Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa
File: 326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa (raw, json)
Hash identifier: ggBgH1kr0FT9cl1tGFXLNpszCDlLuRkSR6UN51pbBxw=
Subject key identifier: D9:0A:A0:E7:32:8C:56:9D:16:C0:57:B6:49:67:81:C7:93:53:6C:F7
Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial: 57FEA739C7F180FF0315A018D59D4C99694D6B47
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa
Signing time: Sat 01 Nov 2025 11:09:09 +0000
ROA not before: Sat 01 Nov 2025 11:04:09 +0000
ROA not after: Sat 31 Oct 2026 11:09:09 +0000
asID: 204244
IP address blocks: 2a0f:1cc5:d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fe:a7:39:c7:f1:80:ff:03:15:a0:18:d5:9d:4c:99:69:4d:6b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Validity
Not Before: Nov 1 11:04:09 2025 GMT
Not After : Oct 31 11:09:09 2026 GMT
Subject: CN=D90AA0E7328C569D16C057B6496781C793536CF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:e7:2f:b5:8b:49:53:f6:46:b0:7b:9b:e7:
81:17:51:f5:9d:69:cf:ce:0c:71:95:a7:e9:f7:95:
5b:c9:7f:b2:ea:4f:2f:57:59:f4:44:78:39:9e:18:
d5:86:90:22:d2:24:5e:dc:dd:b2:a6:4a:4a:c9:77:
4b:5f:a6:c7:3f:2c:d3:2a:63:36:4b:65:00:68:c4:
10:d0:4c:c2:de:0c:17:aa:6c:7d:db:f3:46:55:f5:
bc:23:a7:d5:b1:ec:b9:77:2c:98:f6:7f:6a:09:5c:
5a:8b:1f:d2:d7:96:45:0b:04:07:2b:bd:de:93:eb:
34:d6:60:b5:7e:cd:fc:d3:1d:49:35:cf:1e:40:95:
91:aa:7c:e2:6d:f4:a2:38:96:42:f8:3c:2c:c6:d2:
eb:ea:f1:86:51:87:d8:c6:08:13:d2:ab:4f:1f:64:
5f:22:da:2e:86:aa:56:f1:61:10:5e:02:00:aa:74:
f9:3c:59:76:e2:04:07:a7:55:75:62:e8:6c:3d:0d:
24:b0:54:64:46:e6:d3:1a:cc:14:23:96:fb:bf:9c:
3f:1f:31:88:8c:c5:63:ab:9c:c9:98:44:81:82:75:
2c:20:0c:dc:f0:ea:18:69:8d:0d:17:5e:a9:4d:68:
aa:b3:a5:a4:75:8e:17:f7:cf:59:d7:fd:9a:ca:e4:
1c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0A:A0:E7:32:8C:56:9D:16:C0:57:B6:49:67:81:C7:93:53:6C:F7
X509v3 Authority Key Identifier:
keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:d00::/40
Signature Algorithm: sha256WithRSAEncryption
50:9f:d2:c7:e6:9d:1d:a2:d8:e3:a5:6d:5d:30:04:2c:b1:1b:
30:ff:77:d8:08:2a:c6:c9:e2:2c:32:c3:41:14:e5:78:2b:62:
a0:a1:d7:77:13:ca:af:4a:5a:fa:d5:88:e8:e9:43:9c:33:c3:
62:06:91:4e:c4:c0:e4:7b:02:c2:cf:1e:fa:17:6c:46:c4:8c:
6d:24:fe:1a:50:76:01:11:5d:27:a4:98:1c:88:f1:f1:5f:0e:
a6:c8:3b:1a:98:2d:67:b1:09:22:c6:b6:64:d9:e7:82:08:8d:
62:64:ca:3e:fe:cc:d4:86:43:f8:71:82:28:7b:b7:19:e6:32:
58:1b:18:9d:1b:9f:17:db:ad:19:37:09:48:a9:c2:ef:db:e8:
c9:e1:97:ac:03:3d:fe:09:f9:b0:a5:82:96:98:63:c1:f3:9c:
cc:78:c0:46:55:79:2f:d1:8e:48:92:b0:5e:75:b3:bc:a1:86:
27:c7:00:ab:ad:e7:80:03:7b:4e:d1:8c:34:65:f6:70:75:59:
5c:59:c7:6b:7a:04:4d:c2:51:2c:e3:91:bd:fa:02:7b:2e:03:
e8:f2:dc:99:84:c7:99:bd:a4:d8:67:46:66:66:9c:0b:36:51:
b7:a9:d2:e4:74:a8:bb:1c:a8:44:c5:09:61:b6:5e:d8:9d:a7:
fd:33:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:54:08 2025 by rpki-client