Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: hw52/PuoWwL4qM4i6rPxjDhf7WwUDrP64EgdmE3A5ss=
Subject key identifier: 42:FB:5D:13:22:EF:D8:AA:EF:4B:98:A8:45:15:3E:6E:CE:11:DA:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 749EA8B608EFC450D8DBCAD43776C4C8E5CB568E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa
Signing time: Fri 22 Aug 2025 10:47:08 +0000
ROA not before: Fri 22 Aug 2025 10:42:08 +0000
ROA not after: Fri 21 Aug 2026 10:47:08 +0000
asID: 30967
IP address blocks: 109.106.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9e:a8:b6:08:ef:c4:50:d8:db:ca:d4:37:76:c4:c8:e5:cb:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 10:42:08 2025 GMT
Not After : Aug 21 10:47:08 2026 GMT
Subject: CN=42FB5D1322EFD8AAEF4B98A845153E6ECE11DAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:d8:97:e8:b2:e0:ed:a2:10:00:d2:fe:75:
ba:1b:49:bf:de:bf:27:ea:2c:54:00:fd:4b:78:5f:
08:b9:5b:6c:2d:0e:02:49:d8:f7:b4:c3:33:ed:98:
0c:a1:f9:8b:55:16:89:2c:93:46:86:20:eb:b8:74:
dc:75:28:be:95:af:04:59:59:23:14:b3:4e:ff:be:
1a:79:30:93:a8:7f:9d:f4:26:23:b6:96:84:59:23:
a9:09:5e:ee:0e:f3:dc:77:8a:23:d8:3b:49:3d:92:
d6:d9:ff:f3:f9:b3:cb:46:4d:c2:a2:3f:57:31:3c:
8b:d6:3f:17:98:59:39:69:93:f2:d8:08:e9:23:ff:
17:78:f0:7a:37:b2:d6:db:b3:f3:76:7d:2d:ef:d1:
59:eb:93:f8:3c:33:f5:fe:fe:df:ee:cb:8e:21:50:
ec:35:a5:5f:ca:5f:76:a0:e4:d1:3a:af:1d:e2:d4:
ab:fa:b4:e4:1d:8f:dc:4f:2f:da:c9:a9:b0:98:8d:
e8:ea:09:34:7c:8b:87:bb:dd:c0:02:d2:54:f1:8a:
7f:6b:54:aa:af:fe:81:36:1e:d3:73:a2:1d:4c:f5:
3d:ad:65:ad:37:69:c7:33:93:c9:99:5a:99:b9:ad:
9f:e3:b7:2d:c0:5e:ca:d0:93:a4:32:c7:db:c7:03:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:5D:13:22:EF:D8:AA:EF:4B:98:A8:45:15:3E:6E:CE:11:DA:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132322e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.122.0/24
Signature Algorithm: sha256WithRSAEncryption
92:22:d5:b0:c8:d9:25:bb:a4:04:b8:9b:ac:a6:c1:2c:94:8b:
54:c3:d8:c5:39:1f:7f:e3:93:66:41:87:2c:03:be:51:0c:65:
4e:10:e8:e3:35:ce:2f:c3:c9:77:64:36:5e:ce:35:23:9f:1a:
3a:c3:d6:64:1a:d4:b0:e0:32:e4:40:30:3d:59:b6:da:b0:cd:
6c:89:aa:00:42:58:08:22:08:8a:e4:7f:c5:46:12:73:60:82:
99:dc:09:51:1f:d9:02:65:0a:23:94:e2:b2:2c:b0:5c:19:83:
77:59:3e:58:6b:84:fa:d5:22:18:11:28:8b:f6:c4:b5:c6:2d:
e7:57:39:ac:e8:25:a1:a3:f6:ce:e8:e1:17:17:e9:8c:e5:85:
e5:ba:f8:4e:d3:c0:cf:35:8c:ca:80:42:50:8e:53:d1:e5:d3:
4c:bf:24:9e:7b:01:6f:2c:c2:14:c5:a7:5a:40:43:76:92:b5:
16:a7:6a:20:e4:c9:c5:66:a6:eb:66:9c:8f:d8:95:61:a3:b6:
f6:98:78:05:e5:96:01:cc:0d:5c:50:e3:5b:6c:0e:1d:ca:6f:
2a:bb:db:cf:c3:2e:4e:05:bb:e3:e3:2a:c0:74:eb:1d:07:d0:
8e:62:5a:ec:00:33:3a:06:59:fc:65:52:45:16:86:f7:52:97:
85:bf:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:22 2025 by rpki-client