Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
File: 3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 7r+YQyaFZ/MZV5YP27Lae62vtk6sNROqYSfg93u3IRg=
Subject key identifier: EC:1B:DE:0E:4F:8E:CD:76:EA:9E:BE:D6:36:1C:0F:41:1E:D1:E9:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C35BDDA0EAB70B11F10C2DDD0F41423AD4C32E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 22 Aug 2025 14:47:21 +0000
ROA not before: Fri 22 Aug 2025 14:42:21 +0000
ROA not after: Fri 21 Aug 2026 14:47:21 +0000
asID: 204170
IP address blocks: 185.182.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:35:bd:da:0e:ab:70:b1:1f:10:c2:dd:d0:f4:14:23:ad:4c:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:21 2025 GMT
Not After : Aug 21 14:47:21 2026 GMT
Subject: CN=EC1BDE0E4F8ECD76EA9EBED6361C0F411ED1E940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:f5:9b:3b:1a:ad:bf:6f:9b:6d:9a:57:bd:
1d:33:5d:f9:79:27:57:72:6e:db:da:19:2c:29:7b:
ab:4d:17:1a:7a:34:b8:7d:1c:13:2e:14:1f:75:73:
b6:f3:cf:94:f0:0f:f6:31:b9:23:3a:1c:cf:70:e5:
b7:a3:21:05:e9:85:f2:78:b6:97:06:00:00:81:22:
58:e9:5d:cc:0d:70:aa:ef:be:37:f0:26:52:34:5f:
8e:63:e8:4d:6d:81:eb:42:bf:12:d4:d4:8d:d0:02:
27:5b:8a:2f:8f:70:ff:18:10:06:4f:4d:2a:11:ba:
9f:a4:73:9c:5f:04:24:55:7a:64:f2:65:5f:b0:c6:
b2:15:bb:49:85:b8:7d:e7:a1:17:ea:84:f4:36:9e:
0e:8a:9c:44:bf:2e:ec:fd:7d:e4:38:b4:d4:15:5b:
4a:c4:41:d1:ff:2f:e1:80:a6:f0:f2:58:11:e5:63:
59:80:33:0e:06:75:46:96:ad:80:7b:ad:0a:ca:33:
ee:a2:9e:cc:7a:bf:06:14:a0:4d:12:3a:ac:b0:e7:
5f:c4:81:d2:4d:12:6a:88:8e:59:8f:22:97:9e:67:
c1:3a:06:d5:1e:7e:dc:93:50:f9:48:35:13:06:1a:
f8:40:f4:64:75:00:30:05:f8:76:c9:b1:f2:30:44:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:DE:0E:4F:8E:CD:76:EA:9E:BE:D6:36:1C:0F:41:1E:D1:E9:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31302e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.10.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c0:71:6a:45:06:8a:80:f0:4b:22:53:80:83:f2:88:79:0c:
60:c5:5b:24:73:8f:80:2d:43:2a:15:4f:d0:92:90:c7:30:96:
c3:9c:09:26:1d:f5:3b:d8:97:d8:53:7d:73:15:11:67:29:78:
11:7f:dc:b6:5a:e4:17:42:71:8a:bd:b5:f9:5c:f2:7c:12:3a:
e7:7c:d5:b2:7c:e3:9b:04:62:04:92:5e:48:20:cc:a1:5b:33:
9b:79:1e:15:46:1f:cc:09:08:8c:32:79:a0:c6:4b:ae:9d:ff:
71:17:ad:a3:b3:07:be:2f:06:5c:1e:6e:2e:39:0b:63:1d:9c:
a4:ed:30:cf:26:55:94:a2:ae:96:d6:47:95:d9:17:2f:ba:0e:
bc:81:c7:18:cd:c5:2e:b5:b0:7a:05:62:48:0c:c8:18:a9:cd:
32:e4:8f:9f:e4:f1:fe:d9:d2:7a:1e:1c:24:69:ad:a2:94:1a:
f6:73:e4:0e:bc:ba:d7:0e:f2:99:e8:5d:76:ee:f7:b1:d7:d7:
85:01:00:7d:f5:26:43:82:07:25:10:34:eb:89:31:cc:13:d4:
ad:e9:de:f0:f2:43:41:6e:76:a9:0e:f1:12:1b:5e:3f:ae:61:
ba:1d:0b:fa:3a:61:41:f0:93:31:07:08:55:c0:bc:1d:28:33:
7e:3d:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:21:07 2025 by rpki-client