Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: qfgusndvpOmrLHY7iVM+8Si4xFUifKKsmERrkVLBUdo=
Subject key identifier: 55:CE:A2:7B:61:0F:BD:48:1B:B6:78:C1:36:36:53:56:B4:30:0A:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41E4B6AA2C86DEB3A9E5C36B0D5966686811BF23
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 22 Aug 2025 14:47:17 +0000
ROA not before: Fri 22 Aug 2025 14:42:17 +0000
ROA not after: Fri 21 Aug 2026 14:47:17 +0000
asID: 147049
IP address blocks: 185.213.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:e4:b6:aa:2c:86:de:b3:a9:e5:c3:6b:0d:59:66:68:68:11:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:17 2025 GMT
Not After : Aug 21 14:47:17 2026 GMT
Subject: CN=55CEA27B610FBD481BB678C136365356B4300A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:b5:5f:b5:b1:9f:f3:42:66:2b:5f:88:60:
fb:f5:20:6e:4d:55:2b:bc:ef:d9:c2:a4:38:8b:c4:
1c:af:7f:f3:a0:d2:d6:40:f6:e1:a5:c8:5b:13:2e:
b5:58:e6:77:cd:a7:b2:a7:30:43:47:c9:2d:01:88:
c1:79:4e:1c:7f:ec:2c:5e:f2:48:b7:92:12:43:e7:
dd:50:a5:d7:18:0c:6e:45:51:52:c6:02:b4:c9:50:
c1:75:0a:7b:2b:28:50:d5:5b:7e:8c:73:dd:58:47:
07:52:9e:cd:a7:fc:5a:11:f8:01:1d:bd:65:7e:6d:
3f:cc:2d:0f:32:22:17:b5:64:0d:36:e5:79:d2:f5:
1f:a1:f2:f7:e2:e2:7c:41:00:7f:e4:c4:eb:0e:8b:
57:6c:ee:61:e5:32:33:c6:88:f2:44:5b:3f:d6:2a:
ff:a8:dc:64:db:e5:52:fd:1f:ad:ce:72:be:4e:e8:
fd:59:54:eb:60:01:c2:41:2d:1f:33:ba:e9:39:ff:
ea:fb:0f:97:d8:72:88:1f:9b:1d:32:23:d8:53:bf:
4e:90:37:ed:28:e1:b1:21:d3:da:23:b4:e2:19:f6:
17:da:ac:a4:d0:6d:6c:de:c3:72:66:8f:2f:7a:d1:
d1:9f:4b:bd:07:90:fc:c4:6c:43:a2:e9:26:90:89:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:A2:7B:61:0F:BD:48:1B:B6:78:C1:36:36:53:56:B4:30:0A:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231332e38332e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.83.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cc:a9:52:13:4c:d5:dd:a3:35:7a:f9:6c:78:c9:dd:25:9e:
2d:c6:94:8a:80:de:89:f5:98:32:d5:a3:73:0d:54:88:cf:75:
e5:b1:cc:81:09:af:65:c5:64:b2:f0:29:fc:26:b4:fb:d2:3a:
c0:a0:c4:0c:0f:43:dd:59:33:8a:7f:93:91:df:fe:4b:63:08:
bd:e5:a1:f8:0d:c6:14:41:a2:9c:9c:c4:be:3e:9a:f2:21:eb:
4b:c0:d8:6b:c3:73:5c:cf:ab:ec:5a:24:d9:25:95:b6:69:d9:
0d:4b:27:4e:2c:43:a1:07:79:d5:72:1b:e9:c5:6e:b7:6b:5b:
59:e7:4d:cd:71:90:0a:bb:8e:b6:45:3b:d5:4e:0b:ec:3d:7c:
83:bf:c1:1c:c9:b9:72:75:80:2b:9f:63:47:ac:0a:5e:a2:44:
44:87:87:aa:be:ae:e7:41:06:63:91:49:2f:70:44:dc:78:e8:
0f:1b:4e:a2:88:9e:dc:43:f5:73:1b:01:02:de:ea:af:74:8f:
69:b3:70:bc:93:97:94:3d:e6:57:f5:19:17:de:4a:4e:8b:af:
0f:f8:14:d8:10:96:93:c2:99:9b:a1:aa:8a:af:22:31:67:68:
87:e6:1f:42:d3:93:62:d6:b8:0c:1d:61:82:cb:8b:bf:46:63:
f2:38:62:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:21:59 2025 by rpki-client