Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
File: 3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: Ne4LkmB3T6Y9RegRxfsQ+IX6uwlqTxf5DVMKzDAeH8M=
Subject key identifier: 65:5B:CC:EA:98:D6:8E:BD:9B:1E:10:3D:18:20:AD:24:D9:77:15:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70ED6A93F0D52B417C37BED87BDA2A2FBD72FEDE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
Signing time: Fri 22 Aug 2025 14:47:11 +0000
ROA not before: Fri 22 Aug 2025 14:42:11 +0000
ROA not after: Fri 21 Aug 2026 14:47:11 +0000
asID: 61317
IP address blocks: 185.187.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ed:6a:93:f0:d5:2b:41:7c:37:be:d8:7b:da:2a:2f:bd:72:fe:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:11 2025 GMT
Not After : Aug 21 14:47:11 2026 GMT
Subject: CN=655BCCEA98D68EBD9B1E103D1820AD24D97715A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:05:2e:35:03:ca:03:9b:13:19:44:a7:60:
d1:de:c0:37:c8:a4:34:fd:ae:77:70:14:f5:55:1e:
4b:fa:22:23:dc:ad:4d:b6:08:82:2e:a5:ee:0f:56:
ea:c9:65:96:b2:b8:6a:a5:28:28:10:35:1a:02:2d:
61:b9:3f:45:9c:6a:b0:68:03:c4:ed:b2:9d:26:53:
45:3c:ef:d7:6d:dc:6a:17:6a:d8:e5:9b:80:7f:b4:
d8:81:3a:27:7a:76:0b:8d:ea:6e:80:b9:23:0c:4e:
29:23:a8:39:ca:3f:d8:77:8c:1b:a2:7e:9d:e2:54:
d5:0d:e4:52:f1:48:35:7b:98:47:38:42:7e:aa:f3:
4b:e6:d6:86:31:5e:12:00:43:42:52:eb:e0:b6:90:
c3:64:a8:45:74:f2:24:57:f5:26:e4:50:a4:fc:2d:
79:bd:01:0a:17:2f:8d:32:32:d9:e6:9c:3b:5e:e5:
22:24:6a:6b:0c:31:84:bc:b7:a3:00:9d:d7:8f:82:
85:31:bc:ed:9d:f3:aa:ec:36:9c:12:b0:2f:09:d5:
a4:95:2a:cd:c2:6b:e7:59:31:b5:ff:1c:ac:ce:d1:
6e:2f:ee:29:7c:35:aa:9a:aa:e9:21:8a:ac:2e:47:
70:0d:df:82:36:40:c7:bd:08:1d:e5:71:23:27:cc:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5B:CC:EA:98:D6:8E:BD:9B:1E:10:3D:18:20:AD:24:D9:77:15:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:a3:1a:4a:3a:83:0c:d9:bc:41:11:b1:4f:d0:55:c9:db:7c:
7c:e1:65:33:77:a8:ef:b2:59:b1:24:ce:85:3a:cb:03:52:93:
7d:62:0a:6b:c4:ac:b0:39:e8:39:47:9e:a7:44:fb:61:9d:f3:
a8:64:9b:db:b5:e2:c8:c8:68:a8:cd:d5:20:79:1e:8b:b0:fc:
21:17:3c:79:03:70:9b:ea:a9:fc:ca:d9:77:70:47:e1:2a:e9:
75:e1:11:66:0b:74:1f:d2:5d:a0:c0:00:14:8a:4b:21:0b:10:
30:ed:8b:60:24:d8:f4:67:3a:1c:15:34:c3:29:96:23:0f:71:
82:16:4c:d8:a1:38:d0:cd:bb:2e:56:01:74:94:43:8d:89:bc:
7c:5e:2e:35:f9:d4:a4:b0:50:26:8d:04:12:1d:9f:2d:ca:a9:
7d:bd:b8:f0:44:b1:f8:97:a4:dd:91:ea:49:ec:53:22:a8:96:
89:3f:42:d3:81:b7:95:12:67:10:9d:9e:5d:a0:fc:f1:5d:e3:
c5:20:45:f2:a1:91:88:0e:e3:39:f4:84:93:8f:13:9c:52:85:
5b:2d:e1:37:6f:4d:b3:b9:74:a3:19:d7:19:cf:3d:0c:da:40:
08:70:de:ef:33:a3:c7:96:20:9c:57:11:67:a2:be:81:9f:8c:
f0:2a:7e:4d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUcO1qk/DVK0F8N77Ye9oqL71y/t4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTFaFw0yNjA4MjExNDQ3MTFaMDMxMTAvBgNV
BAMTKDY1NUJDQ0VBOThENjhFQkQ5QjFFMTAzRDE4MjBBRDI0RDk3NzE1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1gUuNQPKA5sTGUSnYNHewDfI
pDT9rndwFPVVHkv6IiPcrU22CIIupe4PVurJZZayuGqlKCgQNRoCLWG5P0WcarBo
A8Ttsp0mU0U879dt3GoXatjlm4B/tNiBOid6dguN6m6AuSMMTikjqDnKP9h3jBui
fp3iVNUN5FLxSDV7mEc4Qn6q80vm1oYxXhIAQ0JS6+C2kMNkqEV08iRX9SbkUKT8
LXm9AQoXL40yMtnmnDte5SIkamsMMYS8t6MAndePgoUxvO2d86rsNpwSsC8J1aSV
Ks3Ca+dZMbX/HKzO0W4v7il8NaqaqukhiqwuR3AN34I2QMe9CB3lcSMnzI5lAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUZVvM6pjWjr2bHhA9GCCtJNl3FaIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzMzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5u+gwDQYJKoZIhvcNAQELBQADggEBAA+jGko6gwzZvEERsU/QVcnbfHzhZTN3
qO+yWbEkzoU6ywNSk31iCmvErLA56DlHnqdE+2Gd86hkm9u14sjIaKjN1SB5Houw
/CEXPHkDcJvqqfzK2XdwR+Eq6XXhEWYLdB/SXaDAABSKSyELEDDti2Ak2PRnOhwV
NMMpliMPcYIWTNihONDNuy5WAXSUQ42JvHxeLjX51KSwUCaNBBIdny3KqX29uPBE
sfiXpN2R6knsUyKolok/QtOBt5USZxCdnl2g/PFd48UgRfKhkYgO4zn0hJOPE5xS
hVst4TdvTbO5dKMZ1xnPPQzaQAhw3u8zo8eWIJxXEWeivoGfjPAqfk0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:25 2025 by rpki-client