Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
File: 3138352e3138322e382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: tl4lX/75PNyYHuEtLIWiYYXt05onBj7XFlQvh2gESjg=
Subject key identifier: 6B:27:81:56:FA:68:8E:C6:1F:E1:53:1E:C1:A3:C0:EE:63:3D:B8:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2BCFBEAB113B6EC5430D3A8F950E2B8C1CD3BBB5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:18 +0000
ROA not before: Fri 22 Aug 2025 14:42:18 +0000
ROA not after: Fri 21 Aug 2026 14:47:18 +0000
asID: 51167
IP address blocks: 185.182.8.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cf:be:ab:11:3b:6e:c5:43:0d:3a:8f:95:0e:2b:8c:1c:d3:bb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:18 2025 GMT
Not After : Aug 21 14:47:18 2026 GMT
Subject: CN=6B278156FA688EC61FE1531EC1A3C0EE633DB827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:51:a9:ec:fe:a7:7d:fb:bb:b7:89:17:90:
54:90:c2:57:49:78:5c:e2:92:45:6e:5c:d5:c5:15:
fd:44:57:86:3d:cf:95:fa:63:8e:81:25:81:a8:ee:
48:c7:ca:2e:d4:de:9a:26:e7:50:c2:da:2a:8b:ac:
c7:21:6a:59:9b:89:b1:e3:20:44:26:14:e1:b5:8c:
1e:2f:84:00:6d:b7:fb:85:6b:7e:16:71:71:3a:31:
3e:53:08:13:aa:84:71:67:6a:77:b7:2f:f9:94:b0:
d8:b2:62:e1:67:ac:5f:08:52:c1:94:a7:81:d0:f7:
e3:82:df:84:11:4a:4b:2b:e7:ce:c3:8d:bd:95:0f:
6e:b1:53:19:9d:b8:be:e6:b3:48:6f:58:10:40:4a:
e5:c6:f2:b2:85:db:ad:da:5e:c5:54:dc:77:cb:16:
ee:df:fd:25:32:a8:84:b2:35:fa:da:1d:07:bf:21:
14:de:5a:7f:51:72:32:7c:f6:9b:39:9f:9a:de:12:
a1:99:46:c1:86:9d:31:57:21:27:da:fc:1f:56:88:
32:d2:ba:7c:ae:7b:75:e1:a7:e1:bc:cc:24:21:e1:
a1:c8:21:e3:90:42:1a:d9:8a:f3:fb:01:7c:92:80:
bd:6d:4f:1e:9a:c1:51:4e:af:2e:01:22:dd:b7:9a:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:27:81:56:FA:68:8E:C6:1F:E1:53:1E:C1:A3:C0:EE:63:3D:B8:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.8.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:23:5f:40:ce:56:f4:f7:b9:f9:b0:0b:1c:37:f4:4f:6f:b4:
71:ef:9f:97:6b:a1:5b:a1:8e:44:54:94:cb:d8:b1:92:6c:65:
8c:ff:81:02:a4:e2:6d:59:6a:7d:c2:e2:a9:8f:0e:41:60:3c:
eb:a0:33:67:52:c3:f0:96:82:20:87:51:18:65:ac:fc:75:6e:
61:46:f5:2d:10:3f:f7:a5:13:7d:b8:95:1d:f8:e9:05:63:7b:
58:42:89:6d:34:f0:76:9e:38:c6:a0:55:88:df:fa:b2:8b:38:
8e:ba:9b:84:46:25:ec:85:61:90:9b:3f:4e:db:2a:de:8d:87:
1a:f3:9a:e7:0b:1a:06:4e:31:f1:09:c4:f7:e9:28:53:66:7f:
d2:1e:87:7b:08:e1:f9:f4:fa:ad:5f:88:73:04:6f:29:a6:f6:
34:9e:df:27:90:a2:5b:38:3c:90:64:83:ba:08:e0:a7:f8:45:
d4:34:70:b5:a1:4e:4c:f4:4e:a0:d0:56:7a:3a:e6:ea:b9:9a:
93:a7:7d:62:f0:1b:fb:2a:35:52:7f:c3:b9:ea:37:39:17:9c:
8f:b8:2c:37:1d:94:bb:30:98:10:3e:eb:00:23:0c:0a:27:be:
17:b7:5f:61:9d:9d:65:f5:88:17:4f:78:8d:d1:20:6c:1e:a1:
63:ec:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:24 2025 by rpki-client