Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
File: 3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ABAwwmBFbEKRHly8zjJ+fMnrb7HnoG+67hOSoFK4hGY=
Subject key identifier: 0E:09:6A:1A:57:6C:C2:EA:01:D4:22:FE:F6:05:29:EA:76:CF:AF:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1417CED7579066170FD5BF89FE783B7ED9C67809
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:13 +0000
ROA not before: Fri 22 Aug 2025 14:42:13 +0000
ROA not after: Fri 21 Aug 2026 14:47:13 +0000
asID: 51167
IP address blocks: 185.207.250.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:17:ce:d7:57:90:66:17:0f:d5:bf:89:fe:78:3b:7e:d9:c6:78:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:13 2025 GMT
Not After : Aug 21 14:47:13 2026 GMT
Subject: CN=0E096A1A576CC2EA01D422FEF60529EA76CFAFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:fc:f4:7e:97:4a:ac:fd:a2:9c:0d:e4:0f:
84:64:da:2b:b2:05:97:db:99:99:ee:65:08:09:81:
7d:d1:d9:56:e7:58:0c:c4:a0:21:48:ce:dd:e1:dc:
cb:4c:10:a8:e9:84:f4:df:8c:b6:5f:18:4f:98:fa:
a1:c3:fc:2e:1e:ad:18:37:f8:9d:f9:c1:86:72:30:
2f:23:0f:45:67:09:71:6c:32:ab:b5:32:c6:d6:6e:
f2:09:fe:80:be:5b:44:93:91:c9:e4:b6:a7:cd:50:
3e:8f:1a:44:bf:a5:ce:a8:37:29:fd:2b:4d:43:69:
a3:e0:50:f7:67:1d:6b:e2:95:a8:02:e1:56:c1:3e:
29:53:ce:f7:67:7a:91:3a:35:a0:50:5f:f4:c9:94:
c7:9f:da:c8:bb:32:7b:80:ef:55:ee:38:3b:8f:e4:
45:d9:24:8d:03:8b:98:1f:64:94:9c:7c:ec:25:d5:
ba:d6:d9:35:fb:81:a4:40:16:cf:e1:62:24:ee:eb:
88:2d:63:ac:03:34:8d:38:db:0e:07:2e:ac:00:5d:
f7:e9:7d:96:03:fd:7a:58:50:9f:6a:e3:5e:1a:a7:
f7:20:ab:48:90:f4:09:b1:07:6c:57:36:3e:23:2f:
58:48:52:cf:bc:88:88:72:ee:bc:e6:41:e7:7a:0c:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:09:6A:1A:57:6C:C2:EA:01:D4:22:FE:F6:05:29:EA:76:CF:AF:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.250.0/24
Signature Algorithm: sha256WithRSAEncryption
17:be:b7:83:12:5e:3c:a7:e7:0f:82:f6:9c:0d:33:bf:68:9f:
2a:36:c7:9b:aa:69:4c:16:7e:fc:54:cd:88:e3:c5:b2:82:bf:
ba:3c:e4:43:5e:98:03:e7:83:b6:32:a7:70:94:ef:80:a7:1e:
3b:84:06:9f:5d:19:3d:a5:e4:13:60:75:bb:d0:64:c6:e7:06:
a8:b3:4b:bc:f6:9d:68:39:c1:64:90:6c:f1:8a:b7:e4:52:2b:
de:01:84:c1:7d:9a:a7:5d:2f:1a:8f:a3:8d:72:1a:35:97:2c:
99:ad:25:bf:ac:ba:3b:c9:04:08:9d:6c:08:4d:d3:24:d3:60:
a9:bd:21:e2:9a:cd:21:29:4d:ec:79:cc:03:bf:41:25:0f:f9:
47:4c:d2:8e:48:59:a0:ae:2f:9d:3b:e4:56:d9:5f:48:fd:e5:
1f:f7:ac:3f:39:44:89:1f:cb:0f:a2:d3:28:b2:1b:26:f7:c5:
8b:db:42:d4:b9:5d:95:79:11:aa:e7:92:cf:2e:9a:3a:b6:05:
d0:1d:27:6a:14:74:ed:25:89:61:4c:3e:ab:c2:80:a2:7d:5a:
41:3a:73:43:c4:9a:ce:26:f9:26:0e:f1:c2:3b:d1:aa:ca:40:
99:97:b8:c6:dc:fa:bb:c8:8f:ea:72:a9:7a:c7:3c:b2:4a:67:
d5:14:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:19 2025 by rpki-client