Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20313734.roa
File: 3135322e38392e3132352e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: qzZJaWd5Usz33SqZf35iis0JE6vMLqNyA3NwnTrnNsw=
Subject key identifier: E9:78:4F:9B:B1:A3:0B:CE:E6:28:3D:18:03:5F:D9:DA:0F:9F:E9:94
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 7FE9A1D74520E87DC012830A7EBF05A65E7EE9C5
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20313734.roa
Signing time: Fri 24 Oct 2025 09:25:54 +0000
ROA not before: Fri 24 Oct 2025 09:20:54 +0000
ROA not after: Fri 23 Oct 2026 09:25:54 +0000
asID: 174
IP address blocks: 152.89.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e9:a1:d7:45:20:e8:7d:c0:12:83:0a:7e:bf:05:a6:5e:7e:e9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 24 09:20:54 2025 GMT
Not After : Oct 23 09:25:54 2026 GMT
Subject: CN=E9784F9BB1A30BCEE6283D18035FD9DA0F9FE994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:93:61:3b:bc:72:d9:9c:3d:14:46:81:8f:
b9:79:49:9a:c5:27:bf:13:b1:b0:49:e9:28:ec:42:
1c:da:ac:e3:69:1a:a5:10:5f:7f:83:fa:1f:28:59:
3e:43:06:d0:a4:f2:d9:3d:c6:fe:00:93:28:61:45:
84:da:82:47:74:78:7e:b6:36:53:6b:77:b3:30:12:
49:74:19:e1:5f:67:34:8c:08:80:2f:93:38:5a:ef:
11:08:19:a7:e9:53:99:22:c1:b8:83:d7:00:a9:57:
a0:d0:e5:21:ca:f7:d4:68:45:89:f9:d9:10:fc:32:
64:1e:21:31:40:cb:67:7c:a2:34:e2:95:01:68:e3:
d2:bf:46:e6:65:c7:bf:8f:b9:e0:13:f9:9e:59:7b:
6b:95:6e:4b:27:88:39:fd:49:67:96:e7:e9:44:5f:
ea:14:0d:53:46:64:66:dc:96:a4:43:f1:3c:87:ef:
91:1e:a9:0a:3e:83:70:a9:23:33:5d:c0:53:fc:cb:
18:a9:47:2f:ff:04:fd:8a:b6:19:fc:ff:03:92:5b:
23:c8:50:a2:f0:bb:e7:65:73:cf:65:24:5e:46:cd:
46:c9:07:9b:95:a3:5a:b6:0f:83:a3:e9:59:84:ec:
70:c8:79:c1:0c:43:da:64:26:4a:c4:76:58:25:c7:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:4F:9B:B1:A3:0B:CE:E6:28:3D:18:03:5F:D9:DA:0F:9F:E9:94
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:97:0f:3a:71:07:02:f0:d3:9d:5f:9f:19:65:40:99:02:da:
cf:71:99:fc:d3:a8:77:79:9d:3c:30:19:b0:85:49:01:0d:36:
9e:35:d8:f8:04:4f:06:1b:f7:28:b0:78:8d:86:d4:5b:46:90:
fe:87:1b:ab:0b:5a:fb:ad:f1:6f:b6:53:25:8a:c3:fc:cd:66:
05:e2:a9:42:5e:ff:af:19:03:4c:3e:bb:19:72:bf:6f:67:cd:
3b:d3:74:25:da:5c:b9:d1:e9:ff:08:ae:c1:de:6f:95:41:ce:
ff:fe:d5:3c:03:18:97:cd:2a:7c:e9:70:15:fd:57:5e:ff:44:
75:c6:ed:eb:e9:ee:bb:64:94:6d:f1:24:e7:43:a9:d3:9a:ab:
2f:16:9e:07:35:01:1a:da:c4:fe:87:ba:00:91:c4:e2:08:f3:
f9:df:79:15:33:f8:df:52:fe:26:3a:ff:7b:0f:f3:37:7b:08:
59:b5:be:2c:a3:91:7f:23:ab:b5:24:3f:57:1d:74:ae:4f:4c:
65:b0:c2:88:4f:e0:5b:2f:33:87:c6:92:9c:e0:32:10:72:f0:
1f:29:98:40:ef:bf:50:e7:1e:6f:b1:17:c4:e6:02:1f:20:bb:
42:bd:3c:f2:4b:54:9b:bd:34:8c:2e:fd:a3:c2:2a:12:20:8d:
6d:f7:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:45 2025 by rpki-client