Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231362e37352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: yXV543QDpFqxz5w/gTJMOLk7jDWp0ZzvtKlhjbbfYmk=
Subject key identifier: C0:45:44:0E:7A:67:08:90:5A:E3:F7:EB:CD:97:AC:F8:FE:7D:B2:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6363A777F2CD00C24C35FDA458C0B6D9E64B23BE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:12 +0000
ROA not before: Fri 22 Aug 2025 14:42:12 +0000
ROA not after: Fri 21 Aug 2026 14:47:12 +0000
asID: 51167
IP address blocks: 185.216.75.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:63:a7:77:f2:cd:00:c2:4c:35:fd:a4:58:c0:b6:d9:e6:4b:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:12 2025 GMT
Not After : Aug 21 14:47:12 2026 GMT
Subject: CN=C045440E7A6708905AE3F7EBCD97ACF8FE7DB284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:0e:6b:45:23:7a:6e:dc:91:ca:fb:63:17:
3d:7d:2a:a6:90:cb:b5:57:b8:71:ca:15:6a:27:8c:
fc:2f:f0:04:3e:e8:46:46:4f:58:b6:9b:47:96:32:
e4:35:27:36:a7:9e:c1:fb:90:f4:2a:c9:d3:dd:23:
b5:c0:6e:93:54:42:e6:46:30:44:06:eb:c7:d8:e1:
ff:cd:26:bd:df:dd:45:e8:86:4d:90:1b:19:c4:86:
48:10:e6:e7:31:cc:4e:28:e8:1a:cb:cf:45:9a:56:
d4:2d:87:7b:b7:68:aa:ec:fe:13:d5:c6:bf:c9:df:
37:f0:c6:3c:86:e9:1c:bd:fa:51:8f:63:96:22:57:
62:17:39:44:e2:8a:08:2b:de:dc:b5:ae:09:b1:7b:
de:1a:f9:89:5e:b6:d7:7b:b0:25:bf:a3:56:14:47:
af:42:0d:19:c5:4b:dc:34:a7:db:ab:6c:f3:b4:a3:
a8:fd:77:4d:14:13:20:bf:bf:b4:e6:f2:67:d0:40:
03:25:46:90:bb:95:4f:11:8e:21:c7:af:3c:22:bd:
b3:04:21:c9:b8:95:47:8b:d0:ed:37:d1:c6:cd:1b:
ac:ca:18:3e:2b:b5:39:21:55:a6:02:0c:50:09:ac:
7c:31:ce:a4:92:d0:1b:77:22:de:12:00:9d:20:b6:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:44:0E:7A:67:08:90:5A:E3:F7:EB:CD:97:AC:F8:FE:7D:B2:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231362e37352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:63:b0:eb:bc:c5:64:1c:89:cf:1f:7c:7d:cf:37:4a:51:00:
cf:42:01:aa:a1:fc:3a:c9:40:c6:01:e0:94:ef:5c:30:5b:9b:
36:29:b7:e0:c8:b0:e0:e8:34:25:b3:69:be:f7:b7:2e:85:f6:
45:85:8a:d9:ee:7b:2d:86:22:54:04:d0:ed:c1:ea:99:f4:1b:
19:ca:7c:c1:26:b4:9a:5b:0e:c4:0d:2c:ac:0f:80:97:6d:e5:
eb:e1:1b:83:3a:0e:df:55:ba:15:f5:54:b7:32:c4:33:61:7e:
67:18:ec:e1:de:4f:7b:89:9f:b6:1f:46:74:a5:a9:e5:08:c8:
e3:ef:b6:d4:82:c3:46:a9:00:ca:41:46:f5:50:75:c0:85:c0:
e2:b7:b5:1f:8a:ad:28:e3:e8:e8:1a:36:f8:00:e9:9a:e0:e0:
9c:fd:c8:e7:56:5f:c5:cd:3a:e0:7f:0b:c2:1e:89:5e:98:72:
dc:53:64:05:2f:2a:03:a9:54:f7:8f:50:8a:e0:41:c4:51:ee:
ed:ae:3f:75:45:c1:ae:df:92:7a:a1:e9:a8:e6:42:9c:eb:91:
6f:53:57:16:24:9a:e4:74:ab:5c:b5:7b:1c:59:8f:26:45:6a:
f8:82:94:6d:c4:ef:ce:df:ad:83:68:aa:cd:45:57:8a:18:a8:
2a:8e:6d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:45 2025 by rpki-client