383334.roa
File: 322e35382e38352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: p6psdQcuIYuvo7Zh8yy3QRSplesOYQjtk0cUFCos6r8=
Subject key identifier: 72:6E:87:DB:46:48:E8:3B:0F:E0:AE:E6:F4:44:6B:0E:16:65:57:59
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 4D07BBF4F675159BBA92034647BBD47B9D495084
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20383334.roa
Signing time: Sat 02 Aug 2025 10:14:20 +0000
ROA not before: Sat 02 Aug 2025 10:09:20 +0000
ROA not after: Sat 01 Aug 2026 10:14:20 +0000
asID: 834
IP address blocks: 2.58.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 Aug 2025 22:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:07:bb:f4:f6:75:15:9b:ba:92:03:46:47:bb:d4:7b:9d:49:50:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Aug 2 10:09:20 2025 GMT
Not After : Aug 1 10:14:20 2026 GMT
Subject: CN=726E87DB4648E83B0FE0AEE6F4446B0E16655759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:90:55:86:33:b3:27:34:b3:51:38:7b:75:
90:37:81:98:df:6c:85:90:a9:07:41:c6:b7:27:18:
39:5b:d8:9b:35:11:21:e9:fd:3c:b4:fe:d4:29:8a:
56:86:79:81:9d:2c:c0:7f:e6:93:e5:2a:53:9a:46:
4f:fe:08:8c:24:41:ba:f4:de:b6:cc:a0:07:27:c5:
62:35:df:e8:ae:1f:0f:c2:16:89:bc:98:a5:f1:b5:
52:b2:15:23:aa:c5:0d:df:56:f9:1f:f3:ab:bb:bb:
05:b0:fe:df:51:eb:02:0e:29:59:3b:50:97:2f:0c:
06:27:0a:5d:1e:ab:9d:0a:9e:0a:61:aa:8b:3b:89:
77:08:e7:81:d4:21:bf:1a:fe:9c:f4:f3:3d:1c:65:
61:b6:6f:69:32:eb:b8:1a:0f:c0:c9:76:1c:a3:ca:
3e:f3:97:c5:f6:2f:ca:58:fa:60:7d:79:44:ed:5a:
29:b6:a6:6f:ba:99:1c:ac:68:0a:8e:f9:72:ca:a9:
92:07:0a:4a:1b:98:9a:a8:dd:80:a4:24:f9:26:b3:
f8:50:6d:a2:51:e1:9c:53:b3:99:ae:d5:96:2e:88:
9d:54:b3:89:fc:44:06:36:0b:b6:f3:77:c0:80:fe:
26:98:cc:83:4a:d9:ac:39:0a:70:49:4f:21:f2:eb:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6E:87:DB:46:48:E8:3B:0F:E0:AE:E6:F4:44:6B:0E:16:65:57:59
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/322e35382e38352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0e:9a:db:2e:3d:72:64:f8:00:5b:42:54:c9:16:d7:0c:21:
9b:a1:a7:0d:d7:77:b8:7e:c6:6f:d3:40:1b:33:48:ef:a6:82:
53:32:75:45:72:57:fc:99:c4:83:0b:1e:37:e8:74:db:1f:0b:
14:6c:49:62:b9:54:a6:cf:81:77:33:5d:aa:4c:35:d3:9b:53:
f6:ac:00:fa:be:4c:b4:22:ff:10:f6:d9:15:61:e3:b7:ea:d8:
0f:10:c8:c5:1f:65:51:52:33:14:87:40:11:5d:47:4e:38:29:
9e:f3:c8:14:1e:c0:06:df:71:ed:66:9c:29:96:e2:b7:17:5c:
5f:d6:54:33:26:4a:19:c0:b7:ce:85:ba:99:72:2d:d5:6f:3b:
81:41:a4:5e:f4:fb:3f:5d:17:7f:d1:3e:34:5c:2c:b2:47:3a:
6b:47:c2:4e:12:d8:99:cf:0f:1d:13:2f:b3:11:c9:c3:33:ca:
ad:10:8d:84:57:47:8b:42:c0:f6:a6:27:4f:73:b1:8b:e0:28:
10:1c:3b:8a:dd:ec:aa:e8:fa:c7:16:da:34:9a:03:1f:0c:35:
d8:5e:f3:8d:57:cb:3b:ec:9b:3c:60:4e:41:b6:18:a3:b7:96:
34:af:53:ee:90:94:10:55:cc:02:c8:56:c4:c8:6c:de:3f:72:
b0:f8:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:08 2025 by rpki-client