Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa
File: 3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: aaPNPjzO8nb0Bi33O9CnHj3IfXMziHElaB0QbQSzuzo=
Subject key identifier: E1:72:EC:F6:12:E9:7E:48:FB:BD:31:D8:AB:C7:0F:7B:3B:CD:67:30
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6AD035F8CB6996AC3A6ACE356372C8BB23224C7C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 17 Jun 2025 13:27:46 +0000
ROA not before: Tue 17 Jun 2025 13:22:46 +0000
ROA not after: Tue 16 Jun 2026 13:27:46 +0000
asID: 212238
IP address blocks: 185.190.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d0:35:f8:cb:69:96:ac:3a:6a:ce:35:63:72:c8:bb:23:22:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 17 13:22:46 2025 GMT
Not After : Jun 16 13:27:46 2026 GMT
Subject: CN=E172ECF612E97E48FBBD31D8ABC70F7B3BCD6730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:4e:8e:cd:c3:44:af:5d:4f:8e:b3:75:aa:
80:48:9b:8b:20:9b:b1:ab:61:01:bc:e4:67:af:4f:
2e:7b:f1:d4:b2:9d:65:69:64:8f:94:41:e1:1d:12:
a0:c0:8d:a9:b6:3f:28:b0:20:56:5a:cf:7a:d8:a6:
6a:6b:24:b8:1d:51:8d:80:c3:bd:5e:75:a3:a0:2f:
a4:d6:f8:da:ae:3a:8e:fa:36:79:f0:96:3e:4e:0e:
e7:81:cd:be:f4:28:6e:a3:b2:70:86:45:af:6b:ce:
81:92:39:45:27:6b:a4:72:1e:ad:c8:22:5d:44:83:
5a:fb:d4:08:95:8e:0a:6e:25:bc:c3:e6:f2:4e:f5:
31:8e:d0:f6:bb:ab:a5:64:be:f8:f9:8a:cb:ce:2e:
2d:47:97:a3:fa:03:be:f7:67:d6:bc:64:3b:14:6c:
a8:63:85:6e:6c:49:b6:ed:dc:89:5b:b4:00:25:92:
de:59:03:a5:86:c5:ce:30:87:a9:8a:c3:26:ca:3b:
64:6d:f5:3c:5f:c2:09:5e:12:12:61:3a:29:76:d9:
26:10:d2:de:05:95:84:5b:6f:a1:70:70:e7:4d:4b:
53:a8:33:54:f1:74:63:db:41:c4:f9:00:a5:17:3f:
e4:d7:78:b6:4a:71:18:1c:7c:cd:3a:0d:f2:27:ce:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:EC:F6:12:E9:7E:48:FB:BD:31:D8:AB:C7:0F:7B:3B:CD:67:30
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.141.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ae:5d:60:d2:27:09:39:94:35:94:b7:0c:37:9a:2f:1f:f3:
66:c6:fd:36:11:8d:f0:53:6d:41:74:0a:64:00:6b:92:63:29:
42:14:4b:1b:6e:03:54:30:90:5b:b9:24:c3:7b:80:c3:51:59:
60:b3:3f:3c:b2:4e:48:7f:6c:6e:a3:b0:8a:b5:dd:e8:ca:9d:
59:4c:92:7b:7b:84:b4:9b:26:61:b5:3c:f0:3e:83:23:8c:5b:
22:c4:23:7f:07:55:b0:fd:c7:53:ed:bb:7e:bd:03:f6:0c:3f:
41:23:a1:cf:d5:98:07:56:e3:98:af:5d:40:aa:1a:d9:2a:4f:
c5:14:d9:58:93:7c:af:87:9f:6b:d1:00:ca:a9:a2:70:44:28:
00:89:e0:1b:f5:55:a0:31:8e:da:25:64:5c:1b:b7:a2:c6:86:
c1:bf:31:89:cd:3f:18:38:59:b9:b6:62:61:d2:ba:98:0a:fe:
58:ec:d7:32:f6:ec:2d:6d:ea:45:bd:0e:b2:9b:8d:15:a7:01:
16:7e:d2:0e:e4:b5:cf:85:f7:70:01:bf:77:f1:de:59:cf:69:
6e:01:50:58:6c:0d:ec:6d:87:4c:df:11:82:57:98:27:73:d5:
a8:d9:66:9a:af:a0:f2:cb:c5:d3:5f:9d:d2:cc:04:6b:9b:83:
39:fe:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:25 2025 by rpki-client