Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa
File: 3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: BVkswBqpqE3goj2GWtQBeqbJw1OoaCdhRrBdrlwCxXQ=
Subject key identifier: CD:43:65:4C:8C:44:77:38:7D:7F:80:C7:77:76:13:04:9D:09:58:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4CC14CDF494D0A709D8049FB65D46A81C8972A3B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:13 +0000
ROA not before: Fri 22 Aug 2025 14:42:13 +0000
ROA not after: Fri 21 Aug 2026 14:47:13 +0000
asID: 136787
IP address blocks: 185.207.248.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c1:4c:df:49:4d:0a:70:9d:80:49:fb:65:d4:6a:81:c8:97:2a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:13 2025 GMT
Not After : Aug 21 14:47:13 2026 GMT
Subject: CN=CD43654C8C4477387D7F80C7777613049D095887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:7b:a8:bb:29:ce:28:9f:1c:e9:50:a8:c6:
b3:4e:b5:86:d1:60:7d:d0:15:d2:c9:6c:75:3d:eb:
4b:be:8e:1e:10:a3:df:3e:ed:66:f9:4f:5a:67:5c:
a7:2d:1b:4e:58:a5:56:62:48:ee:41:67:db:fb:71:
e6:eb:06:40:ef:0a:48:47:da:12:a6:84:37:3d:2c:
35:e9:93:f2:aa:60:64:18:56:68:23:ef:07:0e:f5:
21:61:c6:05:92:ef:9c:d4:9b:53:c7:79:aa:8b:3d:
d2:59:df:ae:32:59:49:8f:ed:7c:f5:12:03:a4:80:
15:0c:55:a6:85:c1:29:a0:de:96:bc:e8:99:b7:9a:
f3:e4:9d:4c:c3:a2:91:47:88:ae:75:fa:28:ce:97:
42:e4:e5:8c:f6:fa:11:4f:99:1e:9c:a2:19:58:4c:
dc:09:d5:25:4a:28:35:53:21:25:f1:08:76:c0:87:
04:22:1f:97:32:96:b5:e0:c1:28:65:7d:fa:da:1c:
2c:9d:e8:e5:26:21:54:67:cc:8d:7f:00:ad:ae:fb:
81:7a:f4:85:c0:55:af:11:f8:ef:b6:ad:ca:6b:2b:
a7:b4:3d:46:5e:63:71:b9:2c:a6:c9:3b:5a:a2:19:
a5:46:b9:1d:41:8c:e7:5f:59:81:10:31:67:bf:46:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:65:4C:8C:44:77:38:7D:7F:80:C7:77:76:13:04:9D:09:58:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.248.0/24
Signature Algorithm: sha256WithRSAEncryption
23:69:0f:d7:fa:4c:be:a0:d4:1e:b1:a5:43:71:f8:90:36:8e:
00:0c:3e:09:2f:c4:ff:67:e7:48:4c:2e:9a:6f:5f:fe:3f:54:
9d:dc:df:90:68:bd:98:28:91:dd:f9:1c:47:99:5c:f9:1e:10:
28:d5:c8:14:3a:e1:eb:92:62:2a:64:a1:c2:86:3f:c6:79:90:
1a:1f:6a:ff:77:3b:54:c6:d5:be:f9:41:90:26:b4:3f:6e:32:
f4:65:bf:a6:f4:91:c4:f4:be:7c:a7:7e:62:46:f8:e1:2d:fb:
13:4f:a2:91:11:61:40:2f:5c:26:67:c0:1d:74:5c:ea:0d:55:
ed:7a:fa:b4:cb:59:f3:99:1a:4f:af:6d:a4:58:f3:83:3d:2e:
85:56:31:b3:c4:16:94:b1:b4:f2:37:38:41:65:ac:40:66:28:
bc:5c:28:82:a8:9f:31:68:f2:56:cc:9f:b1:06:e7:ef:0f:c0:
57:7f:1f:e8:82:18:c1:cd:ed:3b:0a:a0:b9:1a:75:77:53:75:
a0:9f:46:58:f7:e2:eb:a6:1a:85:78:f8:71:72:5c:b6:98:58:
86:e7:f6:60:3e:b5:1f:1a:f5:bb:13:a4:86:de:8b:0d:67:a5:
f6:ff:59:4c:80:75:75:af:21:f9:f9:a6:1e:61:40:aa:84:b5:
17:97:b9:fa
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUTMFM30lNCnCdgEn7ZdRqgciXKjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTNaFw0yNjA4MjExNDQ3MTNaMDMxMTAvBgNV
BAMTKENENDM2NTRDOEM0NDc3Mzg3RDdGODBDNzc3NzYxMzA0OUQwOTU4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcnuouynOKJ8c6VCoxrNOtYbR
YH3QFdLJbHU960u+jh4Qo98+7Wb5T1pnXKctG05YpVZiSO5BZ9v7cebrBkDvCkhH
2hKmhDc9LDXpk/KqYGQYVmgj7wcO9SFhxgWS75zUm1PHeaqLPdJZ364yWUmP7Xz1
EgOkgBUMVaaFwSmg3pa86Jm3mvPknUzDopFHiK51+ijOl0Lk5Yz2+hFPmR6cohlY
TNwJ1SVKKDVTISXxCHbAhwQiH5cylrXgwShlffraHCyd6OUmIVRnzI1/AK2u+4F6
9IXAVa8R+O+2rcprK6e0PUZeY3G5LKbJO1qiGaVGuR1BjOdfWYEQMWe/RsblAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUzUNlTIxEdzh9f4DHd3YTBJ0JWIcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzcyZTMy
MzQzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnP+DANBgkqhkiG9w0BAQsFAAOCAQEAI2kP1/pMvqDUHrGlQ3H4kDaOAAw+
CS/E/2fnSEwumm9f/j9UndzfkGi9mCiR3fkcR5lc+R4QKNXIFDrh65JiKmShwoY/
xnmQGh9q/3c7VMbVvvlBkCa0P24y9GW/pvSRxPS+fKd+Ykb44S37E0+ikRFhQC9c
JmfAHXRc6g1V7Xr6tMtZ85kaT69tpFjzgz0uhVYxs8QWlLG08jc4QWWsQGYovFwo
gqifMWjyVsyfsQbn7w/AV38f6IIYwc3tOwqguRp1d1N1oJ9GWPfi66YahXj4cXJc
tphYhuf2YD61Hxr1uxOkht6LDWel9v9ZTIB1da8h+fmmHmFAqoS1F5e5+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:38 2025 by rpki-client