Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
File: 3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: upaO1LUBQWyfguOIqJt6ZiSS4NgWAp3BG8raDfr/Gw0=
Subject key identifier: 72:E3:4C:B4:49:D5:B1:A5:6E:12:7F:86:F4:F0:39:EE:EC:EF:86:4C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63DD1DE0538624D2D0E0FFA6268DA9EC7B75E692
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:22 +0000
ROA not before: Fri 22 Aug 2025 14:42:22 +0000
ROA not after: Fri 21 Aug 2026 14:47:22 +0000
asID: 51167
IP address blocks: 185.217.125.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:dd:1d:e0:53:86:24:d2:d0:e0:ff:a6:26:8d:a9:ec:7b:75:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:22 2025 GMT
Not After : Aug 21 14:47:22 2026 GMT
Subject: CN=72E34CB449D5B1A56E127F86F4F039EEECEF864C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:f3:7f:cf:40:7d:c0:b7:48:02:6a:06:f6:
aa:a0:36:04:97:53:53:18:19:80:6e:05:00:80:dd:
6e:c2:ec:09:9b:23:30:b1:1f:95:16:1c:79:e9:64:
30:83:fd:35:15:1b:f3:ba:48:9f:83:f7:6c:00:64:
db:ce:f5:e9:07:19:ae:19:05:e5:ea:2e:87:57:d7:
a6:74:f8:b7:5f:3a:d6:0f:04:cb:9c:85:c3:f7:40:
2d:58:06:43:79:1e:fd:ba:46:fd:1f:56:0a:b8:d1:
a7:a1:ae:9e:30:4a:a6:3a:07:49:dc:dc:27:ca:e7:
84:14:80:b8:34:1d:a9:9f:25:c8:f6:2f:db:f3:54:
e6:bc:3e:9e:e2:31:5d:6e:1a:7f:df:4a:ac:2a:cd:
bc:a6:5a:e2:5f:ee:e2:8b:ea:2d:4b:4c:1f:9e:53:
e8:69:56:71:29:23:8d:70:a4:08:b6:b6:e0:b6:f2:
f7:7a:c0:13:66:d8:84:3a:79:18:2b:2b:b1:23:4a:
98:c3:6b:36:95:ac:19:4f:1f:54:fa:90:b6:41:65:
4b:24:9c:0c:13:70:41:71:18:77:81:0d:f5:bb:9f:
b2:90:7d:43:5c:91:26:d7:e6:bb:08:3b:89:17:2e:
41:b4:54:e7:15:d6:5e:17:bc:60:ba:9f:87:48:1d:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:4C:B4:49:D5:B1:A5:6E:12:7F:86:F4:F0:39:EE:EC:EF:86:4C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231372e3132352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:dd:5c:b8:d0:7e:1f:2c:26:b4:b1:cb:43:44:93:bb:28:fb:
e1:f5:82:33:b9:4e:a4:ca:9e:83:4f:26:5b:79:32:e1:1b:f1:
2b:24:ca:c7:20:26:a5:6f:d0:7c:17:9e:62:06:ae:4e:d7:5c:
d5:77:40:7c:d3:89:3e:70:27:94:c4:4f:6d:d7:ec:6e:d6:96:
44:db:77:09:4d:da:34:1b:31:69:b3:6a:c3:8d:24:59:26:aa:
fe:76:6b:d9:21:06:ab:91:c2:cd:20:15:64:bd:8d:82:97:0b:
fb:97:3e:a8:f7:81:2a:4d:8c:16:5a:ab:65:38:63:fb:e5:4b:
a6:a5:ce:8a:d7:d3:74:cc:87:a0:c2:f0:25:ae:4a:ec:2b:8c:
fe:42:29:26:60:17:1a:38:ac:31:aa:e7:69:65:61:3e:24:81:
0d:f2:49:50:2a:26:e2:01:8d:d4:d0:67:3c:6e:3e:c1:92:b4:
c7:ef:8c:29:4e:a1:80:72:cf:e5:78:0f:17:32:e1:5c:88:82:
9b:8f:b2:29:30:33:c7:7c:2d:e1:c0:86:e6:62:12:58:d7:2f:
35:fa:20:68:fe:a8:20:7d:f1:25:35:7a:26:be:1a:ca:83:c3:
f7:e8:44:cf:66:80:de:e2:3a:8d:43:44:a8:e3:ef:83:2e:2c:
bb:2d:d8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:41 2025 by rpki-client