Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yZx+L8g4l/S9cNvDUjnJkxtJS1UXmDNzf1B45dQHIeA=
Subject key identifier: D5:0A:B5:27:62:39:EA:70:C6:32:48:FA:9E:3F:66:6F:60:88:0D:78
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1455391B534D9F1D284A33EA84F969CE6C695407
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:41 +0000
ROA not before: Sun 28 Sep 2025 20:42:41 +0000
ROA not after: Sun 27 Sep 2026 20:47:41 +0000
asID: 136787
IP address blocks: 185.209.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:55:39:1b:53:4d:9f:1d:28:4a:33:ea:84:f9:69:ce:6c:69:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:41 2025 GMT
Not After : Sep 27 20:47:41 2026 GMT
Subject: CN=D50AB5276239EA70C63248FA9E3F666F60880D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:59:28:0b:58:2a:90:66:5e:d3:f8:c1:a6:
80:57:9a:f6:f4:1f:89:5f:f2:99:5a:76:f9:63:31:
d3:3c:24:95:00:ad:a1:9d:cf:e3:e7:3c:b6:5a:d4:
83:a1:61:8b:fd:c7:df:52:c5:03:50:a9:c8:78:5c:
3e:5d:c5:2d:62:a7:bb:d8:b3:b3:c8:29:0d:2c:79:
37:6a:d8:11:fa:47:9b:8d:10:99:b7:68:77:1a:37:
5d:d3:d5:ae:36:b9:ee:bb:fd:cc:f9:d1:94:6f:87:
6c:68:32:7c:52:8c:e7:2c:4c:78:fe:13:de:1b:9b:
05:e9:5a:ac:cf:76:7e:de:d4:7d:aa:24:09:f3:62:
91:48:b9:8a:bd:1a:85:f7:c8:a1:bb:c1:15:d1:59:
30:a5:e8:28:17:18:26:e0:40:f1:4c:36:0e:0e:7a:
19:35:11:db:2e:7b:17:16:03:65:84:ee:3c:a6:d2:
ae:3c:07:56:f1:9a:40:4e:06:67:05:f5:be:b2:6c:
26:d0:7c:b5:d3:86:d7:94:34:0c:16:27:85:da:eb:
11:b5:43:db:23:2c:ce:13:29:5e:5e:67:10:bd:f3:
63:9c:2e:79:25:14:ce:a4:47:f0:d1:be:fc:f2:b1:
4c:cc:56:46:78:0b:4c:c2:65:89:ef:3d:24:9d:ee:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:B5:27:62:39:EA:70:C6:32:48:FA:9E:3F:66:6F:60:88:0D:78
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230392e3233312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.231.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3e:79:92:6e:bf:f4:85:96:99:7b:b5:f9:7a:a9:bd:bd:9c:
31:eb:28:cb:20:ea:0c:a8:7e:77:41:63:b4:7a:3b:29:7a:fb:
31:6c:a4:9b:19:81:f4:6e:e5:60:cf:0e:40:62:d6:69:ad:b6:
c7:c3:b3:b2:f1:5f:b3:94:f4:2f:0b:ae:08:23:6d:29:e7:d3:
6c:50:45:1b:f0:9f:a1:6f:07:9d:a1:69:2e:82:80:80:d3:54:
57:06:e4:0e:21:5e:c9:ce:d2:1f:b5:3b:0d:ee:cc:4c:09:10:
8d:f4:bd:ba:e8:ce:a9:b6:b8:51:65:ef:a5:92:2a:28:fc:27:
d2:bd:34:a3:78:15:ea:22:03:15:85:7f:1f:94:3f:b3:84:43:
67:a1:2a:c2:a9:90:f7:fd:59:6b:b9:fe:e7:6c:89:85:32:73:
71:6c:e9:f6:c8:fa:77:dc:2b:05:86:3a:35:09:0c:5d:0e:c4:
63:b3:38:75:2d:0b:05:81:7e:f5:72:37:e2:5f:07:49:78:84:
2c:79:eb:09:7a:cc:68:00:22:15:60:f4:f4:45:f8:9d:da:b0:
51:ea:ed:aa:2c:9a:e0:a4:77:e9:82:f3:cb:b5:fd:2a:42:24:
27:6f:9c:17:7d:f9:8d:ca:5a:68:bf:b2:f3:9a:14:6d:13:93:
4f:2f:99:03
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFFU5G1NNnx0oSjPqhPlpzmxpVAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MjgyMDQyNDFaFw0yNjA5MjcyMDQ3NDFaMDMxMTAvBgNV
BAMTKEQ1MEFCNTI3NjIzOUVBNzBDNjMyNDhGQTlFM0Y2NjZGNjA4ODBENzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfglkoC1gqkGZe0/jBpoBXmvb0
H4lf8pladvljMdM8JJUAraGdz+PnPLZa1IOhYYv9x99SxQNQqch4XD5dxS1ip7vY
s7PIKQ0seTdq2BH6R5uNEJm3aHcaN13T1a42ue67/cz50ZRvh2xoMnxSjOcsTHj+
E94bmwXpWqzPdn7e1H2qJAnzYpFIuYq9GoX3yKG7wRXRWTCl6CgXGCbgQPFMNg4O
ehk1EdsuexcWA2WE7jym0q48B1bxmkBOBmcF9b6ybCbQfLXThteUNAwWJ4Xa6xG1
Q9sjLM4TKV5eZxC982OcLnklFM6kR/DRvvzysUzMVkZ4C0zCZYnvPSSd7h2hAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU1Qq1J2I56nDGMkj6nj9mb2CIDXgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMwMzkyZTMy
MzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALnR5zANBgkqhkiG9w0BAQsFAAOCAQEAMD55km6/9IWWmXu1+Xqpvb2cMeso
yyDqDKh+d0FjtHo7KXr7MWykmxmB9G7lYM8OQGLWaa22x8OzsvFfs5T0LwuuCCNt
KefTbFBFG/CfoW8HnaFpLoKAgNNUVwbkDiFeyc7SH7U7De7MTAkQjfS9uujOqba4
UWXvpZIqKPwn0r00o3gV6iIDFYV/H5Q/s4RDZ6EqwqmQ9/1Za7n+52yJhTJzcWzp
9sj6d9wrBYY6NQkMXQ7EY7M4dS0LBYF+9XI34l8HSXiELHnrCXrMaAAiFWD09EX4
ndqwUertqiya4KR36YLzy7X9KkIkJ2+cF335jcpaaL+y85oUbROTTy+ZAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:06 2025 by rpki-client