Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: S5WIAkzllTXfMiWpREUuucFgM0BSw7Pb5gT995rR5+k=
Subject key identifier: 06:B4:66:83:E7:D9:28:42:18:98:6B:65:AA:0A:56:45:6F:74:FC:E9
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 2489F3C05D3E3B262709661587F53C569C2AE9DB
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
Signing time: Tue 27 May 2025 15:50:36 +0000
ROA not before: Tue 27 May 2025 15:45:36 +0000
ROA not after: Tue 26 May 2026 15:50:36 +0000
asID: 48070
IP address blocks: 94.126.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:89:f3:c0:5d:3e:3b:26:27:09:66:15:87:f5:3c:56:9c:2a:e9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: May 27 15:45:36 2025 GMT
Not After : May 26 15:50:36 2026 GMT
Subject: CN=06B46683E7D9284218986B65AA0A56456F74FCE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:01:a2:d3:c3:c9:1f:9d:7d:c8:05:e1:8c:
8e:33:ae:45:b5:e3:33:b1:e8:4e:98:f2:d6:60:6f:
ce:d0:d7:67:ee:95:83:36:74:47:c8:19:a1:c7:ed:
9b:17:a6:9a:e6:40:a8:11:cd:1d:36:b1:d0:81:41:
5e:99:fc:18:9a:1a:ac:35:c0:6b:51:b5:51:c1:21:
eb:7a:b8:d5:b7:3d:cd:73:98:45:ef:a7:c7:de:88:
f5:18:c4:11:a1:48:a8:38:e3:84:97:e2:f4:77:ea:
ae:e9:00:c0:c6:d9:26:e4:be:9c:2e:cc:e9:d2:ec:
99:6b:ad:de:40:2f:91:9f:ae:80:82:a6:83:ab:3a:
00:fd:3b:f4:7a:14:05:0a:d0:c9:93:21:ef:01:6e:
22:fb:55:0b:e0:a1:c1:0e:d3:b4:cb:15:b5:fc:00:
e3:4f:4e:64:5c:4c:f7:11:27:d4:67:70:1d:11:1e:
6c:2f:4d:96:de:85:3b:a7:54:c9:d0:6c:7e:b9:11:
ff:1f:b3:b5:4e:6e:e7:91:13:26:88:df:ba:f9:ca:
34:e9:09:61:ef:0a:ca:4a:79:22:a9:67:c5:b0:1c:
27:9f:98:91:5c:63:c4:c6:73:3d:80:53:85:5a:56:
47:4a:fe:6e:5d:e1:27:b0:44:7b:36:a4:df:f5:85:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:66:83:E7:D9:28:42:18:98:6B:65:AA:0A:56:45:6F:74:FC:E9
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233352e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.235.0/24
Signature Algorithm: sha256WithRSAEncryption
34:60:2a:e7:d0:0e:cf:a3:bc:73:99:8d:f5:53:3f:7b:62:be:
3a:79:a7:18:3a:52:08:f6:96:1e:66:94:40:fd:06:ab:22:5d:
55:19:5c:c8:71:79:12:95:6d:89:94:88:42:d2:9c:e6:8a:8b:
8c:5a:76:a7:ce:16:f1:0a:47:19:2e:ad:f6:21:ad:9e:9e:51:
54:df:b3:46:c4:05:d8:25:1c:a3:14:6f:73:a7:6e:56:07:76:
6f:d5:9f:20:f6:63:f5:89:14:bb:36:23:23:8c:2c:b9:5c:04:
89:38:c2:f2:62:07:93:9e:73:60:c7:11:92:73:3e:bb:53:d4:
84:0f:6b:b2:34:f3:01:bd:a3:12:b2:83:c7:f9:ca:8f:50:f5:
5a:ef:ac:b2:da:4c:6d:c2:9b:db:8f:6a:33:5b:0d:90:45:f3:
39:29:55:e6:e6:a8:92:5c:3b:64:41:92:88:2e:56:af:44:b2:
72:24:0f:10:0c:b4:84:be:ec:ab:40:3f:80:55:d0:4a:04:41:
6c:53:1f:c2:28:40:07:b7:18:17:91:40:a9:3d:c6:92:65:3e:
46:23:6a:ca:c4:ff:85:0a:67:23:60:f0:7a:e2:0c:01:39:6a:
9c:dd:f3:98:23:35:26:f0:36:2f:c6:27:18:e3:78:e3:36:c8:
e3:ae:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:55 2025 by rpki-client