Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: aB4iqvHVqn+amy7sd+nUCu5zWTzjOvnLqQqdra6WA/Y=
Subject key identifier: 78:A0:6A:FB:DE:6F:C6:18:C3:71:EA:C6:62:F6:03:82:C5:08:45:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2855E85380D2783EA6364C20016073CD60AF4933
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 22 Aug 2025 14:47:23 +0000
ROA not before: Fri 22 Aug 2025 14:42:23 +0000
ROA not after: Fri 21 Aug 2026 14:47:23 +0000
asID: 147049
IP address blocks: 185.213.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:55:e8:53:80:d2:78:3e:a6:36:4c:20:01:60:73:cd:60:af:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:23 2025 GMT
Not After : Aug 21 14:47:23 2026 GMT
Subject: CN=78A06AFBDE6FC618C371EAC662F60382C5084585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f2:dd:a9:d6:a0:b7:4b:17:57:60:0d:17:55:
83:d9:fe:7d:b9:4c:e5:7c:1f:dc:02:78:52:8a:56:
45:f7:94:f4:4a:c4:37:61:93:47:2c:0c:f1:11:44:
45:78:bc:63:d5:19:2a:58:05:47:46:bf:3d:2f:fa:
c0:f3:4f:9b:d8:f9:55:56:dc:45:99:8b:a4:2f:48:
5c:90:ae:39:b6:44:5d:ac:f9:4a:f9:d8:80:97:63:
b5:89:95:bd:16:1e:42:97:45:6b:43:bd:1f:cc:79:
38:2d:55:f6:ba:45:9c:01:9a:8c:26:cc:fc:02:e4:
5d:3c:90:25:f7:a5:8e:de:0c:28:bc:3e:cd:fc:3d:
43:2f:28:b6:87:28:64:4e:45:8a:f0:ab:1b:bb:60:
ed:87:81:25:fb:5f:17:1b:9e:aa:6b:68:3c:8f:d1:
be:c5:cf:25:37:8c:9f:c3:67:33:b0:b9:ee:1a:24:
d9:9a:32:89:7c:62:c9:6b:c4:93:47:32:18:75:e9:
2b:4e:5b:c2:25:8c:cf:f7:d4:07:f6:05:53:cf:f6:
ec:8b:d8:39:84:96:a9:fb:7f:e6:cf:26:84:72:df:
9d:b5:45:5e:c4:24:82:1b:29:52:35:80:d7:c3:ed:
e1:23:47:dc:87:b8:15:67:bc:a8:5a:ff:4f:f1:aa:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:6A:FB:DE:6F:C6:18:C3:71:EA:C6:62:F6:03:82:C5:08:45:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38302e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.80.0/24
Signature Algorithm: sha256WithRSAEncryption
89:13:79:36:99:e2:e6:f9:b0:75:43:ea:b7:08:c7:fd:af:5c:
f9:14:28:6d:71:72:58:89:68:c7:32:20:7d:66:e8:fc:28:22:
f8:70:0f:47:0f:bc:7f:c0:c4:a9:bb:a0:76:2a:79:a5:7f:5c:
83:d3:41:ee:08:c5:46:01:e8:b7:f5:09:ae:6a:06:f4:32:20:
6e:b9:85:7b:d1:d2:ba:50:05:16:33:23:a7:d9:2f:2d:6e:bb:
73:7f:ff:99:9f:bc:3b:d7:f8:85:ea:ff:dc:bb:b0:97:01:92:
fd:77:2d:a5:c4:f1:c1:b7:20:db:3b:67:4c:40:8e:e4:3d:8a:
13:61:7c:e7:0b:77:1f:28:b6:2b:b2:b3:5a:cb:32:af:c3:28:
0e:70:9c:ae:01:5f:01:36:9d:2e:c8:54:b1:16:df:d2:46:0d:
01:5c:dd:00:2d:be:d2:38:f6:91:39:e2:9a:6a:27:11:b5:6d:
5f:26:83:fe:3c:f1:1a:3b:b2:c1:39:68:9f:2a:21:9e:09:e6:
4a:43:2b:4d:90:2a:cc:ef:81:7c:95:2f:70:ad:61:96:9b:0e:
eb:94:bd:b6:87:5a:fd:54:bf:61:ca:7b:4e:01:46:04:98:6c:
02:9b:08:b8:f2:56:bc:e1:82:a5:02:46:d0:0e:29:b7:12:80:
b3:d4:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:47:20 2025 by rpki-client