Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa
File: 3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: NxOcKO1dv0GPayH9zSgWWsK3Yq2c/oYkb3wYMG9J9bA=
Subject key identifier: 90:25:20:AF:5F:9F:A3:C6:E9:2B:A6:8E:FD:07:2B:65:EA:4B:55:AA
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2F6C022D2D7366B4EFA083E451588DEB0931FD66
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:16 +0000
ROA not before: Thu 15 May 2025 10:41:16 +0000
ROA not after: Thu 14 May 2026 10:46:16 +0000
asID: 47583
IP address blocks: 185.164.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6c:02:2d:2d:73:66:b4:ef:a0:83:e4:51:58:8d:eb:09:31:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 15 10:41:16 2025 GMT
Not After : May 14 10:46:16 2026 GMT
Subject: CN=902520AF5F9FA3C6E92BA68EFD072B65EA4B55AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:ec:6f:f3:c3:0d:5d:8e:dc:c0:b4:08:34:
72:72:73:86:8b:82:da:4a:ca:2f:db:e5:8b:b8:28:
a7:5a:42:7a:8f:34:da:8f:63:ad:c2:53:fa:80:dd:
87:31:37:78:1b:6d:69:79:64:62:8d:8c:69:e8:18:
bc:f1:90:ae:ba:08:b8:f1:b4:ed:04:e5:8d:b6:0a:
60:81:da:ae:04:12:ca:8e:a1:4a:d3:cf:d4:98:28:
6d:48:2e:41:29:9b:c1:8d:3e:68:2c:65:9e:be:41:
af:6a:34:31:c8:7c:97:bc:fd:9b:46:e4:e1:ea:09:
4e:e3:e3:37:62:df:cb:56:34:b9:b5:79:aa:aa:08:
5d:ed:a4:31:b6:30:54:f6:36:31:b2:fe:42:59:be:
74:66:6b:3b:8b:12:3d:91:94:46:19:46:9d:05:b4:
7b:f1:a0:04:d6:f3:1f:cd:78:28:c4:42:d8:98:e2:
c8:92:3d:e2:8b:bc:db:9d:73:b4:25:76:39:1f:de:
e9:b9:24:30:4d:8b:ab:8f:bc:2a:5f:cb:9a:42:f2:
3d:00:67:01:18:a3:cb:a2:91:f7:ff:94:24:14:49:
b0:f6:15:1d:49:e4:b7:3f:f6:b8:e7:7e:67:df:90:
66:3f:2c:b0:3d:dc:69:d1:73:c6:03:04:fd:6d:22:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:20:AF:5F:9F:A3:C6:E9:2B:A6:8E:FD:07:2B:65:EA:4B:55:AA
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3136342e3131302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.110.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:38:a9:7b:18:0b:62:38:40:ab:ec:dc:f0:4c:9c:a6:eb:da:
d2:0e:ff:9f:38:b3:e1:f6:46:01:5f:fd:44:44:40:3e:97:4c:
b4:2a:0e:67:c0:2f:2d:78:43:68:c4:b7:c9:ee:a3:ae:4f:ea:
76:61:8d:a6:b9:d0:24:5f:b5:c9:8b:15:35:d0:4b:87:bc:b9:
a4:04:d1:39:7b:95:ea:59:bf:e5:05:47:ca:e6:d6:e9:5d:db:
9a:19:da:6e:75:07:bc:54:fa:9e:13:be:9f:8c:34:86:a8:38:
65:84:70:a2:cc:a2:46:e8:f7:bb:82:e1:8e:cd:a8:b6:8c:d0:
68:1e:59:5a:92:bc:ae:96:58:c3:fb:1e:3e:1c:a8:20:f7:1a:
6e:80:e1:62:66:d8:49:46:c2:a3:a7:f4:02:a1:fb:dd:ef:fc:
11:02:ce:df:c3:d8:65:23:87:6f:e9:2f:6a:0a:bf:a4:8a:ac:
e3:f7:fd:b5:c3:d9:41:80:41:0d:d6:c3:f6:ff:4e:23:fe:a1:
39:71:9f:2e:62:98:9c:21:63:12:e4:12:8e:98:40:28:6a:a0:
8e:d2:a3:af:43:9b:c4:47:24:be:84:95:0b:32:c9:f7:06:dd:
b3:9f:49:a1:54:04:f3:cd:8a:d0:17:5f:88:9f:8c:2c:7b:87:
16:8a:90:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:30:48 2025 by rpki-client