Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
File: 3138352e3231312e362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: k/gA0dRfIsMwTlqeE7EWMvIECLq9M4PnpoI3M0mj38c=
Subject key identifier: 7A:42:7C:0D:3A:FD:BC:83:57:2F:3F:F0:40:A5:0B:CC:9B:57:C5:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 48B2D00A0FD8EE41BD85110605DFEC695AE951E3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:12 +0000
ROA not before: Fri 22 Aug 2025 14:42:12 +0000
ROA not after: Fri 21 Aug 2026 14:47:12 +0000
asID: 51167
IP address blocks: 185.211.6.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b2:d0:0a:0f:d8:ee:41:bd:85:11:06:05:df:ec:69:5a:e9:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:12 2025 GMT
Not After : Aug 21 14:47:12 2026 GMT
Subject: CN=7A427C0D3AFDBC83572F3FF040A50BCC9B57C571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:19:af:b1:dd:4f:00:6e:25:68:54:ff:37:
c9:f5:12:7b:2e:35:8b:25:0c:f5:89:48:83:f1:79:
57:e2:0b:53:65:bd:92:54:eb:b1:81:ec:43:b0:48:
cf:d6:a4:89:09:55:cb:d6:e6:c6:1f:48:01:cb:0c:
4e:ac:3c:d3:df:89:9c:fe:b6:8b:f8:47:35:ab:81:
50:74:cf:cc:2d:8b:19:c5:aa:e5:06:39:94:53:bb:
f8:27:de:ee:a0:5c:0b:fc:51:79:3d:4a:83:da:64:
44:c5:94:a0:e1:9f:eb:81:77:7f:cf:82:e9:73:8c:
5d:04:90:05:07:62:9a:52:13:9c:d9:bc:c2:ea:44:
8f:88:0d:50:7b:64:7e:34:d9:4d:e3:34:2a:2e:e3:
e6:69:9f:4b:da:6d:a7:37:11:f0:c2:56:ba:fb:9e:
68:08:6a:2d:12:a7:1c:5f:c2:e4:b2:c4:cb:37:9f:
9b:03:f8:e8:09:4b:44:06:dc:8f:31:5f:3f:2b:a6:
85:2f:50:8e:5f:55:75:ae:c8:63:7d:79:c7:04:aa:
ff:2a:d4:5d:7f:81:67:a5:3d:2f:1c:1f:a4:61:ab:
21:6a:fc:26:dd:94:8f:3b:6c:b6:6f:bf:e6:75:c0:
80:c3:3c:60:ad:87:fe:0c:96:b1:b2:7c:c3:e8:32:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:42:7C:0D:3A:FD:BC:83:57:2F:3F:F0:40:A5:0B:CC:9B:57:C5:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231312e362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.6.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e8:95:ef:50:eb:66:2f:27:d6:c3:a8:ea:bd:ec:48:9c:a7:
81:20:c1:b0:81:63:b7:19:24:94:a6:a8:77:bd:e1:8a:b4:f6:
4e:3d:1d:3f:da:4e:f6:6c:38:58:49:b7:36:27:cc:a5:b0:28:
63:7c:69:1b:0d:ed:7a:56:2c:ff:29:af:01:6d:02:ab:c3:24:
73:df:4a:af:cf:3b:99:1d:3e:d5:7b:16:87:62:1d:5b:ce:6b:
d7:91:20:21:b1:1f:97:4c:e9:92:c5:06:62:d1:01:53:e2:9d:
4b:6d:33:4e:4b:19:ea:ec:3b:a3:11:29:4e:ea:1d:8b:cf:c1:
39:a3:0e:10:97:44:8c:e2:00:15:eb:b0:ff:7c:61:bf:ed:7d:
5f:e8:f9:e5:e0:e8:bc:5b:de:d1:d3:50:b8:bd:c8:86:ea:97:
a2:6b:cb:68:22:17:41:49:3a:16:25:af:83:c5:b8:47:f6:5b:
46:b7:60:97:2f:e1:9e:a6:32:dc:41:c5:68:d1:59:1d:8c:70:
ca:76:3d:8b:b9:45:15:3f:9f:c6:ea:2f:74:e4:b6:3c:a5:91:
ef:8c:4e:9f:ac:61:3e:a1:20:f5:7c:46:bc:88:90:fb:4a:d0:
06:9f:e7:a0:03:4a:b0:80:2d:13:84:eb:87:d7:e4:43:ee:bb:
fb:55:2c:7a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSLLQCg/Y7kG9hREGBd/saVrpUeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTJaFw0yNjA4MjExNDQ3MTJaMDMxMTAvBgNV
BAMTKDdBNDI3QzBEM0FGREJDODM1NzJGM0ZGMDQwQTUwQkNDOUI1N0M1NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01Bmvsd1PAG4laFT/N8n1Ensu
NYslDPWJSIPxeVfiC1NlvZJU67GB7EOwSM/WpIkJVcvW5sYfSAHLDE6sPNPfiZz+
tov4RzWrgVB0z8wtixnFquUGOZRTu/gn3u6gXAv8UXk9SoPaZETFlKDhn+uBd3/P
gulzjF0EkAUHYppSE5zZvMLqRI+IDVB7ZH402U3jNCou4+Zpn0vabac3EfDCVrr7
nmgIai0SpxxfwuSyxMs3n5sD+OgJS0QG3I8xXz8rpoUvUI5fVXWuyGN9eccEqv8q
1F1/gWelPS8cH6RhqyFq/CbdlI87bLZvv+Z1wIDDPGCth/4MlrGyfMPoMsYfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUekJ8DTr9vINXLz/wQKULzJtXxXEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzEyZTM2
MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnT
BjANBgkqhkiG9w0BAQsFAAOCAQEAheiV71DrZi8n1sOo6r3sSJyngSDBsIFjtxkk
lKaod73hirT2Tj0dP9pO9mw4WEm3NifMpbAoY3xpGw3telYs/ymvAW0Cq8Mkc99K
r887mR0+1XsWh2IdW85r15EgIbEfl0zpksUGYtEBU+KdS20zTksZ6uw7oxEpTuod
i8/BOaMOEJdEjOIAFeuw/3xhv+19X+j55eDovFve0dNQuL3IhuqXomvLaCIXQUk6
FiWvg8W4R/ZbRrdgly/hnqYy3EHFaNFZHYxwynY9i7lFFT+fxuovdOS2PKWR74xO
n6xhPqEg9XxGvIiQ+0rQBp/noANKsIAtE4Trh9fkQ+67+1Useg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:24 2025 by rpki-client