Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
File: 3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: GQJSjvWVGmvoZlSwAoaS7ggFSwNVLhhrtEiwnv25EMc=
Subject key identifier: 46:40:31:6E:FB:72:C2:DD:CC:C9:F4:C6:FB:13:3B:95:06:04:7D:30
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2ED0B5BFAAB89A2B1C6478CCC6186C05CE123FE3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:15 +0000
ROA not before: Fri 22 Aug 2025 14:42:15 +0000
ROA not after: Fri 21 Aug 2026 14:47:15 +0000
asID: 136787
IP address blocks: 185.207.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d0:b5:bf:aa:b8:9a:2b:1c:64:78:cc:c6:18:6c:05:ce:12:3f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:15 2025 GMT
Not After : Aug 21 14:47:15 2026 GMT
Subject: CN=4640316EFB72C2DDCCC9F4C6FB133B9506047D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:65:bd:0c:6a:45:d6:98:6f:ed:14:5a:14:
23:9e:84:24:be:7f:7a:c4:38:73:41:29:84:07:3c:
c2:2d:5f:4d:78:0b:24:e3:c3:62:3a:6c:f5:05:41:
65:ee:ed:66:f9:bb:5b:f2:71:3e:55:02:77:b2:3c:
57:51:f5:bb:dd:94:e9:1b:6a:df:98:96:7e:41:2e:
7b:4d:74:f0:ec:6d:69:cd:06:38:27:a0:03:c3:65:
28:eb:01:9e:0b:15:0a:9c:87:8b:d3:4b:1d:ca:da:
01:6b:cf:f2:18:c3:7d:a1:f6:ed:2b:0e:4e:84:53:
3c:da:27:b5:07:89:ad:e7:7f:a1:f3:77:39:43:45:
63:b0:8e:8f:21:4e:7c:45:de:e4:cb:55:ed:ed:f6:
06:c6:cf:52:f0:85:f5:d8:7e:cc:a0:aa:8a:8d:f7:
f5:3b:7b:6d:58:31:c1:93:64:9d:da:d2:de:6d:2b:
40:be:6b:3a:23:8c:ad:a5:d1:c6:78:9c:65:3b:b1:
3c:d1:29:97:2e:4e:10:50:7c:7b:09:4b:3d:b2:69:
2d:6c:81:3d:90:a2:1c:9b:49:b6:72:05:9e:f8:2a:
06:a7:77:6c:1f:e0:13:a3:d1:62:1a:10:8b:f0:98:
09:14:f2:59:a5:01:9d:4c:11:02:d8:3e:53:f4:46:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:31:6E:FB:72:C2:DD:CC:C9:F4:C6:FB:13:3B:95:06:04:7D:30
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3234392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3b:99:00:f1:94:8c:94:2e:97:ce:91:e2:b4:74:65:27:41:
cd:54:f7:4a:29:27:5a:35:a0:31:91:99:ef:2c:d8:77:45:48:
d0:a8:e6:ad:a1:36:cc:85:e1:cc:65:e8:46:64:9d:33:8c:d3:
96:db:bf:69:0d:fa:00:1c:c5:f7:95:f4:b8:14:65:5a:11:c6:
b8:27:6b:73:b0:3b:cc:b6:d9:01:08:ec:13:03:2d:96:bf:23:
86:5d:0a:80:3d:33:4b:1a:9a:2f:ab:05:28:09:38:da:b8:e3:
29:01:35:55:01:ce:d8:9f:83:19:de:fe:f2:07:02:c9:8a:91:
d8:6d:f0:76:29:65:d0:d1:70:bf:7e:b2:3a:d6:46:f9:74:a5:
70:b8:19:71:d1:6c:68:88:30:a0:ef:2c:e6:8b:0b:1d:2f:c5:
16:be:ce:e3:47:8d:9c:11:61:d4:39:fe:c8:2e:9d:8f:b5:78:
fa:90:9c:0a:56:f5:d4:73:f4:10:a0:b1:6a:17:64:a7:3e:3d:
28:1f:a0:d1:15:9f:5c:cd:e9:76:77:70:79:31:e6:65:cc:35:
b1:7f:3c:5f:32:dc:3d:d0:3a:0f:dd:8b:95:49:0c:9f:9f:06:
ff:c6:81:96:1e:17:13:ab:63:93:0b:9d:8d:35:95:8b:d3:e2:
76:64:47:46
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIULtC1v6q4miscZHjMxhhsBc4SP+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTVaFw0yNjA4MjExNDQ3MTVaMDMxMTAvBgNV
BAMTKDQ2NDAzMTZFRkI3MkMyRERDQ0M5RjRDNkZCMTMzQjk1MDYwNDdEMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvmW9DGpF1phv7RRaFCOehCS+
f3rEOHNBKYQHPMItX014CyTjw2I6bPUFQWXu7Wb5u1vycT5VAneyPFdR9bvdlOkb
at+Yln5BLntNdPDsbWnNBjgnoAPDZSjrAZ4LFQqch4vTSx3K2gFrz/IYw32h9u0r
Dk6EUzzaJ7UHia3nf6HzdzlDRWOwjo8hTnxF3uTLVe3t9gbGz1LwhfXYfsygqoqN
9/U7e21YMcGTZJ3a0t5tK0C+azojjK2l0cZ4nGU7sTzRKZcuThBQfHsJSz2yaS1s
gT2QohybSbZyBZ74Kgand2wf4BOj0WIaEIvwmAkU8lmlAZ1MEQLYPlP0RrvzAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQURkAxbvtywt3MyfTG+xM7lQYEfTAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzcyZTMy
MzQzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnP+TANBgkqhkiG9w0BAQsFAAOCAQEAXjuZAPGUjJQul86R4rR0ZSdBzVT3
SiknWjWgMZGZ7yzYd0VI0KjmraE2zIXhzGXoRmSdM4zTltu/aQ36ABzF95X0uBRl
WhHGuCdrc7A7zLbZAQjsEwMtlr8jhl0KgD0zSxqaL6sFKAk42rjjKQE1VQHO2J+D
Gd7+8gcCyYqR2G3wdill0NFwv36yOtZG+XSlcLgZcdFsaIgwoO8s5osLHS/FFr7O
40eNnBFh1Dn+yC6dj7V4+pCcClb11HP0EKCxahdkpz49KB+g0RWfXM3pdndweTHm
Zcw1sX88XzLcPdA6D92LlUkMn58G/8aBlh4XE6tjkwudjTWVi9PidmRHRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:36 2025 by rpki-client