Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: 1LnjtNWO4AFu9pCH4CmYsFOHKUIy1MM7xTorxxHQjEg=
Subject key identifier: F6:65:45:D6:B6:B2:46:C7:5E:F8:F6:85:7C:56:E3:6B:F1:23:2D:6A
Certificate issuer: /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Certificate serial: 7337DC3B23DAE34628D4C0B7BB14F6663DF6841B
Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
Signing time: Sun 08 Jun 2025 11:50:49 +0000
ROA not before: Sun 08 Jun 2025 11:45:49 +0000
ROA not after: Sun 07 Jun 2026 11:50:49 +0000
asID: 47272
IP address blocks: 2001:67c:d8c::/48 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl
rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:37:dc:3b:23:da:e3:46:28:d4:c0:b7:bb:14:f6:66:3d:f6:84:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Validity
Not Before: Jun 8 11:45:49 2025 GMT
Not After : Jun 7 11:50:49 2026 GMT
Subject: CN=F66545D6B6B246C75EF8F6857C56E36BF1232D6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:77:6a:7e:2f:ae:6e:cd:c7:52:50:0e:8b:
c4:c7:74:1a:f1:61:88:c8:80:af:41:8b:34:75:ed:
11:31:c1:49:b1:e3:cc:5c:28:a8:e2:4d:8b:ad:3f:
41:92:0c:dc:cb:d6:e0:b1:25:c6:ad:28:2c:9c:35:
1e:a3:5d:d6:29:84:96:41:7f:c2:93:5f:6e:b0:80:
be:b1:71:f7:69:73:3c:e4:d3:72:00:c5:18:7e:b4:
33:ee:70:e9:f0:58:29:f2:ff:1e:f9:72:4b:51:99:
47:63:f0:83:9f:ff:14:4b:e6:8c:29:63:41:3c:d1:
8c:6d:3a:5a:32:a7:3c:bb:60:e4:23:f6:2a:7d:f5:
a6:ea:79:a7:dd:e9:c4:0c:ac:b2:4f:c5:a7:a8:1d:
c2:da:ac:af:c3:2f:ca:96:5c:11:bf:a6:cc:31:69:
d0:5b:b6:dc:9a:b5:4c:7a:95:f1:3c:8f:7b:69:88:
1c:6a:1b:35:f2:0b:c5:31:ad:b0:5c:19:70:e0:07:
28:ea:bf:7d:81:9c:39:40:b0:64:8e:79:b1:b2:7a:
39:ed:6f:29:ed:36:86:4a:0d:1c:e2:a7:1b:7b:07:
59:ec:4e:47:6a:1e:b0:2c:9e:2b:dc:d3:05:b8:97:
d1:98:e6:a7:e5:3f:f7:f5:5c:06:a4:2e:b9:04:68:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:45:D6:B6:B2:46:C7:5E:F8:F6:85:7C:56:E3:6B:F1:23:2D:6A
X509v3 Authority Key Identifier:
keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d8c::/48
Signature Algorithm: sha256WithRSAEncryption
33:8b:7d:fb:1d:96:b9:25:9a:e9:8b:f8:d7:68:ad:af:06:03:
86:43:8b:be:c6:bb:b5:d6:47:06:6e:8f:f2:ac:0b:ce:8e:bb:
05:2e:b6:6a:59:b5:55:24:de:e1:b0:1a:23:db:eb:80:75:67:
ba:27:52:5e:bc:25:7d:8c:1f:8a:ee:0a:e6:2f:04:16:be:c9:
57:8b:74:46:2c:94:db:72:f1:b9:4a:1e:df:02:09:7d:80:2a:
c9:7f:45:c7:d6:50:bf:5c:2c:69:d4:8e:df:60:d6:ad:1c:42:
11:35:89:be:52:ee:58:64:4a:e8:f0:e1:bd:5d:cc:68:6e:9f:
fa:be:17:41:3c:b0:8a:19:9a:43:e0:9a:80:9e:b7:8f:46:c0:
76:00:4a:c8:e2:2a:49:19:91:c5:c1:3e:a2:cf:f9:75:8e:52:
97:2a:9e:a1:ef:eb:06:60:74:d1:56:b7:b4:05:14:b1:2c:56:
99:31:c0:ea:15:5b:38:ee:9e:13:d5:7c:f6:ba:73:a7:07:f8:
3a:49:14:6b:d2:3b:1c:6c:0b:2e:3f:81:bb:1c:15:4d:4c:4d:
39:75:a0:03:88:9a:30:f9:d8:7b:e3:76:e0:0b:8a:50:41:34:
ce:b5:f7:af:42:dd:87:29:55:2e:83:4d:c2:30:87:f9:36:97:
8c:1e:6e:72
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUczfcOyPa40Yo1MC3uxT2Zj32hBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVkMmU0YmRmNGJlZmM4MmFjOTM4ZWNjMzQ2ZjBiMzIx
NjU5NzUyMzAeFw0yNTA2MDgxMTQ1NDlaFw0yNjA2MDcxMTUwNDlaMDMxMTAvBgNV
BAMTKEY2NjU0NUQ2QjZCMjQ2Qzc1RUY4RjY4NTdDNTZFMzZCRjEyMzJENkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUHdqfi+ubs3HUlAOi8THdBrx
YYjIgK9BizR17RExwUmx48xcKKjiTYutP0GSDNzL1uCxJcatKCycNR6jXdYphJZB
f8KTX26wgL6xcfdpczzk03IAxRh+tDPucOnwWCny/x75cktRmUdj8IOf/xRL5owp
Y0E80YxtOloypzy7YOQj9ip99abqeafd6cQMrLJPxaeoHcLarK/DL8qWXBG/pswx
adBbttyatUx6lfE8j3tpiBxqGzXyC8UxrbBcGXDgByjqv32BnDlAsGSOebGyejnt
byntNoZKDRzipxt7B1nsTkdqHrAsnivc0wW4l9GY5qflP/f1XAakLrkEaLJBAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQU9mVF1rayRsde+PaFfFbja/EjLWowHwYDVR0j
BBgwFoAUddLkvfS+/IKsk47MNG8LMhZZdSMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzAvNzVEMkU0QkRGNEJFRkM4MkFDOTM4RUNDMzQ2RjBCMzIxNjU5NzUyMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkTGt2ZlMtX0lLc2s0N01ORzhMTWha
WmRTTS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzAvMzIzMDMwMzEzYTM2Mzc2MzNh
NjQzODYzM2EzYTJmMzQzODJkMzEzMjM4MjAzZDNlMjAzNDM3MzIzNzMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAEGfA2MMA0GCSqGSIb3DQEBCwUAA4IBAQAzi337HZa5JZrpi/jXaK2v
BgOGQ4u+xru11kcGbo/yrAvOjrsFLrZqWbVVJN7hsBoj2+uAdWe6J1JevCV9jB+K
7grmLwQWvslXi3RGLJTbcvG5Sh7fAgl9gCrJf0XH1lC/XCxp1I7fYNatHEIRNYm+
Uu5YZEro8OG9Xcxobp/6vhdBPLCKGZpD4JqAnrePRsB2AErI4ipJGZHFwT6iz/l1
jlKXKp6h7+sGYHTRVre0BRSxLFaZMcDqFVs47p4T1Xz2unOnB/g6SRRr0jscbAsu
P4G7HBVNTE05daADiJow+dh743bgC4pQQTTOtfevQt2HKVUug03CMIf5NpeMHm5y
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:45 2025 by rpki-client