Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20333935333734.roa
File: 38322e3131382e32372e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier: 5iX7ePuSonesrhsLBZUINAe1fQCJgtLUADaLEdoe97g=
Subject key identifier: 50:DB:C5:9F:D8:51:E0:3C:49:C5:A2:E3:F6:68:D0:52:F0:D0:39:EA
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 733457E1FFD8424C65A28B2B6FD231341C35C63E
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20333935333734.roa
Signing time: Mon 04 Aug 2025 09:52:01 +0000
ROA not before: Mon 04 Aug 2025 09:47:01 +0000
ROA not after: Mon 03 Aug 2026 09:52:01 +0000
asID: 395374
IP address blocks: 82.118.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:34:57:e1:ff:d8:42:4c:65:a2:8b:2b:6f:d2:31:34:1c:35:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 4 09:47:01 2025 GMT
Not After : Aug 3 09:52:01 2026 GMT
Subject: CN=50DBC59FD851E03C49C5A2E3F668D052F0D039EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:34:16:94:aa:f3:c1:fe:a5:72:51:cd:8e:
68:ad:95:3a:f1:a0:ad:15:71:07:d3:d4:57:bf:0c:
06:7d:10:8d:80:b9:b7:91:00:a5:73:ca:11:f7:54:
72:85:fe:97:f0:33:2b:97:ec:76:87:ab:b2:5a:b3:
b7:0e:dc:55:6e:52:3a:c5:f5:83:02:56:48:e6:d2:
53:e8:b5:a9:21:24:a2:62:40:2b:de:4a:34:dd:16:
42:6b:48:24:a9:22:64:1c:0f:07:61:ac:af:3b:5f:
62:39:64:fa:0a:0c:cd:dc:5a:17:23:88:d1:5c:59:
dc:aa:18:c9:d7:87:f8:38:3e:0b:ff:e1:2f:84:59:
20:44:56:1d:d8:21:cd:96:22:37:24:41:72:c5:7e:
2e:45:75:67:94:6a:b7:6a:ea:ef:1e:84:70:b4:bc:
f1:d7:c6:fb:6c:5b:c5:12:e9:3f:4c:5a:65:c3:97:
0f:2c:77:86:9c:2e:62:aa:c9:01:31:c8:e9:43:c9:
25:e9:7b:14:a1:98:33:05:db:dc:4e:3a:67:95:f8:
14:af:eb:cd:86:2e:27:69:95:f4:e3:ef:7a:c5:da:
80:03:b6:8a:f3:87:aa:44:0e:5d:46:58:88:3e:ca:
c4:f3:d0:51:72:b6:36:3a:49:cb:d1:05:b0:ea:a9:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:C5:9F:D8:51:E0:3C:49:C5:A2:E3:F6:68:D0:52:F0:D0:39:EA
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32372e302f32342d3234203d3e20333935333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ba:a3:d9:ee:e6:72:51:88:f1:11:de:5e:6a:9b:c3:d5:ee:
0e:21:6e:3a:41:c6:5d:a3:a5:93:cd:c7:8b:18:af:ac:83:f1:
8f:63:d3:fd:7d:b7:7a:38:f6:48:c0:cd:06:32:d6:10:36:c1:
b9:f9:71:88:22:58:37:04:87:8f:94:7a:4f:e1:90:44:df:52:
6f:5d:5b:9c:69:c9:24:4b:b9:05:b6:e2:25:9b:78:70:cc:ec:
f1:11:fe:b5:40:42:36:db:65:cd:82:d5:60:01:ec:cd:e5:e0:
02:97:8b:b6:cd:c2:4e:eb:a5:3c:11:63:78:45:22:4a:e7:2b:
9f:26:a6:63:32:83:66:99:54:55:63:4c:4a:41:0f:fa:ba:af:
45:77:2c:ec:d2:4b:0f:2f:36:05:d0:8b:87:90:f7:40:5d:05:
5d:df:b3:ab:f5:72:64:94:4c:2a:f4:e0:e3:b0:d3:85:3b:ee:
93:fe:2f:55:d1:08:f6:d1:a7:42:98:c7:f8:f3:f7:bb:a2:d9:
d3:62:64:b0:7a:78:88:e9:c6:c8:c0:ce:39:ea:0e:31:e3:e7:
8e:32:ed:78:b1:88:61:15:f5:fa:88:e2:23:33:9d:70:2a:58:
77:f3:91:9a:3e:2c:83:90:6c:76:d2:1f:3d:88:ce:cf:e3:d7:
6b:ce:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:22 2025 by rpki-client