Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: D14Q4207bCNQmtNs0PWf1u49Cm/VyirCwucV0dUNqqA=
Subject key identifier: 5C:C2:32:A1:93:1D:84:52:9A:80:B4:32:A7:93:A4:97:FC:66:D6:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51D736F0176F33BFDF1A1D51A6276B5C05F26A2D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 22 Aug 2025 14:47:11 +0000
ROA not before: Fri 22 Aug 2025 14:42:11 +0000
ROA not after: Fri 21 Aug 2026 14:47:11 +0000
asID: 141039
IP address blocks: 185.203.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d7:36:f0:17:6f:33:bf:df:1a:1d:51:a6:27:6b:5c:05:f2:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:11 2025 GMT
Not After : Aug 21 14:47:11 2026 GMT
Subject: CN=5CC232A1931D84529A80B432A793A497FC66D653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:70:d8:78:69:95:31:cc:bc:06:24:fe:65:
52:6a:a1:66:81:34:23:e0:a8:1b:09:f6:3a:d9:06:
1a:78:7f:24:54:b7:3f:4d:f2:05:e9:9d:51:59:da:
7f:2e:73:ec:1e:82:b1:56:5d:fa:3d:60:17:3f:6a:
75:bc:34:37:9e:fe:66:40:ff:e6:52:18:26:d8:c4:
11:d7:d6:21:cc:75:09:9e:af:9d:a4:6e:15:de:2b:
6d:42:85:4f:d9:21:95:0f:0d:6f:0e:47:8e:16:0c:
11:85:6e:82:bd:f6:70:c6:cc:bb:de:6b:8f:72:73:
83:a2:dc:7b:b6:40:49:12:48:64:33:d7:09:5e:af:
10:5c:35:c2:de:a4:0c:50:01:31:08:55:74:09:ad:
3e:f3:0a:da:51:4d:39:3e:45:72:e4:64:b8:63:28:
01:e2:fe:81:1d:9d:73:e7:cc:b1:a8:cd:29:a8:8c:
e8:96:3a:98:48:67:6a:75:25:5f:ad:9b:cd:e3:95:
ff:15:db:96:b8:34:07:e1:95:30:b5:b3:50:2a:60:
d4:fe:40:b2:1d:ba:4e:b1:8d:3c:46:58:bb:a0:f9:
77:6a:6f:c5:ca:dc:39:d2:fe:c5:88:d8:0b:18:3c:
1b:6a:e7:1b:7d:e2:c2:a4:05:6a:9b:61:ca:e2:36:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:32:A1:93:1D:84:52:9A:80:B4:32:A7:93:A4:97:FC:66:D6:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231382e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.218.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a3:d9:db:b9:6e:e8:df:eb:83:1b:df:ed:3a:f2:92:1c:ba:
20:78:82:84:b0:c9:63:87:1c:ad:c6:47:11:e8:5a:33:46:96:
c2:b4:29:36:e2:1c:b6:6a:e3:71:e7:91:1b:0f:eb:7e:35:7a:
6f:ac:9f:75:22:74:9b:0d:da:d5:56:cb:13:35:49:f6:b9:0a:
b8:7f:da:0f:6e:aa:5f:02:79:7b:e1:8d:a4:e4:c6:6c:64:7f:
aa:97:5c:55:38:74:4d:81:68:10:32:4a:6f:8a:2a:78:59:dd:
53:61:43:41:f8:63:fe:f3:3d:a1:1b:e5:f1:fa:0a:08:a9:6d:
02:2a:1b:6e:10:5d:b2:d2:81:6e:85:bf:e8:a5:31:f8:1d:cf:
bc:47:e3:b3:b8:bc:f0:35:b0:c6:fe:62:a5:5d:f2:0f:d0:9e:
88:5f:aa:cb:0a:b4:52:42:18:de:5d:ae:ec:8d:5d:c0:d2:45:
09:f0:37:95:65:82:b5:3d:e7:29:27:27:f4:5d:4b:5e:48:a0:
47:4e:75:92:2d:0d:10:89:17:ad:15:22:4f:0b:25:b8:9d:0e:
75:59:45:33:a3:f4:e2:ab:a5:2a:85:65:0e:72:7e:2a:91:2d:
f6:4a:e6:52:4d:90:ce:cf:3d:05:66:90:e7:15:17:15:9a:42:
09:5a:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:47 2025 by rpki-client