Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
File: 3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: VXe3rjxgO3LQjxCRhg4eFtgjegPlS7iDcYLx9e5nM+k=
Subject key identifier: 5F:3B:4B:A3:AA:6F:D5:93:75:D5:41:03:28:CD:8E:CE:F3:66:EE:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3EF9A5245E39E4F532F9D5D90610CE537644BB4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:10 +0000
ROA not before: Fri 22 Aug 2025 14:42:10 +0000
ROA not after: Fri 21 Aug 2026 14:47:10 +0000
asID: 136787
IP address blocks: 185.199.103.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f9:a5:24:5e:39:e4:f5:32:f9:d5:d9:06:10:ce:53:76:44:bb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:10 2025 GMT
Not After : Aug 21 14:47:10 2026 GMT
Subject: CN=5F3B4BA3AA6FD59375D5410328CD8ECEF366EEEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:7e:97:09:d0:cf:dd:f1:31:bc:b0:f5:e3:
4f:b3:e3:ea:a6:af:9b:75:fe:f5:50:06:04:9c:63:
3b:9d:aa:31:02:ca:25:25:fb:c3:e2:be:09:6d:b3:
42:ec:29:da:ac:ac:a2:8c:3c:0a:8f:2b:4b:ce:c1:
ac:ab:30:0b:87:dc:cd:0b:00:85:30:b9:a6:cf:4e:
37:c1:6e:9d:82:98:e6:a0:d5:a2:e1:99:e8:a0:f6:
3e:4c:0d:a6:9a:b2:35:46:2f:85:15:db:42:6d:42:
17:c8:3b:15:33:31:8a:6f:0a:67:56:1c:6e:94:ac:
0d:61:cb:ee:41:b6:ed:cb:9b:55:48:f3:62:b3:21:
cc:ec:54:d7:c4:70:13:b1:df:d7:e4:02:e9:d0:f9:
55:6f:6f:95:67:f0:bd:cb:b1:45:a1:89:9b:19:30:
93:3a:40:96:bb:88:68:7a:b7:4d:a1:32:62:91:51:
bf:1c:6a:58:2c:bc:11:23:be:c6:9a:76:dd:29:fb:
a1:5f:c4:86:e1:53:08:14:b8:79:a2:42:1f:55:81:
bb:c4:92:95:9d:06:a8:b7:9d:6b:24:08:80:38:60:
ee:e8:ec:3c:61:08:5a:8b:c0:b5:1b:63:d0:97:9b:
de:2f:06:c1:d8:fc:8c:52:8e:c7:41:39:60:2e:11:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3B:4B:A3:AA:6F:D5:93:75:D5:41:03:28:CD:8E:CE:F3:66:EE:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139392e3130332e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bf:28:27:31:eb:9b:2f:73:ae:2d:c7:d0:4d:11:92:9d:fb:
e8:46:aa:55:f8:ce:60:23:de:bf:e0:2e:50:8d:04:b9:55:78:
0e:df:10:65:41:1f:de:be:d7:ec:52:e4:01:b8:cd:61:37:c1:
34:49:be:89:8b:f0:85:f3:4f:3d:54:e3:63:0d:5f:40:64:2a:
a5:ac:91:52:8b:1a:24:49:dc:3d:ce:62:6b:4f:46:da:95:55:
44:b5:c5:05:b3:c6:b6:87:34:39:63:7d:16:ab:73:1b:5e:ae:
ef:73:ce:3e:3e:fc:7e:df:9e:17:a4:d8:d1:f6:6f:c2:df:85:
dc:d9:5e:95:51:c5:b0:55:76:3e:14:36:b4:61:4c:f9:a0:d8:
6f:f5:04:72:04:e2:8e:ae:5f:64:07:11:28:63:a4:f0:ce:32:
13:9e:1b:bf:76:58:ed:7c:a0:f0:c7:d9:1a:6c:dd:ab:92:fb:
45:44:80:90:ba:33:4f:ad:1d:c3:82:57:57:89:dd:cd:65:95:
96:67:2f:40:74:01:1c:50:b2:73:0b:5b:90:ee:4f:92:8f:55:
f6:d4:33:6f:f4:20:8f:e3:88:ad:ed:fe:22:9a:f6:04:b9:24:
44:d1:bc:35:05:d1:fc:51:d3:a4:27:a9:4e:10:c9:78:d3:2b:
4d:51:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:04 2025 by rpki-client