Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
File: 3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa (raw, json)
Hash identifier: Q0t0kQsWEqHrr/r1do1o9xhRgBlBOPe5AQop+4aSFXk=
Subject key identifier: 50:AC:65:EF:5D:16:CE:35:E8:57:0E:2D:09:9A:1C:3C:C4:08:9A:90
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2158C007ED2B774DA2ACE88037E8C0026DFA968F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
Signing time: Fri 22 Aug 2025 14:47:21 +0000
ROA not before: Fri 22 Aug 2025 14:42:21 +0000
ROA not after: Fri 21 Aug 2026 14:47:21 +0000
asID: 212520
IP address blocks: 185.216.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:58:c0:07:ed:2b:77:4d:a2:ac:e8:80:37:e8:c0:02:6d:fa:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:21 2025 GMT
Not After : Aug 21 14:47:21 2026 GMT
Subject: CN=50AC65EF5D16CE35E8570E2D099A1C3CC4089A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:aa:e6:4c:26:cc:87:8b:e1:62:4f:0f:fc:
5b:f1:0d:f3:ab:5c:e2:8b:6c:d4:4a:a6:75:72:d3:
30:04:3a:e2:19:d3:06:c9:7e:dd:ee:4d:8e:08:40:
6e:b7:d2:89:d6:11:51:da:06:d2:6c:2c:cc:9f:ea:
ef:78:90:1b:63:4c:c4:16:e0:48:d3:e9:ac:ab:6e:
73:cd:18:69:6c:fe:cf:ee:a1:74:58:2d:f5:b7:5a:
44:eb:ec:2e:6a:64:66:9c:d1:d2:4d:fc:b8:fa:d0:
ae:d9:7d:e1:06:43:88:b0:d5:12:1b:56:08:98:3a:
51:ee:0c:06:0f:5c:9b:cb:2f:51:22:97:ea:b7:60:
26:1a:3a:05:42:c4:d4:09:08:a9:e5:7a:5e:26:54:
0d:59:a3:d8:61:13:3c:85:6e:dc:09:25:23:7b:33:
d4:29:0b:b4:0e:3b:79:78:ef:60:f7:32:74:9e:ce:
79:33:76:57:81:3e:84:54:0b:09:50:a0:03:ed:e8:
94:8b:9d:29:a4:02:19:8b:ef:6c:56:83:b2:31:a6:
59:f7:92:e3:47:d6:23:1c:50:a3:85:c0:73:5b:7a:
85:fc:f5:66:26:e5:5b:58:35:35:67:02:10:87:98:
a1:2d:2d:82:ec:51:a3:53:e5:df:79:df:1d:0a:a5:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AC:65:EF:5D:16:CE:35:E8:57:0E:2D:09:9A:1C:3C:C4:08:9A:90
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37322e302f32342d3234203d3e20323132353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.72.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2a:c5:81:96:0e:10:17:ec:d6:2e:fd:8c:74:7a:45:a3:80:
66:c4:e1:7f:40:43:a0:30:96:87:9e:ce:c2:c0:b9:4d:9a:75:
88:71:21:bf:ce:9d:5b:ed:bd:91:a0:57:53:39:74:f1:d8:88:
a3:e9:8b:ec:76:8d:13:fa:49:db:93:f4:76:e9:c8:18:de:10:
4c:b2:db:a0:91:45:dd:08:f9:ed:9f:14:d9:08:40:b1:42:7f:
26:8c:89:fa:b1:cf:75:2e:2a:db:bc:c9:e9:cd:5e:d4:af:e9:
9c:4b:8b:63:79:15:d1:75:9b:11:17:9f:67:07:45:2d:e9:13:
f2:2a:b9:f3:c6:95:88:17:29:90:10:d5:ef:80:18:c9:e1:4d:
a1:de:de:73:ba:da:85:cd:f6:d2:9c:64:8c:20:5f:82:dc:a0:
4e:e2:cc:87:93:d5:b8:9d:0d:e4:78:86:ac:63:56:fe:39:b4:
11:6f:ed:70:a4:d2:7a:b8:43:86:16:a8:be:b3:b8:17:52:90:
0a:61:49:59:c3:d6:c9:c5:3c:01:9e:37:2c:ed:b7:97:6e:d7:
80:f2:75:16:de:18:f5:84:b2:6d:1f:44:29:8d:87:d8:32:3b:
a4:32:11:db:f1:4d:76:8a:64:ac:fd:c2:ff:5d:65:58:2e:51:
41:73:c4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:26 2025 by rpki-client