Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e20313337353137.roa
File: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=
Subject key identifier: 96:2F:83:BB:8D:25:FE:9B:A8:CD:CB:7A:23:26:5A:AD:AE:51:4A:F3
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 0FBE617EE681A6D32F53E1CF796E856E2F9056A4
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e20313337353137.roa
Signing time: Wed 11 Jun 2025 13:36:33 +0000
ROA not before: Wed 11 Jun 2025 13:31:33 +0000
ROA not after: Wed 10 Jun 2026 13:36:33 +0000
asID: 137517
IP address blocks: 31.22.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:be:61:7e:e6:81:a6:d3:2f:53:e1:cf:79:6e:85:6e:2f:90:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jun 11 13:31:33 2025 GMT
Not After : Jun 10 13:36:33 2026 GMT
Subject: CN=962F83BB8D25FE9BA8CDCB7A23265AADAE514AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:44:6e:25:be:46:73:fc:26:fd:ad:bf:b2:60:
b8:71:80:f0:4f:f3:c6:c9:58:8e:20:4f:9f:2e:cd:
75:27:17:67:0b:24:f8:25:2e:75:df:2a:31:04:95:
4f:f5:03:37:1d:d4:07:1d:c2:f7:61:15:53:0b:d8:
9f:bc:0c:9b:2d:85:b0:75:46:1b:df:60:fd:8c:5e:
b1:16:71:07:af:a2:8a:68:c3:9c:1c:d2:39:ef:05:
a1:b0:87:74:5a:5d:aa:b1:f4:a6:f6:8d:e2:7c:b5:
34:dc:b9:4f:48:2b:66:f1:22:2b:78:bf:f8:78:22:
4c:d8:50:16:82:ba:9e:79:43:12:d1:bd:6f:f0:ef:
58:d3:fd:b5:47:39:c0:3d:26:65:47:b6:67:96:49:
8a:34:17:36:03:01:44:27:3f:38:68:9b:02:4b:a1:
05:b4:44:96:a3:32:8d:cd:d4:37:0f:28:1d:bb:2e:
7b:57:30:35:94:0c:82:8b:3f:62:93:a5:b5:48:57:
0c:52:14:63:84:3e:28:85:26:4e:d8:59:ec:24:74:
2e:f0:34:39:8d:2e:ae:96:0d:0f:3a:85:7d:92:7b:
3c:79:e3:2f:d0:c7:86:4a:9a:b4:52:35:f7:9a:77:
7a:8c:f1:4a:7b:4b:fb:98:da:e3:55:f0:c8:a6:74:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:83:BB:8D:25:FE:9B:A8:CD:CB:7A:23:26:5A:AD:AE:51:4A:F3
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130372e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:57:ff:e1:68:84:db:c5:c8:6b:e2:6e:0f:1b:f3:bf:64:07:
c8:52:cd:63:46:87:a7:17:28:49:5e:74:a9:12:31:44:55:4b:
d2:04:3e:5c:52:6c:80:4b:da:df:07:88:50:3b:71:e6:2f:0b:
4f:42:6b:ec:27:6f:d4:1d:44:01:7a:3f:41:9f:3f:28:3d:d1:
96:36:33:0d:8b:bf:90:0a:b0:52:2c:2a:73:85:a7:50:68:aa:
05:76:1b:91:08:da:82:96:4b:b5:ab:42:19:93:cf:97:60:d6:
17:fc:2c:d3:c0:66:25:db:a7:11:fc:df:34:7b:e5:b2:01:44:
2a:f6:44:c5:07:17:97:bb:5f:2b:2b:fc:ef:b5:00:90:0a:c7:
44:71:f4:01:11:30:32:87:fc:40:2e:75:bb:f9:79:87:e2:bf:
45:78:6d:ca:a0:a9:2f:be:22:a0:b6:1a:2e:2a:9e:9b:23:f2:
f2:df:d9:75:b5:c7:e4:c2:c9:ac:1f:52:aa:de:85:33:09:a9:
1f:f1:23:d5:7d:76:dc:10:ed:cc:0a:80:2c:ec:e7:5b:db:a0:
e7:f9:6c:73:68:43:9b:ac:19:40:04:fa:53:67:0c:ba:83:e7:
0c:ab:0f:d3:a8:7a:d5:ba:0b:65:8c:02:46:04:b1:46:9f:e2:
92:78:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:02:59 2025 by rpki-client