Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0e4awxNlKWwigt3JI8cBYKjQnPxSTx7/qV+OpwTGvqw=
Subject key identifier: 95:75:CC:AD:D6:96:B8:FA:C7:AF:50:F7:43:3A:A0:8E:BD:4B:BC:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49E05A9D7F8CEB13304AE2C57BFB33B4CC7CB034
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 24 Jun 2025 21:46:44 +0000
ROA not before: Tue 24 Jun 2025 21:41:44 +0000
ROA not after: Tue 23 Jun 2026 21:46:44 +0000
asID: 136787
IP address blocks: 185.205.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:e0:5a:9d:7f:8c:eb:13:30:4a:e2:c5:7b:fb:33:b4:cc:7c:b0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 24 21:41:44 2025 GMT
Not After : Jun 23 21:46:44 2026 GMT
Subject: CN=9575CCADD696B8FAC7AF50F7433AA08EBD4BBCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:cf:5d:11:80:e1:b8:d9:f0:ea:63:52:6f:
e9:9d:eb:95:b2:b3:5e:92:82:17:d1:6f:8d:b5:32:
c3:73:bb:d0:00:fc:12:7b:bf:59:61:d0:6f:7f:86:
9d:91:29:cc:dd:66:1d:29:53:60:b2:4d:64:72:24:
bf:25:27:25:f1:18:34:13:7c:7e:ea:47:80:2b:65:
c1:4c:09:a4:25:ab:cd:a0:47:1f:d4:6e:8f:62:d5:
e2:48:fb:32:cf:f1:0a:8b:cf:d9:41:fd:2a:9d:e9:
f4:ce:37:f8:41:0e:d2:7f:07:87:60:58:8c:64:7d:
93:0d:73:05:b2:2b:3e:0a:a9:d9:9a:c7:a4:fb:93:
19:a7:27:74:70:f0:15:85:4d:7f:0c:5e:76:f5:31:
3d:20:3c:ae:d2:73:17:f1:c4:6d:8e:5c:82:0a:cc:
2c:b6:ae:f5:b0:fe:5c:15:ad:78:a5:2c:4f:7c:77:
a9:77:a0:34:ee:3f:c5:41:2c:9f:33:aa:aa:5d:b0:
38:8d:66:10:b7:0f:94:85:10:98:f1:ab:68:42:49:
3d:47:92:5d:6a:a0:34:99:44:db:2e:6c:80:e0:00:
e7:7e:9c:de:23:dd:23:4a:21:3f:ef:c8:8a:a0:2b:
79:bb:2a:1f:da:f5:75:a0:b7:93:44:41:0c:2c:3f:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:CC:AD:D6:96:B8:FA:C7:AF:50:F7:43:3A:A0:8E:BD:4B:BC:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230352e3234372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4d:bd:3f:8d:7a:f9:0d:dd:65:2e:8d:74:0c:90:67:4f:03:
cb:95:37:62:1d:bf:19:d1:44:c3:c9:8c:e9:5a:b0:6d:1f:7d:
93:e5:4b:2f:35:83:0f:73:ce:e1:e5:91:a1:14:92:8e:a5:d1:
69:d4:35:39:84:20:92:c3:44:0b:47:e3:dd:d2:a5:2b:ce:d2:
7c:18:4d:16:a2:1d:67:6d:54:e8:57:f0:22:67:31:05:2b:4f:
92:8f:86:c4:9a:f7:bf:b2:a3:b8:fc:8a:b1:02:c2:e5:6f:31:
0f:1c:31:3b:41:b8:7a:14:92:98:85:0e:ca:db:15:18:62:81:
df:94:17:ed:d6:56:09:5b:2b:1c:23:ab:9a:23:7b:b5:f5:b2:
8a:c2:96:b5:a6:c4:80:8e:af:e5:06:aa:0e:0d:ff:61:31:34:
79:22:f0:8d:d4:66:fd:42:38:aa:3d:80:3d:d6:a7:ec:3e:92:
0d:ae:73:b0:47:02:8a:b6:3c:6d:af:54:40:8b:2c:69:f6:87:
ea:01:b9:ce:c6:6a:78:d9:8b:2e:ef:50:61:b6:88:bc:0a:9e:
d7:3b:c2:12:89:f1:8b:5a:45:74:ab:28:a0:6d:c1:8a:ee:88:
85:a5:71:ae:64:a5:d6:19:06:82:b6:5c:b5:39:42:be:29:1d:
e0:25:01:63
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUSeBanX+M6xMwSuLFe/sztMx8sDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjQyMTQxNDRaFw0yNjA2MjMyMTQ2NDRaMDMxMTAvBgNV
BAMTKDk1NzVDQ0FERDY5NkI4RkFDN0FGNTBGNzQzM0FBMDhFQkQ0QkJDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQec9dEYDhuNnw6mNSb+md65Wy
s16SghfRb421MsNzu9AA/BJ7v1lh0G9/hp2RKczdZh0pU2CyTWRyJL8lJyXxGDQT
fH7qR4ArZcFMCaQlq82gRx/Ubo9i1eJI+zLP8QqLz9lB/Sqd6fTON/hBDtJ/B4dg
WIxkfZMNcwWyKz4Kqdmax6T7kxmnJ3Rw8BWFTX8MXnb1MT0gPK7ScxfxxG2OXIIK
zCy2rvWw/lwVrXilLE98d6l3oDTuP8VBLJ8zqqpdsDiNZhC3D5SFEJjxq2hCST1H
kl1qoDSZRNsubIDgAOd+nN4j3SNKIT/vyIqgK3m7Kh/a9XWgt5NEQQwsP6Y7AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUlXXMrdaWuPrHr1D3Qzqgjr1LvPowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzUyZTMy
MzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnN9zANBgkqhkiG9w0BAQsFAAOCAQEAjk29P416+Q3dZS6NdAyQZ08Dy5U3
Yh2/GdFEw8mM6VqwbR99k+VLLzWDD3PO4eWRoRSSjqXRadQ1OYQgksNEC0fj3dKl
K87SfBhNFqIdZ21U6FfwImcxBStPko+GxJr3v7KjuPyKsQLC5W8xDxwxO0G4ehSS
mIUOytsVGGKB35QX7dZWCVsrHCOrmiN7tfWyisKWtabEgI6v5QaqDg3/YTE0eSLw
jdRm/UI4qj2APdan7D6SDa5zsEcCirY8ba9UQIssafaH6gG5zsZqeNmLLu9QYbaI
vAqe1zvCEonxi1pFdKsooG3Biu6IhaVxrmSl1hkGgrZctTlCvikd4CUBYw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:39:44 2025 by rpki-client