Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
File: 3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier: UkjFStEdIZ7BHtBXUbTe+SS7bI3g02JOwB3BdtqUTAM=
Subject key identifier: 57:A6:CB:A7:1F:8D:FC:44:CB:FD:37:BA:17:D6:11:2C:F1:69:47:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FB5B2A51356145CDF8A5218A171173F07456A53
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
Signing time: Fri 22 Aug 2025 14:47:14 +0000
ROA not before: Fri 22 Aug 2025 14:42:14 +0000
ROA not after: Fri 21 Aug 2026 14:47:14 +0000
asID: 3356
IP address blocks: 185.187.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b5:b2:a5:13:56:14:5c:df:8a:52:18:a1:71:17:3f:07:45:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:14 2025 GMT
Not After : Aug 21 14:47:14 2026 GMT
Subject: CN=57A6CBA71F8DFC44CBFD37BA17D6112CF169470F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:54:c5:f7:10:78:59:4a:84:49:95:e8:27:
21:b5:db:2c:7e:c6:b7:54:20:0d:52:15:3c:ad:b3:
9a:3a:fb:d7:fb:54:8a:10:ff:b4:f0:6f:d7:91:92:
2d:cf:f5:de:06:2a:85:8a:48:b4:7a:65:76:54:39:
cc:22:cc:9f:f1:16:13:88:19:22:45:f8:9e:21:4f:
f2:f5:a3:d0:c0:db:a5:c9:bb:e7:85:d0:e1:bf:3a:
91:d3:c4:51:0f:f8:af:8a:d4:0d:db:56:ae:a7:9a:
be:b3:1a:de:4e:72:7a:42:03:cd:fe:e6:f0:18:84:
4a:8b:df:21:fe:d1:c9:64:a0:58:b6:92:27:74:3f:
6b:8c:99:4c:2a:1f:81:e3:ce:d5:8b:b7:5d:14:a2:
c0:64:67:79:4d:53:e8:42:08:d4:a4:cd:12:74:88:
11:a1:c0:15:10:0a:1a:69:47:d7:e8:3e:f8:c5:2e:
37:a2:e7:10:18:e6:9d:ce:fb:2d:35:4b:5a:b5:3f:
d5:e2:49:e0:29:ad:90:9a:59:f2:4d:f8:5e:b8:aa:
11:82:99:21:13:9b:18:e1:bb:12:c9:ef:ff:e0:fe:
c9:91:c6:da:f7:dc:ce:5f:8a:85:c2:ac:20:76:c3:
90:1c:d3:3b:9b:15:1f:12:15:75:b3:67:09:a4:2b:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:CB:A7:1F:8D:FC:44:CB:FD:37:BA:17:D6:11:2C:F1:69:47:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233342e302f32342d3234203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.234.0/24
Signature Algorithm: sha256WithRSAEncryption
89:41:f8:93:30:4f:ff:c5:9c:6f:bf:f1:b1:d8:d8:f8:e5:10:
34:56:34:57:d4:83:5c:1f:5c:aa:51:48:1e:7f:72:cc:28:86:
64:38:40:d6:d0:6a:3c:7b:31:4b:ae:ba:13:6c:a7:81:23:83:
46:c5:81:ec:57:2a:bf:7f:64:8d:fc:64:45:4f:5c:3f:97:db:
ef:ce:bf:c3:3a:ae:d9:12:d4:35:5f:30:8b:98:38:b9:ff:1e:
6c:bb:a3:1a:04:61:4d:f6:05:c5:20:28:ce:fd:71:81:23:bf:
94:4a:6d:58:23:3d:01:9d:b4:52:0f:3b:1e:52:cf:e7:25:8c:
b5:9d:fc:87:33:19:f8:0e:f3:83:5e:7b:81:26:6e:8d:3e:ea:
7e:38:42:6b:2f:26:b2:13:72:a9:9d:47:7f:e9:1d:97:16:7e:
d2:18:e6:d0:37:0c:83:5e:c7:a0:88:9a:ef:23:60:00:4a:51:
3a:49:36:8d:7f:fb:ad:ed:13:46:68:85:4e:9d:d5:51:d0:38:
37:b1:5a:86:07:3f:18:63:37:07:b5:cc:ad:a0:28:4d:a0:22:
cc:89:52:2f:21:2b:48:28:f7:da:8c:ad:5a:d3:93:4b:41:ff:
1e:dc:51:6e:c3:d0:01:d5:eb:04:97:ba:78:53:74:a5:0e:25:
b4:c9:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:59 2025 by rpki-client