Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e203539343332.roa
File: 3138352e3136342e35332e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: my4S578E5ZrawCprKnqQ6Bqtjf7/L7HXLAsttH/I3Dc=
Subject key identifier: 5A:35:41:83:BF:8D:81:6D:9B:C3:07:AA:9F:8C:19:9B:1D:72:36:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39B4D832F305A05D2C485818A23857F72F5537CC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e203539343332.roa
Signing time: Fri 20 Jun 2025 10:25:28 +0000
ROA not before: Fri 20 Jun 2025 10:20:28 +0000
ROA not after: Fri 19 Jun 2026 10:25:28 +0000
asID: 59432
IP address blocks: 185.164.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b4:d8:32:f3:05:a0:5d:2c:48:58:18:a2:38:57:f7:2f:55:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 10:20:28 2025 GMT
Not After : Jun 19 10:25:28 2026 GMT
Subject: CN=5A354183BF8D816D9BC307AA9F8C199B1D723650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:2e:10:c3:8e:c1:fb:17:59:25:70:9c:b8:
35:d8:5a:bb:56:2b:93:0d:3a:5c:2b:cc:8e:e0:24:
df:ff:2d:2c:39:c5:7c:10:95:0f:c4:2e:a4:ff:7f:
09:bc:2d:13:d4:0c:68:be:3c:49:8c:5b:de:51:1d:
94:a8:8b:f1:7e:f8:58:d4:55:de:b5:44:16:68:d3:
d0:ef:ab:34:17:ec:d5:6c:96:43:32:c1:95:2f:c1:
01:09:41:55:97:26:62:3d:b8:b8:44:ce:8a:1a:d9:
1b:a3:36:cc:71:63:ca:d2:1c:f7:44:d8:17:19:60:
27:d6:e1:17:c5:e8:0a:9e:5d:3c:9c:2d:ab:80:c2:
ff:19:d3:a4:de:5d:e6:1b:88:87:1c:66:ef:b5:47:
64:9b:f9:b2:06:84:45:3c:b3:f9:12:d7:41:dd:b7:
25:cf:4f:89:c1:bf:01:6c:68:93:34:8c:09:99:af:
fa:65:53:cd:b7:85:13:ab:f5:9e:78:fe:4b:3c:de:
67:22:d8:4c:5c:9f:ac:cf:88:46:78:f7:46:08:6d:
0d:fb:99:65:55:86:8c:25:a8:45:dc:69:a7:dd:58:
5c:b0:08:b3:da:e8:19:3d:50:5b:d4:44:cc:d2:4a:
50:b8:df:93:3d:21:ee:47:cb:7d:86:6f:65:df:7e:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:41:83:BF:8D:81:6D:9B:C3:07:AA:9F:8C:19:9B:1D:72:36:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:17:9e:bf:68:b3:ea:d8:4e:20:80:9c:c6:8a:c3:90:c1:7b:
0a:41:ab:40:1d:05:88:f0:e1:01:37:78:1c:93:41:8b:bd:0d:
87:1e:63:62:49:5a:0a:de:bc:34:d7:5b:d1:85:95:5d:eb:ca:
72:d6:1a:05:3d:58:96:73:7d:09:c8:e8:b3:b2:1b:6b:c7:32:
b0:73:a8:fa:dd:cd:0e:a5:d5:f6:f6:98:a2:59:36:cc:0d:0c:
f5:d5:52:1a:dc:9e:2b:1f:17:30:32:92:ed:58:65:1f:2f:d2:
e1:8a:2a:71:ec:8b:93:85:2e:15:09:75:3a:20:96:e9:4d:42:
91:db:9d:5f:06:88:b4:35:c1:da:cb:e0:00:1b:f2:d0:91:c3:
0c:70:07:97:e3:5c:fb:56:63:cf:65:bd:61:02:00:bf:d5:ed:
9c:75:79:bc:2e:ae:d3:43:76:12:53:c7:a1:37:db:a6:02:67:
01:bb:27:66:1c:de:94:9b:71:12:1a:50:4c:08:13:b4:d2:cf:
b7:3f:de:bf:6b:5a:ac:f3:a2:be:75:d3:83:ab:d8:16:24:45:
40:70:95:58:6b:00:4f:2c:69:6d:c3:e6:c0:3a:39:13:81:03:
fb:5e:0a:dc:60:f2:05:6e:46:37:9c:7c:37:01:89:75:ba:d0:
97:4c:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:42:44 2025 by rpki-client