Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
File: 3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa (raw, json)
Hash identifier: UQLU7PjKCHKVF4fT1LhjYgtyPToaL1+lo/Y85Kin8/4=
Subject key identifier: 1B:7B:5B:0E:51:E0:6E:27:67:42:57:65:C1:19:16:36:8B:4E:D2:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B4BC696FA9D6C25C7E08660D9140D25FC5B5867
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
Signing time: Fri 22 Aug 2025 14:47:13 +0000
ROA not before: Fri 22 Aug 2025 14:42:13 +0000
ROA not after: Fri 21 Aug 2026 14:47:13 +0000
asID: 201882
IP address blocks: 185.209.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4b:c6:96:fa:9d:6c:25:c7:e0:86:60:d9:14:0d:25:fc:5b:58:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:13 2025 GMT
Not After : Aug 21 14:47:13 2026 GMT
Subject: CN=1B7B5B0E51E06E2767425765C11916368B4ED255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:28:fc:7b:ac:c6:66:7e:40:35:f8:3a:e8:
75:84:ac:f9:91:4d:19:a6:4a:07:9d:cb:6e:b2:35:
60:fa:32:14:5a:de:26:2c:03:ba:b6:61:ff:e1:fa:
2d:d6:ee:2c:65:bd:2c:14:cb:fb:a7:f5:e5:55:a6:
97:02:c6:7e:ca:27:d0:32:3a:ea:57:df:83:e8:9e:
2a:1f:e6:b4:0e:e8:82:9e:21:43:5b:64:10:03:5f:
b0:94:a5:c7:31:65:94:9d:5e:77:57:6a:9f:06:a2:
4b:1b:5b:39:80:0f:21:2f:db:c0:47:3f:00:15:4d:
1f:5b:20:da:b0:5f:37:1e:74:34:b8:6c:ee:ca:40:
70:d4:1f:4b:b3:e3:1a:27:55:ee:99:5f:e7:d4:7c:
8d:c6:f8:f2:bd:d0:ac:f4:8d:34:d0:da:af:14:9d:
d2:ce:65:3c:b8:94:1a:67:36:db:50:db:b8:06:de:
fe:79:ab:e5:c2:b4:76:4f:b5:b2:95:92:48:a8:88:
09:2f:63:c3:05:97:3c:5a:d3:b9:a2:91:9d:23:c8:
e0:fa:5d:28:01:3d:b6:53:73:da:35:db:e9:44:47:
a2:6d:37:90:46:b4:4b:a3:6e:d4:87:66:75:8c:3c:
df:bf:14:e1:e5:aa:fb:89:79:4f:6e:98:52:72:84:
04:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:5B:0E:51:E0:6E:27:67:42:57:65:C1:19:16:36:8B:4E:D2:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3232302e302f32342d3234203d3e20323031383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
89:23:08:ad:57:72:4d:38:94:b4:fa:81:3f:29:02:76:fd:e8:
04:46:a2:b0:d8:06:e6:4b:9e:e8:ed:75:6b:7a:a1:3f:fe:9e:
65:07:48:be:ab:14:6d:4b:ae:80:aa:5d:01:85:81:70:43:85:
93:d8:d4:2d:44:de:c0:7e:59:64:be:7f:31:9f:ef:df:7c:71:
85:91:88:84:82:3e:77:28:dd:ae:ff:0a:c1:0b:05:fa:62:58:
6e:34:74:9b:52:9e:f3:2f:c5:a1:ee:e1:01:31:6d:e6:7f:9b:
39:26:52:34:7a:69:60:b9:77:2a:c4:0d:67:51:c4:02:67:02:
8c:34:b9:89:65:d8:7a:6b:5b:13:94:b9:6b:0f:20:cc:3e:6c:
d0:78:08:48:22:57:6d:bc:be:8c:b1:76:ef:d3:d9:95:83:80:
42:a6:ed:e9:87:9c:c4:2d:16:b8:24:c5:4c:d8:5d:f1:24:5a:
e5:53:a0:49:13:aa:71:f4:94:6a:94:da:7c:7c:e6:1f:23:52:
ad:1e:ee:64:6f:ce:ce:ce:52:43:28:0b:de:fe:35:e9:0c:ba:
28:10:2d:d0:26:4c:42:c8:c1:c2:f5:d8:f6:ec:ca:97:20:e7:
ae:24:23:0c:3d:f9:f6:84:f1:46:8f:58:7f:c9:16:d9:20:90:
0a:c9:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:09 2025 by rpki-client