Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
File: 3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: lTlU2U20+XQh8Q4q47XCrzS+eW2NgoLIk33XF+YwV8o=
Subject key identifier: 78:84:39:1C:CD:B2:17:40:78:B9:4B:57:DC:62:1D:48:99:B1:17:1B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4628EB90BA9378104D631144882C50272ECB84B4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:13 +0000
ROA not before: Fri 22 Aug 2025 14:42:13 +0000
ROA not after: Fri 21 Aug 2026 14:47:13 +0000
asID: 51167
IP address blocks: 185.202.223.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:28:eb:90:ba:93:78:10:4d:63:11:44:88:2c:50:27:2e:cb:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:13 2025 GMT
Not After : Aug 21 14:47:13 2026 GMT
Subject: CN=7884391CCDB2174078B94B57DC621D4899B1171B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:52:f5:2b:69:6a:be:ab:92:bb:9c:47:ee:
2d:9c:1e:a7:44:0d:d7:2a:48:a0:d8:8b:a3:fb:e3:
17:fd:01:ca:fd:fe:1e:95:ce:9a:d5:65:92:85:83:
00:db:cc:b0:5c:99:72:7c:b7:7a:4a:9e:32:9f:ee:
ae:5e:fb:02:f8:c3:eb:5b:57:66:9d:a0:25:17:20:
3e:e1:1a:8e:90:b6:d9:46:4e:f5:ff:09:f8:61:24:
fd:37:9d:b9:66:42:c4:3a:18:95:be:51:00:69:9f:
d3:ce:57:01:ef:71:21:79:10:0a:a6:ec:8a:f1:ad:
6c:ea:82:64:e6:e9:29:d9:28:d6:9e:82:6a:30:ca:
99:35:86:f9:c9:5c:9f:91:e3:76:0f:6e:70:cf:fa:
04:e3:b9:db:57:a9:21:89:21:d6:40:d2:6f:c1:dd:
8d:ab:ae:d3:be:89:12:92:ea:5a:7b:84:a9:a5:4e:
d5:49:a9:a5:3d:8f:28:a1:19:ef:49:d1:6c:5f:be:
fa:32:7b:51:10:63:aa:db:a7:b8:9d:eb:22:87:c6:
a5:df:38:af:b7:c6:7a:c2:a6:2a:01:1e:b5:e9:37:
f8:71:e4:6c:f4:9d:a8:72:16:ee:9c:8f:1d:78:a0:
5b:1c:5c:b6:ff:bb:b1:ab:72:fd:2c:34:ea:75:d6:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:39:1C:CD:B2:17:40:78:B9:4B:57:DC:62:1D:48:99:B1:17:1B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.223.0/24
Signature Algorithm: sha256WithRSAEncryption
71:54:71:f4:88:df:61:1d:17:a6:b4:79:75:fd:fc:a3:7c:6f:
42:22:61:22:5b:20:ab:02:e7:1e:0a:ce:c7:20:63:02:75:90:
3d:82:05:ec:a6:29:ef:6e:2d:75:2f:65:8d:0c:09:96:b0:5e:
79:13:42:90:19:02:7f:14:49:6a:8a:37:bc:57:c0:32:98:ce:
5b:4b:a8:2b:07:a3:1d:6a:b8:b1:68:d5:b6:c8:28:c1:23:e6:
f8:04:1a:df:51:46:d6:d2:08:1d:77:78:7e:4f:af:17:7d:ed:
52:a9:30:67:ef:e3:b5:2e:8a:10:8c:6b:47:70:c1:0d:34:68:
ce:93:38:c1:4d:3f:f6:2f:56:63:02:c8:5c:06:a3:9e:8a:54:
e8:c5:9b:f8:10:79:13:70:ba:ec:e2:08:ad:d9:d2:5e:1d:9e:
97:3d:82:d5:27:fa:33:47:47:8b:df:1c:6d:44:40:aa:72:ec:
02:04:40:a7:23:2e:42:24:f0:74:31:b1:0e:2a:49:4a:d5:7b:
39:7e:ec:2a:cd:70:e9:a2:18:d4:50:d9:3d:18:88:b9:40:25:
1a:7c:9b:d2:ae:26:da:3a:c1:06:02:06:76:c7:b0:66:bc:af:
6e:91:eb:73:7f:b8:aa:41:50:24:f8:88:7d:28:1e:17:d8:50:
11:39:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:18 2025 by rpki-client