Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238303a3a2f32392d3239203d3e203431373230.roa
File: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (raw, json)
Hash identifier: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=
Subject key identifier: F9:7C:57:89:AA:AB:6F:EF:DE:BB:AF:CD:29:73:87:75:ED:0D:98:01
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 795B6D6411A9200835554D8D8270D2E0B19828C4
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238303a3a2f32392d3239203d3e203431373230.roa
Signing time: Thu 24 Jul 2025 16:39:46 +0000
ROA not before: Thu 24 Jul 2025 16:34:46 +0000
ROA not after: Thu 23 Jul 2026 16:39:46 +0000
asID: 41720
IP address blocks: 2a0d:b280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:5b:6d:64:11:a9:20:08:35:55:4d:8d:82:70:d2:e0:b1:98:28:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Jul 24 16:34:46 2025 GMT
Not After : Jul 23 16:39:46 2026 GMT
Subject: CN=F97C5789AAAB6FEFDEBBAFCD29738775ED0D9801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:c7:dd:f5:3c:44:ae:b1:7b:3b:90:2c:03:
69:e7:63:d2:82:71:ca:c4:e5:cd:ec:10:f0:2d:4d:
b1:da:90:56:a4:09:4d:6b:90:25:02:9b:b9:c5:b0:
7a:ba:e8:b9:cc:77:c7:f4:4b:14:76:17:7d:5e:f4:
4b:bd:7e:5e:e4:f8:c0:cb:84:e0:bf:b9:6b:ea:04:
c9:00:22:6d:60:d1:9a:81:d6:25:5f:46:94:fd:51:
49:cc:30:7b:8c:be:c9:c8:7c:de:68:3c:3b:a9:03:
2b:cc:6b:18:11:03:99:e3:94:1f:82:f3:cb:93:03:
22:85:39:6f:0f:fe:63:60:6e:2c:4f:72:53:98:97:
48:40:23:36:41:2f:14:fd:93:8a:a3:c3:2a:6e:f2:
db:0e:68:bb:c4:c9:7f:ad:c9:6d:98:18:c0:c4:5c:
e7:21:8f:ae:72:4b:7e:95:02:25:6c:09:39:44:7b:
32:6f:31:33:06:fd:04:c9:39:fa:20:ee:99:77:f7:
28:1c:36:58:e8:4b:5a:57:d8:b1:db:20:7f:d1:a3:
c1:93:a4:61:9f:75:73:11:93:07:51:59:ee:db:03:
18:63:85:14:e2:4d:35:0c:35:4b:17:28:90:87:e0:
94:d8:49:96:eb:a9:aa:1c:43:72:f0:6c:5c:96:9b:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:57:89:AA:AB:6F:EF:DE:BB:AF:CD:29:73:87:75:ED:0D:98:01
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238303a3a2f32392d3239203d3e203431373230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b280::/29
Signature Algorithm: sha256WithRSAEncryption
42:cc:a9:91:1b:51:a7:b3:91:5b:62:58:e3:c9:56:0d:b7:1d:
b9:37:74:84:f1:19:8a:4e:b3:e2:dc:b7:cf:c7:a7:b5:9c:78:
2b:ac:07:4b:fb:ac:af:56:2c:aa:23:c3:38:6a:c0:7b:00:e5:
44:4b:6f:8f:82:9b:8d:4a:e6:1a:3e:29:18:4a:35:28:41:b8:
02:66:b2:4f:cd:74:6e:65:d0:36:e8:3c:49:f1:4e:5d:2a:34:
40:e9:49:91:1d:aa:2d:29:e4:59:74:ed:42:6f:2f:2a:5c:ab:
e5:89:7c:8b:c9:5e:9f:ef:4c:ae:55:59:e8:9c:06:a7:dd:e6:
f5:17:3b:2a:a7:31:e4:a7:e5:94:fd:b7:b2:dd:9c:31:3d:29:
fc:82:4f:6e:87:37:21:37:fa:91:df:93:48:8d:d9:a9:16:06:
9d:6d:b1:79:09:3d:5b:dd:51:4b:71:bb:7f:b8:fe:c6:80:74:
2e:10:b6:30:7f:f0:12:45:ec:a8:7b:53:72:b9:50:d0:0f:a6:
ba:52:3a:21:40:04:00:08:27:b3:d5:76:db:d9:cc:9c:29:1a:
16:3a:5c:99:9b:fc:e3:3e:2b:33:c6:1a:5b:14:8b:55:e1:e1:
9b:d3:91:24:57:a2:2e:cc:73:9d:ea:c8:65:c2:17:05:32:1b:
27:0f:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:08 2025 by rpki-client