Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233322e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: VIdYFIOIqW5zJ3T1LDGwWjmJ764XjM+ac+86S8Ja5hk=
Subject key identifier: D1:CB:22:4C:72:B7:BB:6B:E6:7D:53:9C:F9:D7:2E:10:3B:10:E7:30
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 069B45032B5B4A664924B5157C930072A0D7F2F2
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233322e302f32342d3234203d3e203438303730.roa
Signing time: Tue 27 May 2025 15:50:36 +0000
ROA not before: Tue 27 May 2025 15:45:36 +0000
ROA not after: Tue 26 May 2026 15:50:36 +0000
asID: 48070
IP address blocks: 94.126.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9b:45:03:2b:5b:4a:66:49:24:b5:15:7c:93:00:72:a0:d7:f2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: May 27 15:45:36 2025 GMT
Not After : May 26 15:50:36 2026 GMT
Subject: CN=D1CB224C72B7BB6BE67D539CF9D72E103B10E730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:e7:b0:c5:01:cc:45:e6:1b:5f:76:42:ee:
e2:b6:73:b3:3d:59:d8:58:94:3a:b1:e8:1f:79:ca:
77:05:14:86:12:27:66:84:59:9b:e1:51:f0:d9:0d:
ca:db:8e:b1:bf:54:fa:57:0c:3e:21:da:ff:1e:6b:
c1:fd:5d:df:86:35:89:3e:74:18:98:c8:34:b7:e7:
4d:3d:d4:ef:9f:18:11:6b:62:f3:2b:58:bb:26:69:
a0:24:1e:30:25:5b:da:dd:31:cf:56:67:c4:88:8b:
1d:c8:42:2c:00:76:fe:eb:ba:48:37:42:d0:ae:dc:
09:5f:2e:f7:7e:a8:08:c6:90:68:ee:ec:71:62:e3:
6f:32:20:b7:e9:32:62:ee:ec:7e:a4:a0:7c:16:1f:
fc:66:b5:16:cf:54:cf:e7:08:ac:ea:39:b6:c2:cb:
5d:21:8e:aa:49:59:55:46:b6:ef:eb:a0:ce:64:93:
28:e4:de:45:1c:a5:1b:db:f0:06:2d:54:c0:e9:ca:
a4:32:6f:61:d6:13:04:d7:28:57:4f:f1:a0:f0:da:
d9:a8:12:e9:47:5e:1b:09:02:0b:e6:3e:cb:29:87:
6a:9c:d4:6f:a9:16:f4:a5:92:50:ef:00:5b:ff:8c:
2a:2d:4f:a3:f8:88:10:2f:b5:87:84:d3:5b:d1:c3:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:22:4C:72:B7:BB:6B:E6:7D:53:9C:F9:D7:2E:10:3B:10:E7:30
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233322e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/24
Signature Algorithm: sha256WithRSAEncryption
96:84:48:9c:fc:a1:dc:68:12:ae:a1:e8:16:11:a8:3d:ea:59:
4a:a4:1b:8d:5c:20:a8:75:96:f9:15:66:1f:37:47:aa:9d:28:
c2:f5:fd:7a:af:66:58:ca:60:67:5b:97:e6:27:ab:b4:8d:dc:
d7:6c:d3:5c:b4:f1:1d:81:2f:a0:75:f7:8f:33:b1:59:45:34:
ce:08:cc:fe:db:fb:7e:51:e9:99:f9:be:46:d8:41:61:60:9b:
b8:ea:7e:94:18:ec:aa:8c:b4:2f:79:29:0d:cb:89:ae:53:32:
a9:fc:00:82:eb:d0:82:6f:52:2a:a5:99:28:40:4d:5b:20:f9:
86:35:08:b9:e8:76:bf:51:3a:d9:1b:e2:b8:e1:6d:a9:ad:9f:
00:1f:84:a4:f8:71:03:65:c1:d5:e8:8e:95:cd:1b:13:40:37:
1c:1f:ae:ab:c7:12:65:23:98:4b:79:26:68:b0:7b:a5:40:64:
f9:81:cc:1c:08:bf:06:55:a4:16:d7:e7:4d:bb:99:75:58:30:
18:c4:e6:c6:5e:fc:cc:87:c4:68:3b:6b:17:62:73:1f:07:87:
ff:bc:a7:b3:5c:0e:35:ba:d0:7f:54:86:15:36:7a:05:48:cd:
f5:7c:54:ee:8e:2b:cd:a2:b7:b9:f7:7f:5f:0c:a5:96:00:fe:
b2:96:a7:ef
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUBptFAytbSmZJJLUVfJMAcqDX8vIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNTA1MjcxNTQ1MzZaFw0yNjA1MjYxNTUwMzZaMDMxMTAvBgNV
BAMTKEQxQ0IyMjRDNzJCN0JCNkJFNjdENTM5Q0Y5RDcyRTEwM0IxMEU3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DOewxQHMReYbX3ZC7uK2c7M9
WdhYlDqx6B95yncFFIYSJ2aEWZvhUfDZDcrbjrG/VPpXDD4h2v8ea8H9Xd+GNYk+
dBiYyDS350091O+fGBFrYvMrWLsmaaAkHjAlW9rdMc9WZ8SIix3IQiwAdv7rukg3
QtCu3AlfLvd+qAjGkGju7HFi428yILfpMmLu7H6koHwWH/xmtRbPVM/nCKzqObbC
y10hjqpJWVVGtu/roM5kkyjk3kUcpRvb8AYtVMDpyqQyb2HWEwTXKFdP8aDw2tmo
EulHXhsJAgvmPssph2qc1G+pFvSlklDvAFv/jCotT6P4iBAvtYeE01vRw0+PAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0csiTHK3u2vmfVOc+dcuEDsQ5zAwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzkzNDJlMzEzMjM2MmUzMjMz
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Xn7oMA0GCSqGSIb3DQEBCwUAA4IBAQCWhEic/KHcaBKuoegWEag96llKpBuNXCCo
dZb5FWYfN0eqnSjC9f16r2ZYymBnW5fmJ6u0jdzXbNNctPEdgS+gdfePM7FZRTTO
CMz+2/t+UemZ+b5G2EFhYJu46n6UGOyqjLQveSkNy4muUzKp/ACC69CCb1IqpZko
QE1bIPmGNQi56Ha/UTrZG+K44W2prZ8AH4Sk+HEDZcHV6I6VzRsTQDccH66rxxJl
I5hLeSZosHulQGT5gcwcCL8GVaQW1+dNu5l1WDAYxObGXvzMh8RoO2sXYnMfB4f/
vKezXA41utB/VIYVNnoFSM31fFTujivNore5939fDKWWAP6ylqfv
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:53 2025 by rpki-client