Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: MHCB3ylStbZvUbLHGSXz0ltbm5yqjVT6WQCGWWE6sjM=
Subject key identifier: 23:08:A8:51:F8:0F:90:2A:EF:76:8E:FC:42:FA:E7:95:4F:E6:A1:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 571F7423897B8ED50948A7F65DA03CAB64DF812E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:42 +0000
ROA not before: Sun 28 Sep 2025 20:42:42 +0000
ROA not after: Sun 27 Sep 2026 20:47:42 +0000
asID: 136787
IP address blocks: 185.177.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1f:74:23:89:7b:8e:d5:09:48:a7:f6:5d:a0:3c:ab:64:df:81:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:42 2025 GMT
Not After : Sep 27 20:47:42 2026 GMT
Subject: CN=2308A851F80F902AEF768EFC42FAE7954FE6A1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:fe:2b:08:e6:fc:1d:ac:5a:bd:ea:d4:54:
ed:5c:ff:ae:7d:79:33:7c:4b:8a:f9:0b:e0:6b:cf:
d1:d7:bd:8b:99:4d:c4:a4:cb:7b:39:2c:a8:45:51:
a0:b9:8d:5a:e6:a4:a8:8a:83:9c:a2:89:b3:e9:8f:
3a:e3:3b:63:62:71:0e:b2:91:a9:c3:37:8a:70:d2:
20:99:18:43:f5:94:be:42:67:b1:47:84:9b:66:51:
f9:43:6b:1c:1a:58:3c:4a:0d:25:0e:0d:c5:d2:43:
37:c8:ec:c2:0d:00:af:14:0b:86:ec:ed:f0:67:9b:
a3:50:7f:69:fe:00:10:ff:50:89:27:cb:38:96:d2:
8f:bf:af:b1:48:7c:de:83:a8:81:a5:2f:6c:0c:b0:
a5:90:86:5f:be:46:87:31:5e:50:ed:00:c6:39:1a:
62:b7:e1:4f:74:bf:20:31:bb:f7:37:36:a4:f6:c1:
97:cc:ae:cd:8f:59:00:4b:2e:5b:8b:0f:df:94:f6:
22:12:ef:6c:e1:2a:cf:13:de:dd:21:5d:87:49:79:
fb:e8:58:4f:dc:8d:74:4f:d4:13:dc:fe:55:f6:43:
8d:a7:45:3c:e7:9e:bc:26:bf:0a:93:83:ad:20:76:
50:ff:14:46:ab:10:14:a6:9f:a7:3f:97:8e:ee:a6:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:A8:51:F8:0F:90:2A:EF:76:8E:FC:42:FA:E7:95:4F:E6:A1:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137372e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
06:be:27:63:41:71:bc:bc:3c:b3:34:59:48:8a:b3:8a:aa:3e:
2f:39:d1:02:a3:f7:88:16:d0:42:75:e0:73:b0:1c:27:34:cc:
d5:6b:eb:de:06:f0:73:b0:c0:d0:07:18:52:bc:d7:39:6f:df:
09:82:e1:96:2a:b6:3f:9e:12:df:b4:12:2f:ac:01:eb:06:11:
b7:38:d9:3f:89:9c:67:d5:db:c7:5b:91:7f:07:dc:10:ae:a8:
c5:fa:e7:c8:c0:6f:cc:a3:03:05:78:6f:ea:7d:af:e2:73:f1:
66:94:12:06:65:1c:d2:66:22:70:4f:c9:ea:bf:7f:70:7d:39:
46:e3:a5:3e:6f:ac:ac:8a:de:a2:f6:50:ba:6c:f3:ae:4e:72:
75:00:f2:5a:ee:ca:31:49:29:6d:5b:2f:db:d5:1c:08:a9:66:
52:ec:1f:64:e7:01:35:c7:b5:07:0b:3f:9b:c9:59:3f:e6:53:
82:47:5f:f4:a1:9b:ba:67:fb:f9:31:5f:18:ee:b0:a5:05:1a:
8c:9e:77:04:5d:82:27:6b:ca:6e:25:c3:5e:08:6e:5d:82:82:
d0:47:a7:a4:ab:6c:ae:f2:a3:a7:36:d1:0a:54:85:8e:62:02:
2b:b6:fd:06:9f:69:44:6f:ee:40:dc:94:06:30:fb:fb:84:cf:
4e:69:2f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:51 2025 by rpki-client