Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233342e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: wQ/YXS5V0WqyAz3I38Grxwtf2vC7Tnq0YU0pMolmNpk=
Subject key identifier: 81:F2:0A:FB:67:8F:29:57:57:DF:CA:C6:49:99:D5:24:79:2A:3B:C5
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 3845E9993532016E54B6EE34B07F1F155CBF43D6
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233342e302f32342d3234203d3e203438303730.roa
Signing time: Tue 27 May 2025 15:50:37 +0000
ROA not before: Tue 27 May 2025 15:45:37 +0000
ROA not after: Tue 26 May 2026 15:50:37 +0000
asID: 48070
IP address blocks: 94.126.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:45:e9:99:35:32:01:6e:54:b6:ee:34:b0:7f:1f:15:5c:bf:43:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: May 27 15:45:37 2025 GMT
Not After : May 26 15:50:37 2026 GMT
Subject: CN=81F20AFB678F295757DFCAC64999D524792A3BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:1b:9d:8f:65:fa:f3:dd:b1:79:45:c8:e2:
1c:2c:11:85:ba:fb:e3:f1:2f:7e:53:8e:2e:0f:1b:
96:7f:4a:75:e7:32:9b:9b:76:53:71:a6:07:52:94:
4d:29:0f:a1:48:d0:58:2e:1c:58:b8:82:5f:b7:1a:
16:8d:f5:c0:3c:5c:01:21:87:a6:71:e5:bd:13:2c:
2d:cf:13:d2:5a:31:d4:1e:25:35:85:ad:d9:e7:cb:
ff:d1:46:4b:96:2e:93:bc:58:89:54:de:64:63:33:
f8:e6:39:42:7a:e1:4e:91:7e:dc:98:84:5e:1d:48:
23:31:ae:4f:15:ca:90:65:a4:ac:1f:5e:4f:47:56:
53:c1:3c:fa:98:02:cb:47:fd:f4:59:80:7f:4a:d3:
2a:b3:6e:0b:f0:36:99:a3:e5:49:9f:a2:9c:e1:c3:
0d:46:f1:38:c5:21:ea:7c:35:51:a1:2c:b7:9b:95:
9d:37:da:0b:bd:ac:fb:fe:75:64:f6:ed:05:a3:59:
41:c7:6c:03:be:cf:27:fd:67:56:71:49:9d:99:50:
56:3e:aa:b5:b0:ac:93:58:74:9e:ad:9a:82:cf:25:
bb:04:ab:f1:d6:ab:ed:c9:e5:55:fe:9b:00:ee:3d:
c8:10:eb:71:e1:3c:f1:66:64:36:8c:9d:ba:2f:e8:
a6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:0A:FB:67:8F:29:57:57:DF:CA:C6:49:99:D5:24:79:2A:3B:C5
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233342e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.234.0/24
Signature Algorithm: sha256WithRSAEncryption
47:00:ef:7b:5a:0c:e1:3a:c5:91:f9:e6:b4:96:41:ec:42:be:
b2:e0:2f:fc:fa:2b:4e:0e:e6:81:cc:ca:1d:04:81:8f:27:9a:
f6:0b:d6:58:2a:2a:15:47:6b:51:d9:c8:42:3d:54:04:bb:37:
fc:17:b3:80:fc:22:a6:43:0f:b4:3f:48:4f:42:65:ed:15:0e:
53:b0:fc:07:63:88:f4:3e:a3:30:88:a4:f3:0b:90:03:de:7f:
e2:36:c9:7a:ba:46:bf:ee:e1:b1:5e:2f:ba:43:f5:8c:74:2f:
93:29:30:6e:83:72:3b:69:75:4d:0f:f6:a8:aa:49:0a:51:c7:
36:01:77:05:70:ee:69:2b:1d:3b:13:7b:f2:0b:24:07:59:4e:
e3:00:4c:49:72:cf:d8:ad:f4:76:70:c3:70:e5:be:91:9c:b6:
ee:b3:57:fe:0a:ed:d2:7a:1c:18:25:4d:4d:70:2b:dc:0e:ad:
2d:f0:20:0a:58:f5:86:12:43:8f:aa:c5:13:21:fd:23:b9:7a:
43:28:f7:74:ae:c4:99:82:10:a5:92:23:0f:2e:e2:d1:c6:d5:
82:c5:c4:4b:ce:1e:63:42:d2:47:62:c0:5c:ed:70:91:89:89:
3f:12:b5:ec:1b:f3:87:ab:8c:ea:6e:98:fb:86:21:83:35:b3:
09:f6:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:51 2025 by rpki-client