Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38362e302f32342d3234203d3e203633343733.roa
File: 3137362e3132362e38362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: l2FNnY81Hdg1oqcJ6tGuF0gOLSIREM+P3DUufDuZNxc=
Subject key identifier: 27:4F:AB:CE:B5:B4:CC:0F:D5:A9:8D:0B:E1:67:99:14:18:CA:C2:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F111D89D27BD0AF63497E9F48FAC326E4D3F488
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38362e302f32342d3234203d3e203633343733.roa
Signing time: Sun 22 Jun 2025 08:46:42 +0000
ROA not before: Sun 22 Jun 2025 08:41:42 +0000
ROA not after: Sun 21 Jun 2026 08:46:42 +0000
asID: 63473
IP address blocks: 176.126.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:11:1d:89:d2:7b:d0:af:63:49:7e:9f:48:fa:c3:26:e4:d3:f4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 22 08:41:42 2025 GMT
Not After : Jun 21 08:46:42 2026 GMT
Subject: CN=274FABCEB5B4CC0FD5A98D0BE167991418CAC287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:65:f7:6d:71:77:4d:a8:7c:9c:a4:8b:ab:da:
48:02:f7:7d:29:46:72:8d:df:64:e6:99:6e:3a:ee:
43:30:32:87:1b:a3:e6:09:9c:a8:69:d7:28:88:31:
01:9a:97:71:a9:9e:2f:26:23:a0:2c:26:39:8e:eb:
62:60:e5:36:3f:8d:cd:98:53:9f:4d:69:47:83:22:
80:3d:43:31:ce:4c:22:28:cf:bf:1e:9d:70:11:48:
72:82:46:b6:0d:b9:c8:4d:48:cb:f8:73:d0:40:ae:
01:1c:a5:dd:6b:75:87:86:a5:5e:d1:43:8f:a0:c1:
14:a3:ae:a1:11:a8:27:c1:67:05:f5:a8:1f:02:b1:
f5:6f:f0:bd:5e:b2:0a:06:69:11:e4:99:fe:bc:2a:
6d:b0:46:6a:94:ef:d0:6b:94:77:0f:0e:9a:2d:f2:
46:77:44:1e:bc:60:0e:9d:86:e9:9d:52:d8:ee:af:
d5:29:b4:2c:4b:eb:dc:43:31:3a:67:ba:9f:b1:8c:
dd:db:0a:a5:1a:db:ae:d3:e6:6c:0a:d1:31:30:51:
aa:2f:e7:a5:5b:12:fa:4d:7c:1e:cb:5b:1f:0b:d2:
12:03:dd:58:11:96:7f:8e:a1:6e:5e:8d:9f:27:ec:
ca:65:5a:a2:0b:d5:19:64:bb:b6:bf:0a:5d:2a:0c:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:AB:CE:B5:B4:CC:0F:D5:A9:8D:0B:E1:67:99:14:18:CA:C2:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3132362e38362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.86.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5f:7c:56:13:5f:a8:21:04:46:1d:4d:e8:36:c1:0e:20:d4:
29:8b:31:65:69:e8:1c:1f:d1:f9:0b:e7:67:bf:17:45:a1:9c:
d2:9d:37:13:dc:76:0f:1f:fe:42:a0:be:fe:54:01:c3:af:72:
3d:87:2a:24:50:40:10:7d:f4:71:07:57:43:c8:5a:1c:1a:2e:
07:12:a8:1d:7c:2a:2b:7e:49:81:4c:92:bb:ee:0b:ce:28:f6:
aa:a7:ca:5c:9c:9d:9a:f0:40:e8:b4:24:e6:d1:99:45:2d:29:
b1:8e:47:2f:28:bf:ee:b6:72:87:83:4c:dc:40:5d:6d:e2:d9:
e8:3f:f8:fd:71:ca:1c:c2:47:7e:6e:39:35:e9:88:6b:3b:6b:
28:ea:66:15:d6:8b:97:f3:a7:4a:c5:9d:c4:6d:14:a6:51:ca:
cc:f8:4c:ff:29:84:58:5b:15:44:6c:71:5d:49:b7:8e:fb:61:
5d:80:5e:89:67:b6:2b:d7:63:96:49:ee:12:3d:d2:86:1c:c0:
c5:4d:99:29:a9:a1:06:1d:b4:3b:53:d9:2a:0c:a1:e5:4c:ac:
3a:6a:87:78:3a:1e:6f:cd:13:ee:69:80:ab:70:c2:50:fc:ce:
29:b7:43:2f:d3:16:f6:44:4b:54:e8:a4:d5:5e:67:05:26:74:
a7:e7:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:05 2025 by rpki-client