Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
File: 3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: q1QlLxclAhk9JrC5MyN/miRJb4YuL/rZOC/pcmmg5MU=
Subject key identifier: 42:D5:8D:F0:E8:79:E1:B3:09:10:DE:75:AA:E4:0D:01:37:50:43:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73F5BA01B7B3D7E6407029A42357B156B6A66C6E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
Signing time: Thu 11 Sep 2025 10:47:34 +0000
ROA not before: Thu 11 Sep 2025 10:42:34 +0000
ROA not after: Thu 10 Sep 2026 10:47:34 +0000
asID: 40021
IP address blocks: 185.184.188.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f5:ba:01:b7:b3:d7:e6:40:70:29:a4:23:57:b1:56:b6:a6:6c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 11 10:42:34 2025 GMT
Not After : Sep 10 10:47:34 2026 GMT
Subject: CN=42D58DF0E879E1B30910DE75AAE40D01375043C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b3:3d:fc:a2:17:00:94:d8:46:cb:06:28:95:
34:4d:e1:62:07:b5:4c:56:de:64:ed:8f:f9:0b:94:
87:8a:33:bf:52:ec:b3:c8:0e:e5:20:4a:ca:08:e3:
3b:d0:cf:b1:f4:ea:53:eb:f3:b5:f6:8e:00:e2:57:
a7:82:62:e4:4a:1f:b0:1f:46:a6:c6:ad:04:a9:2c:
40:0b:f5:98:2c:0a:53:92:ce:bc:98:7a:1d:68:f0:
1b:eb:58:ec:bd:48:e2:9b:30:a3:ad:37:3c:a8:40:
a3:29:14:d9:1e:91:5f:90:a6:06:c4:a8:3f:6e:5f:
ef:6a:12:f5:53:07:af:eb:09:18:8e:8f:a4:df:13:
fc:ae:6e:86:e1:b7:0b:fc:85:4c:b2:9a:d4:e4:69:
aa:49:dc:87:8f:ea:f1:96:1e:66:d2:c4:e6:e1:87:
bb:3c:33:dd:ba:ca:6e:bb:bd:a8:f2:8a:16:6b:c0:
f4:d6:f5:fd:e6:f3:46:16:0a:16:a8:2f:92:88:ad:
b2:78:89:e9:db:fa:04:c0:bf:49:d3:4c:26:2b:ec:
2a:ba:ce:e5:2e:fc:df:cc:29:88:02:64:7e:1d:37:
01:5a:96:d3:e3:b7:f9:41:84:9c:7b:38:50:3f:0d:
3e:2c:27:76:9e:bd:b3:64:53:0c:c4:fb:08:ce:79:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D5:8D:F0:E8:79:E1:B3:09:10:DE:75:AA:E4:0D:01:37:50:43:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:76:fc:00:7c:e1:72:fa:58:7c:40:53:b8:68:8d:e7:3f:c8:
13:57:4c:35:62:31:34:e9:d7:8a:f0:a8:94:8f:1b:93:46:31:
82:be:52:19:d0:37:f7:e6:94:69:d9:72:74:f1:a5:6d:43:48:
31:8d:56:cf:32:02:e2:50:ba:00:c8:6c:45:e2:f9:53:70:23:
fb:84:d2:b1:4f:8f:47:a3:a0:e0:96:7e:84:6b:5c:47:c3:0a:
d7:92:e4:bf:5a:ec:26:c6:a2:49:34:4d:23:72:09:10:25:ea:
b4:45:cb:94:ce:c8:98:aa:19:03:6c:42:8d:fd:fd:06:d9:7d:
bd:78:6e:d0:cc:93:16:89:a1:39:94:24:c7:78:c6:c0:34:e9:
f2:26:68:b2:6f:d3:6c:ff:70:bc:1b:cd:ad:19:28:29:af:de:
65:61:60:e3:03:3a:d7:70:a5:0e:0e:37:52:69:00:0c:c5:23:
3a:cb:fd:8c:22:50:58:f7:36:46:b6:a8:47:55:89:1e:96:71:
aa:57:dd:28:ce:a7:19:7a:bc:11:b6:65:56:f3:8b:bc:fe:ac:
d2:f1:dd:bc:ac:32:21:0f:8f:7b:80:76:99:b0:e0:25:b8:a6:
bc:e2:a1:05:d7:bb:dc:f0:8e:30:f8:a0:fb:cc:64:c5:10:1f:
8d:54:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:34 2025 by rpki-client