Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e37302e302f32342d3234203d3e203633343733.roa
File: 3137362e3132362e37302e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: gimrgH0QWGsL4h7kNxu7IB5k+s6Yr6GpsDSw3LagpOQ=
Subject key identifier: DA:9A:BA:3D:CE:74:B1:AC:5E:00:A3:B8:0F:FA:EB:E1:25:5F:96:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 782460012E41E2853F66E78215925CE6CF5728EB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e37302e302f32342d3234203d3e203633343733.roa
Signing time: Sun 22 Jun 2025 08:46:42 +0000
ROA not before: Sun 22 Jun 2025 08:41:42 +0000
ROA not after: Sun 21 Jun 2026 08:46:42 +0000
asID: 63473
IP address blocks: 176.126.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:24:60:01:2e:41:e2:85:3f:66:e7:82:15:92:5c:e6:cf:57:28:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 22 08:41:42 2025 GMT
Not After : Jun 21 08:46:42 2026 GMT
Subject: CN=DA9ABA3DCE74B1AC5E00A3B80FFAEBE1255F9646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:8b:eb:37:e5:46:fd:09:27:06:b1:3d:6c:
22:31:31:cc:8e:0c:fd:9d:ba:de:f5:28:96:bf:84:
ce:9a:ae:5d:1e:c9:c1:25:e5:ff:82:c8:71:60:70:
0b:87:14:fa:3c:b7:5e:20:37:0e:39:44:06:82:36:
90:c0:b8:7f:85:0e:79:32:0e:c9:47:7f:aa:f9:c4:
26:48:a6:35:89:85:67:17:e2:04:9a:3e:5d:40:de:
62:ae:0d:c9:a4:60:bc:a3:ae:be:17:a6:43:99:4c:
01:9e:b5:8e:83:4b:e9:ae:88:85:65:2a:cd:a8:fc:
ac:5d:a6:b0:b3:82:54:7e:6d:35:63:0d:9a:f4:42:
b5:75:ef:b9:6f:5f:1e:ee:a4:ce:22:d7:ca:bb:0b:
98:a5:20:f1:90:b5:27:45:51:3c:0a:93:6c:b1:bc:
82:26:63:96:d4:fb:b4:2c:16:9d:93:9f:d2:dc:43:
66:7a:9f:7b:a9:ab:d8:e3:83:88:86:9f:6e:da:ae:
43:cb:0e:b0:f9:c9:80:54:6d:44:ea:5b:7d:ca:04:
49:08:b8:54:34:1d:39:bb:f4:6c:bf:10:e5:7c:d0:
50:ad:94:36:d4:2c:31:4d:a8:be:81:2c:ea:ee:2d:
fc:1e:a8:c3:e0:35:50:2a:ea:24:a8:9d:0b:02:f4:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9A:BA:3D:CE:74:B1:AC:5E:00:A3:B8:0F:FA:EB:E1:25:5F:96:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e37302e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.70.0/24
Signature Algorithm: sha256WithRSAEncryption
27:69:fd:50:56:2b:47:a6:ba:e0:a0:7a:8c:15:cf:da:23:11:
2b:3b:d9:99:66:24:02:df:bd:91:4e:f1:56:c1:ff:e4:7d:3a:
8f:17:bf:00:f8:3b:16:c5:fe:f1:5b:f4:31:75:9a:18:c2:3b:
99:aa:bc:23:30:50:ee:bb:9f:8f:7a:99:89:ba:df:c8:0e:40:
31:a6:21:8e:60:7c:83:75:28:80:bc:e2:9e:f4:70:e5:de:02:
0c:d8:e5:eb:ea:7f:67:4d:06:f5:08:df:de:76:29:32:1d:92:
eb:62:1b:7d:a2:51:45:20:e7:82:e3:23:04:35:7b:74:2e:18:
93:73:ab:7e:30:6f:be:98:78:76:a3:42:c4:1d:df:d8:44:7b:
d4:3c:25:e1:72:58:a5:e1:39:2c:5c:0b:f2:88:1d:eb:3c:3b:
2b:2b:46:ff:e5:5c:e3:24:cc:9d:29:a4:4e:3e:0c:83:97:de:
74:62:6c:6d:68:26:72:c3:c8:a3:85:98:fd:40:43:fc:33:58:
82:de:d1:14:dc:98:f0:2a:45:a4:14:51:50:f2:c1:f1:22:de:
69:72:48:98:8b:ab:96:08:c9:97:4a:3d:85:63:c2:bb:2a:20:
0f:9d:40:76:78:c8:53:e8:8e:e6:8c:8b:d3:d7:7f:9f:51:52:
b4:22:81:d8
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUeCRgAS5B4oU/ZueCFZJc5s9XKOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjIwODQxNDJaFw0yNjA2MjEwODQ2NDJaMDMxMTAvBgNV
BAMTKERBOUFCQTNEQ0U3NEIxQUM1RTAwQTNCODBGRkFFQkUxMjU1Rjk2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7IvrN+VG/QknBrE9bCIxMcyO
DP2dut71KJa/hM6arl0eycEl5f+CyHFgcAuHFPo8t14gNw45RAaCNpDAuH+FDnky
DslHf6r5xCZIpjWJhWcX4gSaPl1A3mKuDcmkYLyjrr4XpkOZTAGetY6DS+muiIVl
Ks2o/KxdprCzglR+bTVjDZr0QrV177lvXx7upM4i18q7C5ilIPGQtSdFUTwKk2yx
vIImY5bU+7QsFp2Tn9LcQ2Z6n3upq9jjg4iGn27arkPLDrD5yYBUbUTqW33KBEkI
uFQ0HTm79Gy/EOV80FCtlDbULDFNqL6BLOruLfweqMPgNVAq6iSonQsC9EMRAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU2pq6Pc50saxeAKO4D/rr4SVflkYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzMTMyMzYyZTM3
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sH5GMA0GCSqGSIb3DQEBCwUAA4IBAQAnaf1QVitHprrgoHqMFc/aIxErO9mZZiQC
372RTvFWwf/kfTqPF78A+DsWxf7xW/QxdZoYwjuZqrwjMFDuu5+PepmJut/IDkAx
piGOYHyDdSiAvOKe9HDl3gIM2OXr6n9nTQb1CN/edikyHZLrYht9olFFIOeC4yME
NXt0LhiTc6t+MG++mHh2o0LEHd/YRHvUPCXhclil4TksXAvyiB3rPDsrK0b/5Vzj
JMydKaROPgyDl950YmxtaCZyw8ijhZj9QEP8M1iC3tEU3JjwKkWkFFFQ8sHxIt5p
ckiYi6uWCMmXSj2FY8K7KiAPnUB2eMhT6I7mjIvT13+fUVK0IoHY
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:50 2025 by rpki-client