Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203632363130.roa
File: 37382e33312e3234382e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier: nRi8UrNQPr3zWnJqfXkOJxqC0nYariU0AdykOwKWJ5w=
Subject key identifier: F1:CD:AB:3B:60:37:48:32:0D:B4:78:4D:A7:8C:89:2B:84:5E:11:09
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6357A408844E1624D953F50D9E516A4D6D6A3F26
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203632363130.roa
Signing time: Thu 30 Oct 2025 16:55:55 +0000
ROA not before: Thu 30 Oct 2025 16:50:55 +0000
ROA not after: Thu 29 Oct 2026 16:55:55 +0000
asID: 62610
IP address blocks: 78.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:57:a4:08:84:4e:16:24:d9:53:f5:0d:9e:51:6a:4d:6d:6a:3f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Oct 30 16:50:55 2025 GMT
Not After : Oct 29 16:55:55 2026 GMT
Subject: CN=F1CDAB3B603748320DB4784DA78C892B845E1109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:97:d6:ac:65:d2:81:ad:ce:43:24:98:b9:
ef:26:4e:4e:09:fd:a6:85:ae:37:e5:cf:d0:c0:60:
aa:a7:d2:f8:d9:1c:04:6c:53:7a:0d:62:a2:d3:db:
c3:cb:02:f6:87:2e:cd:07:cc:e9:bd:2b:af:5e:18:
d4:bf:ef:72:3c:05:24:0e:ec:0c:86:0e:1b:83:d0:
37:79:b7:af:c9:8a:1a:a4:55:df:f3:fe:cf:2e:3e:
b6:de:9c:66:dc:c4:c0:51:aa:f0:a6:3c:d9:88:32:
82:93:37:d3:9b:ba:7e:b8:23:32:be:19:9b:1e:d9:
33:e9:9f:db:36:4e:f8:6b:71:fb:41:9a:c5:bf:60:
5d:5b:83:34:58:ba:91:05:6a:88:0d:06:3c:cd:4f:
06:c7:60:56:91:e9:3d:0f:6c:21:94:42:78:b3:a1:
da:4c:e1:87:67:44:8b:20:f1:d7:e8:4d:58:0c:8c:
6a:25:86:0f:69:ac:5b:39:86:96:a5:d5:3e:e7:3e:
63:22:a6:0f:23:17:d9:27:21:11:eb:38:4d:e6:b9:
c4:8b:c6:f3:67:21:70:16:98:81:f4:dd:88:d0:50:
73:7c:3c:8d:cf:32:94:9d:07:62:83:30:d5:88:26:
34:e3:c0:4f:cb:1f:0a:3d:4b:ac:da:17:5b:df:b6:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CD:AB:3B:60:37:48:32:0D:B4:78:4D:A7:8C:89:2B:84:5E:11:09
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e203632363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f5:18:37:7e:15:25:21:0a:f1:d6:01:21:21:27:97:7f:a3:
10:c3:24:ea:bc:ef:2a:97:a7:fc:19:cb:da:1c:06:d5:43:b3:
f6:58:7b:32:8a:ed:af:e8:49:c0:96:53:77:6a:dc:00:5a:1a:
24:30:b8:94:a8:ae:73:58:de:37:3b:fd:f2:89:a9:42:40:5a:
4a:7f:3a:2b:ba:da:8a:26:56:ee:4f:6d:d2:ae:78:9a:f4:cf:
fd:49:e7:e3:6f:ce:1c:39:b3:96:6e:96:c8:40:f5:0c:53:02:
be:83:82:69:f6:3c:92:a2:c2:0c:44:01:64:e1:fb:1c:30:5c:
10:88:1c:a6:f8:89:d0:38:e4:c5:00:cf:79:99:28:cf:9e:cf:
dc:b0:71:79:16:f7:7f:79:3b:ea:af:8d:d9:3a:e1:9e:6f:22:
d6:d8:36:48:71:36:d2:f8:d2:74:52:40:96:f8:93:a4:c9:d6:
e0:89:45:41:fe:a9:c9:e4:3a:da:79:16:6f:db:9a:18:ed:91:
ae:c1:17:1f:8a:7d:e9:ea:5e:53:0e:ad:29:49:3f:36:f9:b2:
07:43:b9:a6:75:fd:41:6a:b7:1a:6f:9e:21:13:03:d7:eb:e2:
62:f0:b5:33:22:9d:87:01:7d:dd:47:df:db:64:f4:cb:11:0e:
e7:ce:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:31:53 2025 by rpki-client