Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a3a2f34382d3438203d3e20323037393630.roa
File: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (raw, json)
Hash identifier: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=
Subject key identifier: 95:93:6D:48:B0:F1:48:F9:95:9A:EA:2E:01:87:DC:1D:25:FE:9B:14
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 257AD12A9BD36F7551B7A0A4416E9A29F6304967
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a3a2f34382d3438203d3e20323037393630.roa
Signing time: Sun 01 Jun 2025 12:19:01 +0000
ROA not before: Sun 01 Jun 2025 12:14:01 +0000
ROA not after: Sun 31 May 2026 12:19:01 +0000
asID: 207960
IP address blocks: 2a11:f2c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7a:d1:2a:9b:d3:6f:75:51:b7:a0:a4:41:6e:9a:29:f6:30:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 1 12:14:01 2025 GMT
Not After : May 31 12:19:01 2026 GMT
Subject: CN=95936D48B0F148F9959AEA2E0187DC1D25FE9B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:73:7f:b9:c3:aa:80:26:6d:f1:16:5d:db:
57:e7:eb:24:30:0a:73:6c:5f:43:8c:9d:c9:b5:f2:
c9:38:a8:f4:01:df:e4:dd:c4:3f:72:7b:d9:b1:ea:
c8:95:42:59:09:d6:93:2c:c7:4c:30:ad:b6:21:48:
7a:c9:6a:38:b4:0b:c1:0d:8c:a0:84:53:15:b5:3c:
8d:ad:ef:30:6c:83:06:25:eb:08:e8:36:57:17:2e:
22:d9:dd:83:0a:d1:fc:5c:12:f7:90:be:2d:5b:1f:
65:d7:03:9c:5c:04:51:39:7e:41:cd:55:79:65:5d:
c9:41:c7:e4:f1:5f:97:58:e1:8d:5f:0a:c1:ce:44:
b2:06:41:e1:5d:d6:a5:a8:81:59:08:37:41:81:f1:
01:b0:07:db:a0:a0:d5:ab:69:42:4c:e7:f2:b2:39:
0c:df:6c:ab:e9:9c:2f:32:c1:6f:8f:7d:5d:cd:8b:
a6:7c:2f:e3:3b:5f:ff:47:44:e0:f2:6d:57:d5:9c:
67:e9:c6:fe:8a:7b:92:69:ab:af:4d:3d:88:fa:3d:
ad:44:7d:78:10:89:c1:36:f6:6f:f9:29:97:6d:fc:
8f:e9:b4:f6:42:3b:44:4b:cc:2e:f3:0d:c7:75:9a:
95:cc:6e:e1:4d:54:71:52:6e:2f:9e:8a:af:a8:3b:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:6D:48:B0:F1:48:F9:95:9A:EA:2E:01:87:DC:1D:25:FE:9B:14
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a3a2f34382d3438203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0::/48
Signature Algorithm: sha256WithRSAEncryption
a3:4e:e2:dc:80:ca:04:4c:10:76:17:9f:ff:1f:87:0f:a9:19:
c4:49:03:3f:64:01:2a:cf:29:cb:73:d7:8b:7b:3c:17:db:bc:
63:7e:8d:c9:c4:8c:75:06:0a:b2:ce:fd:98:bf:29:d7:44:88:
d9:32:11:6e:cc:8d:aa:ed:bc:58:f8:33:ab:cc:36:6e:c8:0b:
82:4f:a8:d8:8e:22:8e:d2:e7:34:01:b4:80:b6:a2:88:8f:59:
1f:37:bb:95:53:f5:46:43:f1:63:68:80:ed:c5:40:59:0b:15:
31:77:88:aa:7d:7b:52:27:af:82:65:2c:a2:49:f0:8b:37:ab:
54:72:e8:17:f9:78:03:c8:b8:af:85:06:19:0b:b2:e9:2a:1f:
8e:f8:ff:dd:95:8e:a7:9a:7b:e1:c3:e9:99:f9:50:95:74:19:
65:a9:d1:39:14:bb:57:88:8f:9f:13:fc:d5:54:36:18:81:e4:
a0:a7:24:33:2a:c7:51:30:d9:58:2c:5c:43:2e:29:14:c9:97:
28:0c:3c:84:97:83:6e:ea:56:33:4d:64:e1:3a:8c:a7:24:38:
52:c3:15:d7:a1:cb:e2:75:e6:44:ac:70:00:18:06:dc:a1:d8:
b6:e2:d6:e5:95:40:2b:dd:83:4e:0e:1d:ab:9f:5d:a2:1e:84:
99:36:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:08:18 2025 by rpki-client