Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
File: 3138352e3139332e36362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: giRfEFW3wJBzejLnX/lmaqkKG2/OlfdFClOObPaMjTk=
Subject key identifier: DE:55:B0:10:76:7F:BC:7A:CE:1D:A9:2B:D3:CA:C1:6F:98:35:67:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 709528ADFCEF680285B7753C8DD094019BAAA515
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:10 +0000
ROA not before: Fri 22 Aug 2025 14:42:10 +0000
ROA not after: Fri 21 Aug 2026 14:47:10 +0000
asID: 51167
IP address blocks: 185.193.66.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:95:28:ad:fc:ef:68:02:85:b7:75:3c:8d:d0:94:01:9b:aa:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:10 2025 GMT
Not After : Aug 21 14:47:10 2026 GMT
Subject: CN=DE55B010767FBC7ACE1DA92BD3CAC16F983567F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:6f:7f:f4:f5:75:8c:d4:99:fe:6c:0e:21:
14:c1:83:94:26:c3:98:fa:95:1b:25:8f:01:78:f3:
72:59:e7:da:f8:95:6b:22:d9:b6:a6:3a:e8:56:30:
3f:a8:c2:58:bf:80:7c:42:15:7c:06:73:df:1f:40:
94:4a:f6:a3:d0:a0:bb:08:65:64:12:4b:ad:1a:94:
09:9e:2b:59:8d:01:9d:d6:7c:92:53:ca:cc:37:03:
0f:81:6f:ff:bf:2d:57:5c:81:90:ed:d5:ab:a3:4b:
ae:39:d4:d7:ac:f1:e5:ea:cd:06:ed:4b:e0:9d:2e:
a1:cd:c2:71:e6:1e:dc:bf:1d:2f:5a:d7:d7:6a:8e:
01:1d:bc:b0:7e:1b:11:50:91:e0:b7:32:f9:c3:4a:
93:08:96:27:03:45:5e:db:21:7e:6c:32:31:7e:d3:
20:5b:8a:ab:c7:54:dc:3b:a5:8b:ac:81:8f:ac:12:
46:cd:e2:23:e0:cb:6c:5e:21:69:38:a0:b3:62:63:
79:82:32:f6:d9:0e:dc:ae:d3:a0:85:d0:e0:4a:79:
20:ff:27:29:e6:3c:ba:54:a8:36:0d:87:c4:d4:b1:
08:bf:eb:1d:cd:eb:e3:44:13:ee:39:f6:44:e2:0e:
b7:be:82:e3:63:0e:19:53:98:da:38:fd:7d:a2:b2:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:B0:10:76:7F:BC:7A:CE:1D:A9:2B:D3:CA:C1:6F:98:35:67:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:4d:f7:e9:fe:8e:0d:67:54:a0:fb:94:99:aa:5c:40:28:df:
9b:25:ed:6b:20:36:c4:70:f6:cf:7f:ef:e9:a3:17:c7:5d:a6:
24:43:ef:ea:3f:66:ae:b4:22:64:9f:0e:90:a2:3f:c5:9b:db:
fd:35:62:f4:63:e7:29:54:ec:62:36:3f:58:43:df:ee:72:c5:
68:4b:ee:47:d0:6a:14:b7:ae:92:ca:9e:d1:a3:50:75:3c:22:
e0:a1:9c:33:f5:08:09:d8:b8:25:90:af:4d:03:36:d2:41:06:
a1:0b:d0:19:e4:d3:38:35:c6:fe:6b:36:4b:2d:2d:b1:f3:0d:
a6:d6:17:d1:91:24:67:48:7d:eb:96:b8:bc:f5:46:65:43:ca:
d3:ca:5d:50:8d:f1:4f:59:1b:f5:85:e0:60:29:b8:1f:1d:41:
0f:e8:4d:cc:3f:b9:1f:77:a3:e4:67:28:ae:05:6f:47:65:a7:
a2:14:73:d5:c0:77:e1:6f:17:d7:e7:d9:7e:38:06:57:80:ac:
2c:fc:ab:99:6c:9f:37:ca:23:aa:b5:f3:e9:4a:49:d3:d6:c2:
b5:a1:5f:d4:20:d2:69:14:08:27:fd:06:b6:e2:6a:82:0f:c8:
c2:8b:66:9a:54:7f:6f:81:af:06:06:09:30:90:e3:3f:de:c9:
d7:51:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:24 2025 by rpki-client