Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234302e302f32332d3234203d3e203437353833.roa
File: 3138352e3138372e3234302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: edG1Z5/zIRCSEGwgDtguVTzH7R0v9gOAnu9Q7jyEcFg=
Subject key identifier: 7E:1E:F6:7C:41:E4:5A:A1:D6:AC:58:37:AB:2B:65:D0:9A:27:D3:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D07F476076D49816E60A16A0D42357D3FFC01A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234302e302f32332d3234203d3e203437353833.roa
Signing time: Fri 22 Aug 2025 14:47:18 +0000
ROA not before: Fri 22 Aug 2025 14:42:18 +0000
ROA not after: Fri 21 Aug 2026 14:47:18 +0000
asID: 47583
IP address blocks: 185.187.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:07:f4:76:07:6d:49:81:6e:60:a1:6a:0d:42:35:7d:3f:fc:01:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:18 2025 GMT
Not After : Aug 21 14:47:18 2026 GMT
Subject: CN=7E1EF67C41E45AA1D6AC5837AB2B65D09A27D376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:59:6b:4e:f8:1a:ee:71:30:97:50:03:b1:
a4:84:57:c9:42:a3:91:83:b5:d4:e4:38:96:dd:a0:
bf:ff:da:1c:40:1c:2b:9d:fc:70:92:8a:59:fc:6e:
06:2c:a6:f6:5c:ab:15:0e:d9:fa:91:2a:03:9a:ac:
d7:30:57:0a:29:56:d4:81:fa:0d:b8:dc:22:46:10:
f4:ec:a4:6e:7d:c6:09:a5:6c:99:67:99:10:1e:a7:
cd:58:6c:cf:e6:db:59:cf:50:d9:79:9b:91:91:f2:
c3:ad:7c:84:eb:fe:82:47:58:ee:64:94:f2:80:d0:
a8:94:56:be:77:3a:41:73:84:f9:6b:6d:51:a2:3d:
45:3a:21:b7:26:8b:28:83:cf:81:57:e7:3d:a7:a3:
0d:3a:f0:e9:ae:5f:a0:e6:8a:9c:b4:06:d8:15:19:
4e:d7:44:f5:84:5a:e6:41:96:97:5f:79:8a:44:5d:
11:6e:b3:e6:36:62:8c:b3:c0:02:ce:63:2c:9a:63:
c4:c1:63:2a:f6:3f:d9:b4:c9:e3:6e:a1:04:bb:1b:
6b:02:67:26:07:cd:7a:d3:88:22:2e:a9:e2:9b:a5:
04:9a:69:7a:51:93:04:cd:53:b0:41:4b:6d:6f:b0:
98:71:1b:7b:a7:db:93:d0:eb:50:2d:62:8b:67:ea:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:F6:7C:41:E4:5A:A1:D6:AC:58:37:AB:2B:65:D0:9A:27:D3:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.240.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e1:5f:13:8a:ff:7c:55:f6:b9:43:da:8c:f5:78:e8:6a:b0:
70:1e:96:06:a5:ce:44:0c:13:bb:4d:7c:0f:f9:fa:e7:68:01:
dd:e4:93:a7:35:2a:e4:42:d9:ca:4f:ea:2b:88:46:62:d6:e0:
68:59:88:9e:a4:36:b3:ef:c3:0b:e0:7f:11:45:b0:25:54:c1:
ec:58:c9:c3:5f:68:33:d3:78:b2:66:c4:ac:d7:47:cc:51:44:
39:81:f8:3f:45:9e:3f:99:6a:30:5e:86:69:c7:48:78:e8:77:
ef:91:7b:71:55:27:13:30:6d:bb:fc:6c:09:54:53:9e:99:ad:
71:7c:91:8b:fc:a7:a4:fc:f3:31:b1:dd:88:4b:da:a7:46:3c:
9f:66:3f:bd:f1:66:18:48:58:9d:3a:38:3e:f3:b2:08:87:97:
fc:bc:60:18:bb:4e:8d:44:77:26:f6:0f:b4:d3:b7:98:0a:3f:
53:9a:28:7d:69:fa:6c:fb:47:1b:63:b3:08:71:e3:7e:77:f9:
92:03:52:79:ba:9e:90:20:c7:71:0b:f2:91:ce:87:65:28:6c:
5f:f1:3e:e5:0c:55:18:2d:bd:a7:ec:e9:1c:34:51:43:17:f4:
bc:cc:6c:cb:2c:39:19:61:c0:57:49:03:de:74:39:e6:43:ce:
f8:7c:3c:8e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfQf0dgdtSYFuYKFqDUI1fT/8AacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMThaFw0yNjA4MjExNDQ3MThaMDMxMTAvBgNV
BAMTKDdFMUVGNjdDNDFFNDVBQTFENkFDNTgzN0FCMkI2NUQwOUEyN0QzNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHVlrTvga7nEwl1ADsaSEV8lC
o5GDtdTkOJbdoL//2hxAHCud/HCSiln8bgYspvZcqxUO2fqRKgOarNcwVwopVtSB
+g243CJGEPTspG59xgmlbJlnmRAep81YbM/m21nPUNl5m5GR8sOtfITr/oJHWO5k
lPKA0KiUVr53OkFzhPlrbVGiPUU6IbcmiyiDz4FX5z2now068OmuX6Dmipy0BtgV
GU7XRPWEWuZBlpdfeYpEXRFus+Y2YoyzwALOYyyaY8TBYyr2P9m0yeNuoQS7G2sC
ZyYHzXrTiCIuqeKbpQSaaXpRkwTNU7BBS21vsJhxG3un25PQ61AtYotn6rTvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUfh72fEHkWqHWrFg3qytl0Jon03YwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzQzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5u/AwDQYJKoZIhvcNAQELBQADggEBAG3hXxOK/3xV9rlD2oz1eOhqsHAelgal
zkQME7tNfA/5+udoAd3kk6c1KuRC2cpP6iuIRmLW4GhZiJ6kNrPvwwvgfxFFsCVU
wexYycNfaDPTeLJmxKzXR8xRRDmB+D9Fnj+ZajBehmnHSHjod++Re3FVJxMwbbv8
bAlUU56ZrXF8kYv8p6T88zGx3YhL2qdGPJ9mP73xZhhIWJ06OD7zsgiHl/y8YBi7
To1Edyb2D7TTt5gKP1OaKH1p+mz7Rxtjswhx4353+ZIDUnm6npAgx3EL8pHOh2Uo
bF/xPuUMVRgtvafs6Rw0UUMX9LzMbMssORlhwFdJA950OeZDzvh8PI4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:25 2025 by rpki-client