Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233332e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: /8dVa93viKNoM1pCJooeH0rtbsVAVvDJFpjlC3WNZyI=
Subject key identifier: B3:E3:4B:24:5D:81:4F:DB:C0:AE:2A:AF:8E:5C:5B:8A:C2:62:63:21
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 67A7CF28997DFADDA26BE7A4F3EBB3EF6CC1F7A9
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233332e302f32342d3234203d3e203438303730.roa
Signing time: Tue 27 May 2025 15:50:37 +0000
ROA not before: Tue 27 May 2025 15:45:37 +0000
ROA not after: Tue 26 May 2026 15:50:37 +0000
asID: 48070
IP address blocks: 94.126.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a7:cf:28:99:7d:fa:dd:a2:6b:e7:a4:f3:eb:b3:ef:6c:c1:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: May 27 15:45:37 2025 GMT
Not After : May 26 15:50:37 2026 GMT
Subject: CN=B3E34B245D814FDBC0AE2AAF8E5C5B8AC2626321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:04:da:dd:dc:e5:0d:b4:5b:f3:eb:5e:fa:
ab:49:20:18:e4:ae:12:1b:58:7a:3c:b7:9e:d9:94:
09:ab:7a:58:5d:1d:0e:40:88:89:92:14:bc:76:94:
e1:a9:2f:ee:a4:e8:bd:9f:b8:a1:38:42:fb:17:db:
88:4c:03:28:82:af:d6:86:4f:91:a2:63:2d:e1:3e:
8a:3b:22:c6:26:7c:5a:b9:8a:96:26:45:f4:8a:fc:
ce:95:8b:3b:ed:a3:4c:ee:ca:11:49:64:31:51:ef:
34:5c:36:1a:6e:1c:c8:29:84:13:0c:29:e0:95:de:
19:a8:2b:5d:34:dc:f7:e5:f7:20:71:df:b7:9f:68:
8c:c2:d7:e1:c7:89:dd:d5:f1:f6:fa:42:a1:59:de:
65:3e:c5:2b:fd:75:02:1e:07:16:d1:86:1f:23:c3:
40:ff:4a:07:98:90:6a:4e:6c:57:50:44:74:46:b9:
7f:0d:0d:54:ff:4b:a5:4b:91:58:38:e4:54:bf:37:
61:4c:aa:92:41:95:64:d2:89:68:92:a6:16:f2:c0:
97:83:f8:17:33:6b:ba:f4:88:93:70:b3:47:77:fd:
ce:9a:c6:63:42:73:aa:58:16:59:05:e8:9a:f8:ea:
07:07:c3:c8:c4:21:ec:30:a5:e3:70:16:76:f1:bb:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:4B:24:5D:81:4F:DB:C0:AE:2A:AF:8E:5C:5B:8A:C2:62:63:21
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233332e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:06:36:19:cc:8c:0e:44:ed:f3:ec:75:1f:cc:99:c5:9b:09:
ca:2b:cc:3b:22:28:72:11:f6:76:58:30:ed:8f:30:e3:74:88:
0a:7e:f6:bb:79:f2:c4:d4:d0:40:29:7d:4e:24:0d:9e:c1:a9:
e6:c8:a9:55:15:ee:1f:5e:73:cd:e0:c5:61:12:6c:50:d5:97:
fb:64:dd:72:f9:aa:21:0f:bd:b6:32:4e:3b:92:af:b8:da:3e:
e4:e5:2d:c6:cc:c7:8c:c8:7c:06:bb:ac:a3:20:f5:0b:ff:47:
c7:3a:77:74:98:4b:07:10:af:04:0e:3b:fd:79:1f:ce:c9:4d:
e6:b1:1a:3a:be:6d:10:5c:f9:11:28:b6:68:68:b3:7c:f9:11:
c5:4c:05:3e:0d:35:18:9a:95:5c:f9:28:18:bb:8e:cd:bc:9a:
10:29:6b:99:d1:1c:b2:fb:87:7d:b7:43:be:93:da:ab:ef:9b:
b0:80:e5:5c:65:08:6a:ac:32:68:10:2a:e9:ff:8a:7c:f4:bb:
b2:70:81:46:0f:98:71:07:bd:63:90:21:1c:cc:7f:6b:1d:4e:
2d:09:67:af:b3:a1:ef:18:f3:75:2b:c9:a3:2b:f8:72:62:ab:
14:90:d7:c1:b4:8d:00:00:76:bc:4e:06:28:45:37:c8:30:b5:
49:51:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:58 2025 by rpki-client