Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa
File: 3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ZH99ccpUoVX7YfXdrU7dyl621bFnA1qOomP55sDg0VI=
Subject key identifier: 90:91:27:EC:93:B4:7F:6D:DE:B9:DF:EA:5D:EE:DB:51:E9:AA:CC:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3CFADD05378D3D2F6543D3A120BCBC446C17486B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:17 +0000
ROA not before: Fri 22 Aug 2025 14:42:17 +0000
ROA not after: Fri 21 Aug 2026 14:47:17 +0000
asID: 136787
IP address blocks: 185.197.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fa:dd:05:37:8d:3d:2f:65:43:d3:a1:20:bc:bc:44:6c:17:48:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:17 2025 GMT
Not After : Aug 21 14:47:17 2026 GMT
Subject: CN=909127EC93B47F6DDEB9DFEA5DEEDB51E9AACC69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:66:60:f5:1a:be:44:0d:e0:9a:10:7b:5c:
0f:bf:fb:78:35:da:43:52:2e:34:9f:1d:25:78:f4:
a4:f6:a2:46:3f:24:e7:ef:28:41:a1:36:49:c7:bf:
f8:c5:3b:a1:a1:b3:6c:e0:3c:a9:6f:f9:9c:16:e5:
fe:91:b5:57:6c:bc:56:76:ef:98:da:c9:6e:b4:1a:
a3:de:10:da:73:eb:9a:79:1e:44:fc:df:aa:e7:d3:
75:d9:77:63:09:fc:b2:01:87:51:8b:b1:4e:70:ba:
c0:d0:35:00:d7:d2:27:fe:7f:25:a5:61:ae:25:1a:
58:93:11:1c:e3:45:6b:57:cd:e2:e0:c7:5a:3d:5b:
89:63:51:9d:5e:69:6f:9a:0b:99:3d:b1:2e:4f:f7:
bd:1a:a2:b5:9f:2c:5e:53:47:76:ad:85:49:46:c2:
fd:1d:33:df:fe:17:a2:b5:35:bd:62:00:c6:f0:48:
ab:0d:0c:d7:9b:7a:73:b1:d9:b0:1c:e6:22:66:31:
98:fe:cf:33:85:3e:d1:0b:1c:50:99:de:25:a8:b2:
4e:d0:b0:de:75:83:0c:8b:2e:64:d0:25:84:a2:37:
51:74:a3:12:9c:7b:c8:9e:72:ae:9f:b6:6b:f2:7d:
a8:6b:3c:c7:b0:b2:03:81:49:f7:49:78:10:48:f3:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:27:EC:93:B4:7F:6D:DE:B9:DF:EA:5D:EE:DB:51:E9:AA:CC:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139372e3139322e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.192.0/23
Signature Algorithm: sha256WithRSAEncryption
46:2d:34:8b:08:14:c6:5b:72:8c:e3:4a:14:ad:db:68:6a:61:
f0:ba:85:f3:6a:36:d4:72:d1:db:52:d5:be:9b:87:51:70:f3:
03:56:15:34:cc:84:62:f4:03:ce:7a:69:3f:2c:54:13:12:e0:
c4:28:45:a2:06:06:3d:b8:f3:a5:18:ef:ed:e6:2a:17:66:12:
c2:3e:3e:22:7a:3b:66:01:7a:0e:81:04:5a:15:16:4e:4a:14:
ed:3c:7d:af:47:3a:74:af:58:09:69:2c:a5:59:a3:77:ef:c1:
db:ad:0e:6e:db:f0:36:78:c1:5c:84:62:01:d8:2d:36:56:34:
9f:fa:63:85:e5:bd:15:90:3e:7e:be:45:51:6d:02:ff:f0:13:
37:18:81:14:c1:bb:a7:d9:ed:19:c0:ba:bd:9a:35:b6:48:a6:
25:9b:fb:39:e6:17:e4:b6:bb:26:5e:40:ea:aa:ac:2c:53:fa:
5b:b8:d3:79:a3:57:33:a8:69:45:9b:ef:3e:eb:f7:de:8e:4e:
d4:59:38:de:5b:41:63:72:7f:67:80:8a:b6:e2:f0:ff:89:e5:
fc:e4:7b:57:e7:e4:53:fc:0b:91:c5:df:c7:f2:dc:7a:9f:9f:
21:cb:1e:d5:3c:0c:06:6f:4a:51:a5:10:48:19:27:ce:0b:19:
fb:52:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:16 2025 by rpki-client