Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa (raw, json)
Hash identifier: 5ya/eaOfLhmWcJsaKaGXZlSrNd4cfk+3gQWNxTQygzM=
Subject key identifier: 9D:41:3E:9E:7B:FC:92:5A:8A:99:6B:72:51:77:75:BF:1B:39:70:88
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 471C5F9B585E865E9314957D0A0D6AE7383D6CF2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa
Signing time: Fri 22 Aug 2025 14:47:13 +0000
ROA not before: Fri 22 Aug 2025 14:42:13 +0000
ROA not after: Fri 21 Aug 2026 14:47:13 +0000
asID: 212053
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:1c:5f:9b:58:5e:86:5e:93:14:95:7d:0a:0d:6a:e7:38:3d:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:13 2025 GMT
Not After : Aug 21 14:47:13 2026 GMT
Subject: CN=9D413E9E7BFC925A8A996B72517775BF1B397088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:6b:f6:a8:d0:78:95:df:58:c0:51:d4:10:
6a:03:83:7c:8c:f0:09:5a:01:70:d4:b5:21:76:a4:
3e:17:8c:52:43:21:35:c9:de:a7:3e:96:d6:b0:4a:
b2:97:29:0d:6a:d1:e2:34:7d:0a:ae:fe:6c:50:e3:
c8:ea:5d:7d:b5:a0:34:2a:34:eb:b3:28:77:b9:81:
d0:8a:82:db:f0:f3:d1:5a:ef:1f:20:1e:a5:9b:0c:
e3:69:68:04:e7:83:71:c6:45:7c:20:e3:de:13:6c:
44:98:9a:50:75:0c:c9:9b:71:5a:c2:cd:23:c4:a1:
fd:c6:eb:c6:c2:73:0f:5c:ee:8c:c0:5b:40:e2:d6:
9b:89:15:9a:34:4a:1b:80:e5:1c:89:e6:ce:05:be:
b4:b7:34:93:11:cb:39:aa:09:cc:2c:5d:4e:3c:98:
6d:84:f1:ea:31:07:f5:ad:d3:c5:7d:f8:20:19:79:
09:21:4d:6c:87:69:c6:81:84:16:09:bc:dd:6d:13:
f1:24:6e:fa:c9:d4:03:eb:ef:b7:af:84:bf:33:0d:
7d:0a:ea:44:3c:c6:26:5f:4e:67:c7:b1:d6:3e:97:
05:1f:b8:de:26:3a:a8:cb:18:37:9c:e5:85:ca:6e:
c0:07:b6:b6:5a:1f:bc:bd:e2:72:7f:cf:e9:9e:a3:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:3E:9E:7B:FC:92:5A:8A:99:6B:72:51:77:75:BF:1B:39:70:88
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e20323132303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:04:8c:1c:e9:3c:38:29:75:c1:f9:5f:3a:32:bd:e1:1f:76:
c8:76:f5:f1:60:79:7e:8e:d3:ad:0a:08:a1:91:82:e6:a5:6f:
81:33:f8:e0:53:06:9f:aa:ac:ce:cd:fc:5a:a5:5f:0c:b1:0a:
38:6f:a3:2e:d3:76:7e:f3:4f:54:0d:16:a2:98:0f:94:64:0c:
00:5e:03:f0:44:6d:c3:7e:24:09:91:55:1b:c9:f0:ba:ea:9f:
31:0c:c6:c4:be:85:cd:1b:a3:00:08:1a:1e:50:56:77:dc:93:
62:f9:c9:a6:a8:05:65:a6:c2:48:30:45:fb:1f:67:28:24:a9:
c6:67:97:70:fe:f1:3a:ef:23:a5:02:bf:3c:18:66:6b:1a:bf:
84:51:97:c7:dc:fe:b8:b3:db:ce:7b:37:8d:a9:ab:8a:85:f6:
85:5b:7c:d7:d9:c8:a8:1d:d2:e3:58:58:98:a0:b0:45:c1:1c:
5c:90:a2:af:c7:6e:2d:a0:9b:de:35:08:bc:5e:b5:ac:b8:c4:
77:e9:69:af:9c:0d:0a:b6:85:60:12:82:47:5e:9e:74:4a:57:
87:94:1e:78:4d:eb:4b:6e:8d:ea:5a:00:d2:a4:d2:0f:47:61:
0b:40:1f:35:94:63:a8:c9:87:22:65:d3:14:2d:6d:da:38:a3:
af:0c:2c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:21:57 2025 by rpki-client