Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e2039333034.roa
File: 3139332e31372e39352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 9Guine2JQ0PR4yaj3jvnIIIaTUv4lkdQwALSGSbr1I8=
Subject key identifier: E4:B9:C6:E6:6F:C7:79:8C:29:60:D8:E9:39:97:7E:27:1F:33:81:FA
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 54E97EC1A3B078AB47B315BEB7485993A619CB2C
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e2039333034.roa
Signing time: Mon 09 Jun 2025 19:34:11 +0000
ROA not before: Mon 09 Jun 2025 19:29:11 +0000
ROA not after: Mon 08 Jun 2026 19:34:11 +0000
asID: 9304
IP address blocks: 193.17.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e9:7e:c1:a3:b0:78:ab:47:b3:15:be:b7:48:59:93:a6:19:cb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Jun 9 19:29:11 2025 GMT
Not After : Jun 8 19:34:11 2026 GMT
Subject: CN=E4B9C6E66FC7798C2960D8E939977E271F3381FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:6e:b5:b0:8c:67:40:14:51:35:b1:b2:9a:
06:08:10:46:1b:43:e3:70:52:38:98:18:c0:a0:51:
70:ac:4a:6d:3a:ee:52:57:aa:62:4a:40:3f:be:e5:
08:5d:67:db:5e:eb:fd:fb:62:d8:7f:55:2f:53:cf:
74:bc:e6:30:fd:96:7a:6b:05:84:7f:50:ef:7f:f7:
8a:03:83:88:db:40:2c:c0:28:23:71:c8:9d:00:e4:
d4:db:83:f6:59:e0:89:4a:80:2a:94:68:09:c1:12:
d6:77:9e:fa:24:c6:2e:95:bf:5f:f7:0f:82:e3:47:
3c:83:cb:2c:41:ad:2c:b7:41:39:10:4d:cd:84:b9:
bf:f2:7b:01:ab:1a:a1:db:cc:69:e6:bf:4b:88:2d:
d1:4a:5e:54:a9:3b:d1:90:7e:3a:97:21:67:f1:4e:
ca:d8:66:17:60:41:1c:8f:af:af:e7:b6:b2:4b:9b:
2a:df:65:d1:4e:6e:5f:d4:1d:4f:32:c0:fd:1e:c8:
15:62:aa:0f:f1:14:26:17:43:29:46:31:b3:20:76:
1a:d1:69:54:1e:a0:1f:60:97:3c:b8:08:b2:f9:b3:
88:5b:ed:70:bc:22:8f:bc:65:bd:ab:73:be:e6:e0:
99:96:5d:ce:eb:bf:51:39:b1:e3:14:9e:15:be:98:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:C6:E6:6F:C7:79:8C:29:60:D8:E9:39:97:7E:27:1F:33:81:FA
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3139332e31372e39352e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.95.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bc:99:34:63:98:50:ca:8d:12:5e:2d:65:cb:17:62:8d:59:
3c:74:2a:bb:02:2b:5b:58:00:5c:86:3d:b5:46:e4:a5:39:a2:
54:4e:8c:54:64:b4:2e:25:af:7e:a1:64:56:8f:ef:f9:f2:b8:
6b:46:9f:18:d0:05:82:e9:4d:8b:d1:03:b1:d5:60:69:cd:d1:
b4:70:94:fe:d7:47:c3:11:53:a3:a2:af:6f:14:e4:ca:5e:d5:
82:a4:10:1a:a4:55:96:b5:8a:47:6f:ba:ca:c5:31:99:f5:b9:
39:bc:e5:0b:a2:b9:3f:9b:f4:ce:f6:23:67:2e:c4:f9:f8:e3:
fb:0c:72:0b:c0:ea:f5:c6:cc:3a:ec:94:65:4c:6e:e9:a6:38:
70:b6:94:3e:8c:a8:6a:00:10:2a:a3:a4:b8:61:0d:c1:20:1e:
52:6e:75:f2:5e:e8:aa:2e:48:d7:66:67:56:51:b5:3d:0b:2a:
d2:22:02:29:c5:dd:69:6e:cb:bc:5f:c1:79:18:7e:32:7a:5f:
c3:cc:10:99:f7:1c:6c:5e:54:cd:2e:e1:cb:3e:16:a2:31:e2:
6a:06:ed:a2:69:e7:d5:52:73:b3:07:d2:0c:9d:f7:a5:65:30:
9e:40:6a:7a:67:68:17:81:76:ca:b2:77:80:5b:93:55:93:ee:
86:9b:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:21:08 2025 by rpki-client