Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
File: 3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier: RZWUo1aKSclC7e4nnPhISTyPtRm2njHeykqfDO0WYq4=
Subject key identifier: 6B:7E:8E:3D:31:FF:CA:C8:6E:1F:6B:5C:FD:3A:D9:0D:9A:96:62:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 252F888299D71E68F9311D79A17D78B0844C5B08
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
Signing time: Fri 22 Aug 2025 14:47:20 +0000
ROA not before: Fri 22 Aug 2025 14:42:20 +0000
ROA not after: Fri 21 Aug 2026 14:47:20 +0000
asID: 62240
IP address blocks: 185.187.243.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2f:88:82:99:d7:1e:68:f9:31:1d:79:a1:7d:78:b0:84:4c:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:20 2025 GMT
Not After : Aug 21 14:47:20 2026 GMT
Subject: CN=6B7E8E3D31FFCAC86E1F6B5CFD3AD90D9A9662A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:c9:8a:d7:af:16:85:55:d8:bb:e3:74:2b:
a8:01:9b:21:20:7c:9b:76:ac:e1:e3:a5:12:2b:45:
ee:2f:1e:b1:59:5d:fc:6d:d1:3e:e4:70:bd:26:2e:
fd:15:29:64:70:89:7e:e8:bc:6f:f5:2d:11:9c:99:
04:94:9e:c8:89:ea:c1:23:2f:0e:b3:2d:ca:c7:05:
41:0a:3c:b1:aa:1a:18:2a:fa:dd:02:6e:4c:bb:19:
c0:62:b5:d1:d1:59:d8:ad:6f:c2:ed:bc:04:86:49:
0a:ca:f6:47:d4:f6:c2:5e:4f:84:cc:7f:bb:42:e9:
0a:34:dd:5a:14:49:cc:78:81:1f:2b:82:e8:cc:0b:
d6:2d:24:26:05:38:75:84:60:f9:43:a0:e9:14:86:
2e:48:b0:ed:05:2d:57:03:b9:ba:a6:8e:f9:21:ee:
61:d8:2f:56:31:26:c5:aa:af:54:9d:e0:9b:e0:26:
58:d4:64:d7:08:82:f3:3f:ea:a5:ca:a1:b1:39:ef:
6e:c1:4d:e1:ab:6e:38:4e:25:a3:70:12:19:21:8a:
ca:d9:3d:c7:ed:bf:12:f5:6b:6f:a0:49:ce:2f:55:
0d:0d:29:af:81:7d:5a:e6:c7:fa:19:f6:8d:4f:ce:
b4:3a:88:24:1a:cb:63:51:e3:15:4b:91:27:a5:ee:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7E:8E:3D:31:FF:CA:C8:6E:1F:6B:5C:FD:3A:D9:0D:9A:96:62:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:42:fc:4a:ae:24:6c:71:b2:f0:d1:57:77:76:32:ab:50:2b:
11:86:ff:50:1a:9d:c2:d2:ba:1f:9a:24:cf:ad:8e:24:04:7d:
53:b0:6f:3e:bb:b8:33:c2:9e:18:23:11:0f:f6:02:37:b2:7f:
a6:2c:d3:ca:d7:c2:db:5d:c8:c3:85:f9:c7:c6:84:b1:d9:a1:
c4:da:ac:ce:43:13:48:bc:2a:f6:2c:1a:b5:87:51:7c:72:00:
22:b1:6e:e2:4e:97:21:40:e3:1e:11:e1:ea:fc:6c:69:7a:ca:
b1:6a:e3:fe:25:e1:49:17:33:3b:a7:f1:15:4a:8c:b8:a1:92:
0a:4b:8c:c8:f3:5e:91:03:98:ec:e1:4c:e4:6e:1b:fa:39:0c:
64:53:74:e2:e5:62:99:1b:a0:cd:5b:91:6e:f6:e3:30:4a:3b:
83:f5:ab:64:93:36:e8:0d:30:f8:70:76:d5:3a:bc:cc:32:da:
9d:01:b0:d1:b7:6b:45:3e:45:a0:9b:cd:80:cb:21:a8:26:4d:
b9:1b:f1:85:97:af:87:78:bb:f5:cd:d5:4e:56:3d:30:fa:92:
a4:73:3f:33:52:0f:d5:4a:9e:3f:d2:67:76:ec:19:69:29:d1:
50:b6:08:f6:a6:75:34:2a:cb:36:b9:2c:b5:ea:0b:af:47:3b:
02:08:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:09 2025 by rpki-client