Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
File: 3136372e38382e33322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: GRd0hzM7vNfGoR660IKzYyi1/N7C9Apo3ttrHoSnfX4=
Subject key identifier: 10:AE:FF:9D:4D:F9:69:8D:81:48:B7:46:5D:C8:8F:D4:3E:F8:DE:28
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 76CEF9D844FC7B2CF89EF2BF2573B8721FEE6E1D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
Signing time: Thu 22 May 2025 16:46:25 +0000
ROA not before: Thu 22 May 2025 16:41:25 +0000
ROA not after: Thu 21 May 2026 16:46:25 +0000
asID: 47583
IP address blocks: 167.88.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ce:f9:d8:44:fc:7b:2c:f8:9e:f2:bf:25:73:b8:72:1f:ee:6e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 22 16:41:25 2025 GMT
Not After : May 21 16:46:25 2026 GMT
Subject: CN=10AEFF9D4DF9698D8148B7465DC88FD43EF8DE28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:af:e4:ce:03:90:2b:c2:1a:6f:db:f5:be:
59:41:26:d7:ca:6b:ed:23:0c:5b:18:ee:33:08:81:
41:e1:bd:64:79:e1:9a:19:75:8a:d7:52:69:d5:b6:
6a:48:82:d5:ef:77:9f:a6:29:95:37:7a:10:a1:bb:
06:25:f5:fa:db:2f:58:1c:38:0c:0b:9c:90:15:10:
4b:39:ed:f6:9d:09:47:04:03:d3:5d:f9:37:08:06:
ff:5a:fb:77:b6:9a:85:99:68:09:bf:ba:6a:6f:b1:
09:f1:6a:70:07:af:ba:6a:24:77:fe:94:24:82:e4:
a1:1a:c4:47:92:49:12:bf:a0:ca:26:fd:25:12:52:
68:19:2c:82:cd:02:ac:0a:fe:8f:ca:e0:0a:a0:6f:
c8:70:8a:31:d9:2c:cd:31:96:a6:52:78:c0:77:0f:
cf:4e:2e:37:4e:0b:37:1f:fc:f9:5a:f8:96:72:04:
61:94:0d:56:ef:4d:38:83:09:39:06:e4:f0:fe:84:
b5:58:f8:a4:d1:e6:19:a8:29:c5:2a:92:4f:b1:3c:
af:92:da:11:f3:92:37:dc:20:0c:b6:b1:9c:44:a7:
e8:cd:d9:83:df:b1:8a:d4:8c:f7:4b:b3:fa:58:d9:
b6:95:65:3d:ee:c8:9d:ff:9f:98:16:be:d7:43:8f:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:FF:9D:4D:F9:69:8D:81:48:B7:46:5D:C8:8F:D4:3E:F8:DE:28
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:ab:d1:7c:36:6b:6b:64:af:6f:38:73:28:30:8c:05:08:90:
1d:f1:e0:a1:bc:75:a3:e2:09:d8:3d:40:20:fd:28:40:d5:f2:
2f:33:bd:0c:ee:d6:a1:54:ff:d7:4e:9c:4f:2b:88:61:00:5c:
ab:c4:ed:af:fc:48:10:df:ca:39:c8:93:97:cf:fa:f8:1f:5c:
19:51:e6:39:27:a1:1c:33:76:e6:c7:b5:52:24:6a:65:3c:2e:
3c:93:ec:d7:b6:98:b2:9f:93:e7:37:3b:df:8d:c7:c3:84:09:
c1:d3:c3:a7:c4:ca:86:fe:f7:81:c6:23:3d:67:e6:8f:4a:17:
cf:2e:84:7a:b1:f7:49:1f:c2:1c:40:10:97:aa:15:91:d5:95:
9c:d4:61:48:a6:88:df:e5:c5:02:2c:0f:bd:34:c0:20:dd:60:
90:7a:26:2d:89:5a:de:ed:aa:c4:27:ca:ba:0d:8d:95:47:21:
1f:3e:01:50:7a:c6:2a:09:b1:74:a2:0f:aa:f9:eb:0d:51:3f:
f2:27:82:fc:60:07:6e:87:fd:77:e6:79:92:ea:e2:fb:84:e9:
40:01:10:b1:5c:cc:cc:35:a5:8e:58:eb:25:b7:f3:e9:42:87:
35:97:29:c1:93:43:25:d2:c1:96:b1:27:1c:39:d0:21:e7:2a:
ab:f6:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:28 2025 by rpki-client