Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
File: 3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: HlMU0GBa98brIijwKy/htJOCkuxFvYPEsvSgTbsjQMw=
Subject key identifier: FD:20:11:4A:5B:94:90:E8:42:CE:9B:65:4C:B9:F1:96:1C:F4:C6:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A8C1FD9142450E93BDC8413FE568157943E2FCE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:15 +0000
ROA not before: Fri 22 Aug 2025 14:42:15 +0000
ROA not after: Fri 21 Aug 2026 14:47:15 +0000
asID: 51167
IP address blocks: 185.182.184.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8c:1f:d9:14:24:50:e9:3b:dc:84:13:fe:56:81:57:94:3e:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:15 2025 GMT
Not After : Aug 21 14:47:15 2026 GMT
Subject: CN=FD20114A5B9490E842CE9B654CB9F1961CF4C62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:da:e5:ac:fd:5a:19:f5:98:38:46:23:c7:7d:
6b:76:06:8e:d3:91:8a:2d:cb:85:b2:12:8e:85:dc:
97:72:a3:2b:07:57:03:44:24:01:61:de:2c:b5:ba:
c5:6e:1b:34:ec:20:7b:81:62:56:1e:09:78:af:5e:
26:8b:28:d8:a0:90:ad:c5:93:1b:48:d4:3c:db:de:
79:c8:3b:18:c8:af:ad:94:a8:9c:73:d9:7d:f7:fb:
75:3c:af:94:c5:ed:fd:ba:c9:04:34:5a:77:3f:17:
19:29:37:b7:35:81:16:c1:9e:a2:7a:69:a5:9b:ae:
42:a2:fd:6e:cd:d1:e9:71:79:67:90:9d:94:de:76:
ad:39:8f:de:ec:c9:65:08:64:ed:65:42:95:d8:c5:
2f:c9:99:d7:75:a5:15:53:fa:69:c2:1e:ff:78:61:
f2:47:f8:49:3c:5d:48:f7:50:32:94:51:15:6a:28:
19:be:ee:60:fe:31:a2:12:12:eb:51:77:73:d5:a8:
10:79:9d:c2:8e:80:87:b2:c1:58:2b:3f:a8:ac:a8:
ea:4d:ef:26:b8:79:8e:55:57:cb:c4:b8:12:30:20:
2f:fe:8e:65:ac:e0:b1:b5:4f:52:90:60:69:13:8d:
3d:34:57:46:3c:b0:46:f7:58:d5:dc:54:42:70:73:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:20:11:4A:5B:94:90:E8:42:CE:9B:65:4C:B9:F1:96:1C:F4:C6:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.184.0/23
Signature Algorithm: sha256WithRSAEncryption
37:f6:e5:c2:9e:a1:a1:9d:95:e6:55:b4:8e:ec:47:44:35:17:
bd:04:79:9e:fe:b1:b3:6b:11:59:b2:f1:2c:9c:03:a4:b4:8f:
e1:87:66:1f:b8:80:33:39:5b:1a:2e:d9:13:cc:dd:46:d8:82:
80:71:02:30:e9:30:c0:41:cb:76:0c:c4:24:38:19:cc:a6:48:
37:5c:ae:16:35:40:70:33:9d:db:04:80:6f:d0:33:8b:b6:d7:
7e:66:46:47:7f:26:08:e8:f0:f6:f9:19:65:2d:45:76:b1:94:
c2:1f:1c:f1:d1:d8:03:f5:e0:c2:72:8f:27:17:63:39:57:af:
4e:46:d7:a8:03:3e:1c:0c:e8:af:99:0e:24:c4:e2:e3:54:c7:
92:16:1b:da:04:49:69:5e:d0:76:97:40:2d:ce:3c:cf:1c:8a:
90:4a:4c:20:12:23:55:0c:b5:ee:7b:82:a2:c1:ab:5c:10:94:
3f:72:b5:ca:59:1f:05:d9:8c:24:c3:ef:82:74:47:43:f2:b3:
10:80:29:ed:9c:77:37:40:50:56:a3:4e:48:dc:b4:86:ea:35:
61:3c:18:ba:b7:4b:34:ac:9e:45:b3:35:e8:5f:fb:da:79:60:
e5:0e:c3:98:26:38:37:53:c3:cf:9e:15:ba:45:ea:48:03:36:
42:3c:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:37 2025 by rpki-client