Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132302e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132302e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: lrN/kJ/gZTGPxblqCSAhGfOhNreQqc8SHG3P9534UIw=
Subject key identifier: 79:62:F3:E3:A9:10:E8:49:F9:7C:89:4B:1D:8B:80:1B:81:F4:39:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FE1FD70001858D9E27C6FC24259D539FAD09418
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132302e302f32342d3234203d3e203330393637.roa
Signing time: Fri 22 Aug 2025 10:47:08 +0000
ROA not before: Fri 22 Aug 2025 10:42:08 +0000
ROA not after: Fri 21 Aug 2026 10:47:08 +0000
asID: 30967
IP address blocks: 109.106.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e1:fd:70:00:18:58:d9:e2:7c:6f:c2:42:59:d5:39:fa:d0:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 10:42:08 2025 GMT
Not After : Aug 21 10:47:08 2026 GMT
Subject: CN=7962F3E3A910E849F97C894B1D8B801B81F43973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:d5:ed:8e:44:e5:da:1c:3f:5c:47:e6:f1:
91:40:52:03:df:c8:d8:ce:09:8b:9f:d9:f8:a7:a9:
82:f9:5c:3c:e8:bc:7a:f4:98:16:18:66:0d:14:22:
39:37:ad:8f:47:de:e1:cd:d1:cf:b1:f9:6b:f0:40:
f3:ba:56:c3:ae:91:64:9f:6b:b6:d8:6e:f7:3a:bb:
d3:f0:09:b7:3d:bf:cf:e3:7b:01:4b:ea:8f:09:c3:
98:bd:99:ab:c8:e6:da:e1:0d:02:29:b3:03:de:d7:
70:f2:19:24:db:86:70:5c:97:18:71:36:6f:c5:38:
84:e9:cf:05:d2:1c:b6:01:f6:b8:73:ab:9f:dd:92:
2b:d2:66:e1:2b:af:90:4f:a9:02:35:06:f4:d5:62:
39:e6:e2:26:d6:94:40:1f:23:af:c3:5b:92:98:2d:
f5:01:20:07:0e:35:c2:b9:ec:32:c1:01:28:83:18:
02:81:6c:20:02:fa:f3:28:27:01:00:a0:5e:e5:42:
03:cd:7f:10:47:44:a6:44:b3:f7:5c:ad:7b:af:cb:
b8:99:48:57:57:1d:e1:6b:0f:d2:1f:80:45:b5:71:
a5:9e:4c:28:d3:87:95:85:7e:fa:93:7b:d5:7a:9e:
6c:45:66:97:70:71:3b:29:c1:e2:28:23:cc:85:28:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:F3:E3:A9:10:E8:49:F9:7C:89:4B:1D:8B:80:1B:81:F4:39:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132302e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.120.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2f:ba:c4:01:f8:7e:7a:ee:05:80:89:e3:5e:42:b2:c5:b1:
1b:c5:83:3f:89:c7:6a:b1:af:5e:55:5f:72:a0:13:2a:6f:7e:
58:67:8d:03:de:b6:c1:49:59:ca:88:f4:ee:d0:cd:4f:47:50:
54:f4:38:be:45:13:ad:e7:0b:1e:de:d0:b8:76:29:53:98:0b:
7b:9d:c0:5e:86:83:35:cf:f6:e3:84:7b:68:e7:44:eb:02:5e:
a4:15:8c:b5:39:6b:16:03:71:b2:d2:05:3f:23:4d:68:7d:d3:
ad:72:65:4c:7c:ba:7d:6b:cf:ff:0c:bf:28:eb:d2:8f:1f:c3:
f7:4b:da:d4:c7:c6:7a:0d:25:30:da:81:3f:62:26:66:8d:15:
41:f0:0d:c8:13:b6:38:b7:ff:e4:f1:3d:d9:da:ef:cd:79:93:
98:16:75:1b:eb:81:11:19:89:bc:f7:61:34:e3:d4:7f:ed:20:
98:4d:58:f8:fb:65:4a:c9:f8:2c:5f:be:38:b8:81:12:9e:ce:
65:36:34:04:7c:a4:d7:ce:28:b2:70:7e:85:5c:ec:bd:d5:2f:
06:02:cf:94:26:59:32:67:fe:90:b6:16:4e:04:d0:52:cc:c1:
25:33:7f:1f:c6:81:42:d5:98:31:59:c0:31:85:35:3c:cf:22:
4f:43:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:56 2025 by rpki-client