Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 7niku4u4Lg7RNGa/fiokqp9FffNdtgnMMfD9tzhUDig=
Subject key identifier: 45:A4:55:85:76:DF:C6:29:C3:ED:FD:06:C6:11:F7:38:21:67:87:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 14B8DD951D6D7005497F10821A7781FE80A3EDC3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:20 +0000
ROA not before: Fri 22 Aug 2025 14:42:20 +0000
ROA not after: Fri 21 Aug 2026 14:47:20 +0000
asID: 51167
IP address blocks: 185.187.242.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b8:dd:95:1d:6d:70:05:49:7f:10:82:1a:77:81:fe:80:a3:ed:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:20 2025 GMT
Not After : Aug 21 14:47:20 2026 GMT
Subject: CN=45A4558576DFC629C3EDFD06C611F73821678763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:6f:ce:3f:05:da:a8:6c:37:5b:04:9a:47:
46:fa:ac:7f:db:2f:fa:62:93:07:a5:79:51:76:3f:
a5:cc:1e:82:37:40:79:c0:98:2e:d0:e1:0e:de:b1:
f1:f7:ad:e8:74:bf:6b:65:46:da:98:4b:05:38:74:
96:f3:af:a0:92:b8:39:25:a9:88:10:4e:f3:24:ed:
62:cc:b0:49:25:fe:99:0a:71:c0:c8:2e:57:63:77:
82:74:88:52:73:8a:23:1f:bf:e0:f1:bf:a1:3c:a8:
04:3a:b2:a9:cb:c0:13:3c:41:f9:ac:60:8d:af:e4:
8b:fc:80:be:2d:79:d4:4a:3e:76:7c:e0:79:25:3f:
5b:36:b4:44:d2:51:77:1d:2c:9e:0c:f0:d2:ed:b2:
14:b3:61:7a:b7:4c:b1:1a:4a:38:b8:f9:2a:62:18:
1b:f9:b2:2f:59:a9:f5:51:5e:d7:a9:7a:ed:26:7c:
ec:ce:07:1e:bc:5d:af:d0:bb:8f:1f:c1:86:b3:00:
7c:d7:5d:18:1e:10:07:8a:49:d7:da:99:fd:b1:7b:
d2:45:a6:ab:88:20:9f:20:c9:64:75:f8:60:5e:47:
e6:b0:71:89:66:34:63:03:fd:e9:ef:11:3e:4d:49:
b0:ea:f6:69:19:e1:c2:f4:5c:0b:80:8c:a1:de:35:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:55:85:76:DF:C6:29:C3:ED:FD:06:C6:11:F7:38:21:67:87:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d5:b5:d5:b5:96:bf:44:de:79:15:e4:ef:72:ac:72:ad:35:
0d:4f:94:72:95:a3:a7:99:da:8f:26:fe:16:db:40:9b:6f:2a:
ff:f2:cf:97:b6:ff:58:24:d4:7f:eb:13:fa:fd:2e:82:d9:66:
cb:f6:f9:86:13:bb:9e:60:27:20:45:14:45:ff:67:4e:46:f3:
a1:7c:6b:9b:c7:0c:4e:78:f4:e9:48:39:f8:a4:9d:fc:04:ef:
e0:4a:2f:0e:9d:95:a2:e4:8d:c6:9b:14:5a:6f:e1:c1:84:d4:
d2:b3:d3:85:4f:2c:03:00:7c:2c:6b:a0:c4:ed:29:ad:9b:72:
1d:de:cd:55:82:07:5b:85:5c:4a:ed:cf:c6:73:3d:36:ea:2a:
12:86:25:1d:29:25:ad:b4:97:65:ad:6e:fd:17:67:bf:f1:05:
da:28:be:6f:d0:0b:4b:fd:4e:01:17:88:31:8d:c5:66:53:20:
d2:ba:0e:17:3c:d0:38:ab:9f:a0:8f:cd:58:b6:70:ed:8f:2c:
72:2d:8d:02:b2:32:0f:23:8f:0e:5d:1b:0f:cb:eb:70:f1:f9:
9d:1f:79:34:b2:f8:29:4b:86:1b:67:45:aa:e5:67:7b:47:ce:
5d:c0:1d:08:3b:84:ae:f3:99:23:31:a6:6c:5a:fd:05:b4:cf:
6f:e1:00:38
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFLjdlR1tcAVJfxCCGneB/oCj7cMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMjBaFw0yNjA4MjExNDQ3MjBaMDMxMTAvBgNV
BAMTKDQ1QTQ1NTg1NzZERkM2MjlDM0VERkQwNkM2MTFGNzM4MjE2Nzg3NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n2/OPwXaqGw3WwSaR0b6rH/b
L/pikweleVF2P6XMHoI3QHnAmC7Q4Q7esfH3reh0v2tlRtqYSwU4dJbzr6CSuDkl
qYgQTvMk7WLMsEkl/pkKccDILldjd4J0iFJziiMfv+Dxv6E8qAQ6sqnLwBM8Qfms
YI2v5Iv8gL4tedRKPnZ84HklP1s2tETSUXcdLJ4M8NLtshSzYXq3TLEaSji4+Spi
GBv5si9ZqfVRXtepeu0mfOzOBx68Xa/Qu48fwYazAHzXXRgeEAeKSdfamf2xe9JF
pquIIJ8gyWR1+GBeR+awcYlmNGMD/envET5NSbDq9mkZ4cL0XAuAjKHeNWzxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQURaRVhXbfxinD7f0GxhH3OCFnh2MwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzQzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5u/IwDQYJKoZIhvcNAQELBQADggEBAFzVtdW1lr9E3nkV5O9yrHKtNQ1PlHKV
o6eZ2o8m/hbbQJtvKv/yz5e2/1gk1H/rE/r9LoLZZsv2+YYTu55gJyBFFEX/Z05G
86F8a5vHDE549OlIOfiknfwE7+BKLw6dlaLkjcabFFpv4cGE1NKz04VPLAMAfCxr
oMTtKa2bch3ezVWCB1uFXErtz8ZzPTbqKhKGJR0pJa20l2Wtbv0XZ7/xBdoovm/Q
C0v9TgEXiDGNxWZTINK6Dhc80Dirn6CPzVi2cO2PLHItjQKyMg8jjw5dGw/L63Dx
+Z0feTSy+ClLhhtnRarlZ3tHzl3AHQg7hK7zmSMxpmxa/QW0z2/hADg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:51 2025 by rpki-client