Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa
File: 3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: 3DabAKYClQ1l3k1c2x0gJDl5Bkt1dTPA8VfTL10LBMI=
Subject key identifier: 47:E2:96:81:20:23:FE:68:8B:9A:0D:68:3C:35:0B:95:28:BD:60:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68D677953E5BA71CB09D40F22B79C6D72D8A035D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa
Signing time: Fri 15 Aug 2025 15:47:07 +0000
ROA not before: Fri 15 Aug 2025 15:42:07 +0000
ROA not after: Fri 14 Aug 2026 15:47:07 +0000
asID: 42366
IP address blocks: 185.194.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d6:77:95:3e:5b:a7:1c:b0:9d:40:f2:2b:79:c6:d7:2d:8a:03:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 15 15:42:07 2025 GMT
Not After : Aug 14 15:47:07 2026 GMT
Subject: CN=47E296812023FE688B9A0D683C350B9528BD6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:af:40:9f:9d:cb:9e:9d:15:97:4b:01:75:
0a:7a:e1:fd:64:e9:ac:b3:d2:25:19:17:bb:73:60:
08:97:c5:aa:c7:13:9a:53:5b:ea:98:ba:7c:c7:cf:
7a:fc:c5:76:13:80:fe:ac:3c:48:79:af:e6:63:00:
a1:65:4a:01:05:af:76:53:d5:9d:05:97:25:d8:0a:
63:0a:5b:85:65:31:23:e5:e2:77:d4:93:c3:f2:a3:
0c:79:b1:12:db:9f:9b:b3:c5:33:a0:6c:e7:72:43:
99:b3:4e:f8:6d:2c:5f:94:ea:5e:9e:08:25:50:dd:
16:19:5b:af:87:87:1e:92:4e:cf:32:37:23:cd:e3:
8e:63:d1:fb:1b:f9:5d:93:57:b1:a3:b3:23:d7:d8:
66:1e:fe:34:7b:af:5c:5a:d3:5a:42:e3:38:56:ee:
c8:d9:66:b3:df:6e:55:d0:fe:6d:60:12:f5:2c:9f:
1c:de:24:05:23:8f:0f:06:46:cf:4a:69:38:09:59:
08:3b:97:53:ed:62:87:a2:1e:69:da:70:a1:68:73:
62:e8:04:ef:39:a7:a9:77:ad:27:6a:55:08:30:9c:
11:83:dd:d8:45:e6:48:3e:10:f9:6e:07:22:9e:8c:
9c:58:a4:d1:a3:aa:fc:fb:4f:37:5c:31:3a:ff:b2:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:96:81:20:23:FE:68:8B:9A:0D:68:3C:35:0B:95:28:BD:60:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139342e3135302e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.150.0/24
Signature Algorithm: sha256WithRSAEncryption
97:16:ab:23:8e:14:ad:f2:fe:e5:0b:47:e7:3d:3f:bd:c5:5a:
dc:6f:f5:1b:41:56:88:0c:5e:8c:46:17:b6:dd:ce:b5:29:e4:
33:94:20:f5:4d:24:f3:de:3e:f5:e8:60:c7:77:8e:c0:24:f4:
a8:85:fb:99:15:bf:f5:14:6e:bc:c4:90:fb:a2:52:51:93:f1:
c7:ba:41:0e:72:6a:fd:6c:56:e9:d5:cf:0a:12:3a:cb:d0:5d:
80:3f:f8:d0:db:b3:f5:2e:fb:5a:99:06:6d:23:8e:63:7c:20:
3c:b5:3f:5e:60:e4:ac:31:55:96:98:09:4f:ce:a2:2d:31:0b:
46:db:33:01:57:8f:45:a0:39:63:e9:7d:9b:fc:ad:d5:50:df:
5a:58:0c:8e:fa:bc:40:51:36:5e:82:be:3f:99:5e:4e:30:4e:
d1:0b:9c:53:1d:a4:8c:87:d4:74:26:0b:f4:be:76:27:c1:76:
ae:9d:72:e5:8f:30:b1:ca:d0:04:60:0d:d9:1f:bc:78:05:c3:
12:9f:8d:71:9a:e7:a7:68:a5:b9:76:5f:79:e5:5f:2b:0b:51:
4b:f7:dc:1e:72:89:33:c2:16:f9:05:8a:7e:49:67:40:78:b2:
a7:8a:de:f7:55:f8:b2:f4:64:1b:83:7a:77:cb:2a:19:e5:69:
37:27:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:20 2025 by rpki-client