Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e20383334.roa
File: 3138352e3230352e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jLgiCWqPCm4IBRBKpHxUXQOQT7bGVzfbz0zF4qEDhVs=
Subject key identifier: A0:07:83:1B:9A:5C:44:5D:EA:01:F6:5E:16:1F:4A:38:B6:A6:43:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D6F1D7A0E15416D9DCAF83221AFA182C69BE30E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e20383334.roa
Signing time: Sat 23 Aug 2025 07:29:26 +0000
ROA not before: Sat 23 Aug 2025 07:24:26 +0000
ROA not after: Sat 22 Aug 2026 07:29:26 +0000
asID: 834
IP address blocks: 185.205.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:6f:1d:7a:0e:15:41:6d:9d:ca:f8:32:21:af:a1:82:c6:9b:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 23 07:24:26 2025 GMT
Not After : Aug 22 07:29:26 2026 GMT
Subject: CN=A007831B9A5C445DEA01F65E161F4A38B6A64351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:cf:8c:db:51:1d:30:32:0d:99:04:60:bc:
2e:7f:80:95:b1:42:17:0a:b5:68:30:6b:48:c5:7d:
65:9e:ab:72:87:f6:17:33:e3:a8:eb:2e:2d:3e:0c:
ad:46:70:11:e3:fe:8c:0f:58:27:cb:fa:be:75:08:
17:d7:ce:2a:b4:33:d8:11:c2:4d:0f:05:ee:de:58:
ce:f2:0e:40:5a:36:77:d6:82:a5:a9:9f:53:30:2e:
d6:37:85:8d:e7:2e:32:d4:65:9f:f0:64:9d:68:c6:
8e:ce:08:e8:e8:d7:39:ec:0a:f3:c7:b4:bf:4a:39:
82:3d:0e:83:9f:2f:cb:8d:90:ca:64:89:5a:b8:5b:
7e:41:1d:31:ae:c4:e8:b4:fc:23:0b:20:ed:77:69:
15:37:dc:a6:c6:fa:30:38:99:08:d5:81:e9:db:77:
97:2c:20:fc:2a:47:b2:3d:34:b2:67:72:c6:39:c2:
6b:d4:44:00:64:3e:a2:ee:90:e4:37:2d:1b:e2:26:
7b:65:d3:0c:87:4c:df:8d:bf:70:6b:8b:b3:1d:48:
02:c1:ec:e5:eb:f9:c2:5a:33:c4:83:ca:ba:38:2a:
52:06:c9:57:1f:a9:a5:18:17:30:2b:8c:77:02:70:
d9:94:fc:1d:df:08:02:62:7a:ff:25:c5:81:aa:51:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:07:83:1B:9A:5C:44:5D:EA:01:F6:5E:16:1F:4A:38:B6:A6:43:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3139342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.194.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bc:d1:45:12:af:43:33:09:49:48:16:60:db:d2:50:d1:b3:
af:f0:5e:71:f6:40:3b:9a:21:da:ba:d2:c3:5c:a9:97:9c:2f:
23:f9:45:a1:5a:39:de:86:40:af:b5:7a:e6:27:ee:15:32:c5:
e3:68:1e:14:01:a8:99:f0:be:5b:f0:d8:e2:ea:6b:4b:37:06:
8d:a8:4a:b8:72:02:11:a1:11:b5:ba:0a:71:52:79:42:5d:d6:
fe:00:17:74:63:a7:4d:ba:1f:30:56:08:14:84:34:0b:d9:3a:
6d:28:f8:0e:63:3a:72:bd:de:90:87:a3:78:95:26:a4:5a:92:
7f:2e:96:2f:76:fc:bf:02:17:35:c6:a2:5d:ab:68:55:f0:d2:
82:9f:e8:56:30:d7:66:f0:d0:f9:6b:71:56:53:48:b9:5d:b5:
47:c9:ad:cf:6d:bc:be:79:35:eb:30:59:73:9e:9a:be:de:e8:
85:57:ae:26:4c:bc:68:08:0c:64:60:14:48:43:c5:90:42:53:
cf:87:a9:4d:da:c5:3b:cf:ef:5e:44:e2:e1:d0:8e:fd:18:b7:
68:87:6c:6e:55:17:ea:d4:be:dc:a1:60:0b:48:67:d0:76:f5:
7d:b4:bf:d8:f0:27:72:57:94:9b:93:b0:80:f6:cb:7a:2e:09:
cc:a7:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:38 2025 by rpki-client