Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fdaQoWmGewgB9ozCdvTUMAmCe3bMg5wEBTaeyhR2W0U=
Subject key identifier: 1C:4C:E1:6C:F6:85:6E:6A:D2:A1:98:E6:2E:98:9C:8E:E9:5D:15:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 567F3E9A6E2D4F9540871DFF83581B9923D26510
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:17 +0000
ROA not before: Fri 22 Aug 2025 14:42:17 +0000
ROA not after: Fri 21 Aug 2026 14:47:17 +0000
asID: 136787
IP address blocks: 185.199.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7f:3e:9a:6e:2d:4f:95:40:87:1d:ff:83:58:1b:99:23:d2:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:17 2025 GMT
Not After : Aug 21 14:47:17 2026 GMT
Subject: CN=1C4CE16CF6856E6AD2A198E62E989C8EE95D1584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:52:d5:e3:d7:d7:40:6e:6d:94:98:e7:cb:
d3:62:98:06:38:cb:64:e3:10:6b:34:88:8a:fd:85:
15:dc:49:54:5b:a0:f8:dd:09:8c:57:61:49:73:88:
ee:0f:83:09:26:4a:a2:98:0a:3d:73:1e:ce:2c:d3:
ee:f4:20:6a:69:f8:9d:55:04:6f:b2:8f:a8:2a:50:
8a:f8:ab:ef:92:2b:9b:52:04:de:44:7c:e6:24:34:
09:d2:a0:49:f8:38:18:6f:22:23:58:69:48:e9:7f:
f1:17:53:81:53:5e:bb:3d:24:c6:91:18:21:f2:b6:
fa:ef:c6:49:02:90:2f:7c:20:0d:19:2b:43:ff:5e:
97:00:81:25:6c:d9:f9:e1:f1:8f:fe:48:23:bb:ea:
60:45:c6:7f:13:c3:e6:0a:b7:e2:a9:5d:60:28:0b:
13:96:a5:34:81:7e:2b:41:c5:30:5b:db:1d:45:d4:
6e:ca:06:11:66:85:dd:95:9e:05:be:1a:c1:30:4c:
dd:6b:9b:b2:bf:bc:47:f4:f9:c4:18:9c:ee:98:63:
ac:45:cb:be:80:05:a9:1d:a7:8a:70:e8:35:67:d0:
07:2f:15:d5:39:c0:72:77:84:49:bd:be:29:da:10:
bb:e7:70:28:69:37:0a:34:b9:21:ca:97:f0:32:14:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:E1:6C:F6:85:6E:6A:D2:A1:98:E6:2E:98:9C:8E:E9:5D:15:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.101.0/24
Signature Algorithm: sha256WithRSAEncryption
26:51:89:51:19:0b:69:62:91:e7:c0:39:5a:1f:a4:a1:6e:71:
d0:12:d1:d9:a2:a7:c1:58:ae:69:37:e7:63:ab:ea:38:24:08:
33:13:67:ed:65:0a:bb:a0:1c:b2:79:07:94:be:0b:4c:b2:6e:
c1:9f:34:01:72:5f:a6:a2:da:1b:9f:05:93:52:e4:fa:0f:5d:
06:1d:db:af:f9:18:d8:fe:40:6a:d1:7e:6b:58:92:9b:08:06:
ef:58:f5:a9:18:d8:da:a0:d0:7a:0f:13:e4:88:3b:e6:9b:20:
3a:79:10:20:e9:e5:1c:2f:67:1f:dc:79:a2:23:11:92:91:e4:
85:62:3e:56:3f:1d:32:fe:f3:56:de:90:0f:e9:28:18:d0:01:
ff:92:e7:de:6b:5c:6b:b8:2e:74:77:8d:23:ef:1d:96:43:eb:
d6:17:fa:ea:54:4b:bc:66:d3:33:90:e4:53:af:cf:47:27:63:
4b:c5:cd:55:56:a4:a6:64:72:4a:bb:39:81:76:fc:a8:af:83:
83:5e:06:3e:ba:5e:b4:73:50:6b:6b:29:f3:bd:4b:a2:9f:3a:
6c:51:79:94:f1:04:d1:a5:63:a7:5e:4b:03:a8:ff:42:22:86:
9c:91:47:07:a6:e6:82:30:ce:cd:36:5d:f2:08:40:e2:21:dc:
dd:27:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:25 2025 by rpki-client