Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
File: 3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: /w83M9QHGMN0KCMkVr5ZZpshsdYxJTa8u9+MLPjaSmc=
Subject key identifier: 92:FA:D6:28:11:AE:2A:90:3B:0B:6A:F2:0F:F2:20:83:BD:99:64:BB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 56F787A4CD141E22E4F0573184367DBB2AB12F19
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:16 +0000
ROA not before: Thu 15 May 2025 10:41:16 +0000
ROA not after: Thu 14 May 2026 10:46:16 +0000
asID: 47583
IP address blocks: 185.173.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f7:87:a4:cd:14:1e:22:e4:f0:57:31:84:36:7d:bb:2a:b1:2f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 15 10:41:16 2025 GMT
Not After : May 14 10:46:16 2026 GMT
Subject: CN=92FAD62811AE2A903B0B6AF20FF22083BD9964BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:4c:3d:72:e8:6f:4b:64:c7:58:ec:9f:76:
86:0f:36:7b:94:6c:8e:7a:19:09:4c:42:82:4a:3a:
4f:81:40:1d:2d:c1:c3:b6:78:23:c8:d9:d7:85:3b:
91:cb:a0:2d:bb:a3:e5:88:8c:b6:eb:63:cb:03:3c:
f9:8a:7a:77:f5:6f:45:90:86:32:23:d4:28:11:85:
b4:cb:08:a0:7d:e6:0a:2e:2c:75:50:1a:ee:a3:ff:
77:c5:63:ef:98:a2:36:fa:20:d5:15:51:3a:0e:aa:
a4:4d:24:1f:16:d2:aa:75:ab:78:2d:70:bb:84:4e:
20:2f:a1:c2:3d:5c:06:f7:cb:1f:2a:6e:fb:44:35:
e6:7e:82:7d:ae:61:f1:21:66:2f:c8:ff:40:cf:e1:
67:ac:78:ac:7b:59:aa:79:e7:7e:3a:05:01:86:e0:
c7:10:08:a8:08:11:a8:15:c1:9d:d8:0e:ab:c3:ac:
a3:82:8a:2e:3c:f2:60:ec:9a:c8:bc:d6:0d:15:fc:
28:e7:7e:f0:dc:c9:a3:41:28:12:7a:1d:04:bf:d8:
6b:bf:96:1f:96:7e:c0:0c:38:28:b5:43:6a:ed:38:
ec:97:5d:ba:b9:3b:1a:b6:88:4e:3d:54:db:bb:25:
b4:61:35:0a:42:14:4f:4e:03:c9:09:af:14:42:43:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FA:D6:28:11:AE:2A:90:3B:0B:6A:F2:0F:F2:20:83:BD:99:64:BB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.110.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:c7:61:d3:96:ab:a9:e0:77:72:9c:11:44:89:f1:57:26:37:
46:36:60:4e:b0:33:c0:e0:10:88:37:9f:4a:bd:49:02:19:a4:
9d:fa:dd:88:45:73:05:91:7f:dd:15:27:15:eb:e5:ee:f0:8e:
8a:c2:aa:d6:4e:38:aa:97:54:43:db:93:ca:00:59:92:94:ac:
9c:14:b8:52:2d:5f:a7:86:76:a0:bd:96:e8:cd:8b:c3:af:e3:
39:db:c9:a8:3d:07:0c:9c:86:f7:90:06:d7:3b:f0:7a:8d:d9:
64:c5:b8:c7:fb:27:a4:20:ee:56:28:41:01:ea:87:97:a7:94:
8c:c9:94:67:c7:9d:c0:ce:15:7a:97:7f:c5:47:e1:60:84:a3:
57:d5:41:c8:76:a3:e7:4b:95:3a:d8:ee:ad:48:9f:41:f3:a1:
70:a1:15:40:b2:06:f0:18:44:f0:09:fd:55:90:70:3b:28:a5:
a7:f6:a3:74:e7:35:8c:bc:b4:23:8e:6d:98:ba:9b:15:ab:49:
08:c0:e1:9f:3d:d9:cc:52:62:6e:31:78:76:e6:b2:f5:18:ea:
0b:1b:09:08:74:c0:1c:64:99:a8:18:a3:f3:4d:93:3f:ad:8d:
51:f6:59:14:75:a2:58:2b:94:ef:02:9d:cd:78:bc:41:da:78:
37:18:5d:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:43 2025 by rpki-client