Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
File: 3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: +Ho/6+yUVzvKD3VddmOqnqHBMk4fBRGAr/bD4SLgg5o=
Subject key identifier: 88:EC:D0:52:C0:83:74:48:24:43:A0:CD:77:43:C3:F0:1A:D0:BF:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 04705CFF8CA96EB23788540422AE2DB416CBBA4F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:20 +0000
ROA not before: Fri 22 Aug 2025 14:42:20 +0000
ROA not after: Fri 21 Aug 2026 14:47:20 +0000
asID: 136787
IP address blocks: 185.219.140.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:70:5c:ff:8c:a9:6e:b2:37:88:54:04:22:ae:2d:b4:16:cb:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:20 2025 GMT
Not After : Aug 21 14:47:20 2026 GMT
Subject: CN=88ECD052C08374482443A0CD7743C3F01AD0BF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:30:8c:e3:61:53:6b:2f:fc:70:8e:e6:dd:
63:4c:65:5b:9b:a2:df:b0:6f:e6:65:61:b9:3e:93:
28:a6:f9:37:b2:4c:ac:6f:ed:ca:60:63:62:8c:c0:
06:a4:e9:d0:25:46:88:ba:2d:14:e5:15:d6:19:4c:
a8:44:35:c7:86:9f:9d:cd:49:16:79:89:de:e0:f8:
4c:b1:42:a6:b0:4c:77:81:d3:5e:1b:39:90:20:47:
db:9b:30:76:4b:a3:0a:cf:bf:b1:19:56:41:04:4c:
2f:fd:ff:2e:4f:71:7b:37:93:83:58:e8:0a:56:94:
d0:83:c8:2e:e3:91:a6:70:75:84:d7:39:d5:c1:77:
1b:81:28:4d:d2:1f:1d:97:9c:53:85:04:fa:31:30:
d1:0f:3a:6c:8f:92:c0:c5:b6:8a:f4:cb:bd:69:bf:
7e:ac:0d:21:94:51:aa:45:df:61:30:0d:2d:c1:f1:
62:3b:52:d3:46:3e:70:7f:b2:08:8e:ac:aa:0d:7f:
87:e4:83:44:1a:e1:78:8f:27:56:db:59:a3:f0:e4:
75:2e:da:81:b4:1e:4b:fc:65:d0:ce:f8:3d:05:43:
57:b3:e3:34:2c:3d:92:ff:c8:7b:b0:e9:77:5c:d5:
aa:ec:dd:cb:5d:ce:43:6f:cd:84:c1:9e:13:3f:ee:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:D0:52:C0:83:74:48:24:43:A0:CD:77:43:C3:F0:1A:D0:BF:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.140.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e9:e8:b9:3d:6f:ff:d1:31:0f:8d:10:00:65:83:63:55:25:
62:ec:c3:5d:af:10:1b:89:70:a0:61:72:f4:b7:c2:bc:9d:be:
58:9b:5c:b4:b5:26:eb:c7:d5:3c:1d:75:17:67:57:73:1f:fe:
92:90:6b:e8:35:8f:99:ab:b6:fb:05:24:d4:e6:cc:b9:43:34:
9a:49:d8:12:ab:ca:15:0e:6f:8f:d7:5c:2a:22:4d:25:2e:c7:
7f:8b:5c:62:41:fb:f4:07:2a:ae:76:18:55:0f:e1:66:2a:d8:
49:fe:91:eb:87:b8:79:24:31:44:41:8f:c4:f8:db:ac:48:6b:
34:27:af:87:20:31:2b:d1:cf:94:a7:b7:a5:b6:3b:74:36:89:
04:e3:d1:42:e9:64:f0:84:bb:96:d6:db:9c:8d:e1:93:12:35:
a1:2f:36:0b:92:14:ce:ed:16:28:c9:43:08:cf:e2:2b:d5:24:
46:c8:b9:ba:5f:9d:5b:89:c5:25:3c:e9:62:82:22:d1:ac:56:
21:09:3d:0e:45:74:6d:ed:5b:05:a7:46:ff:e2:4d:a2:f7:cc:
a9:41:68:6e:06:49:4f:af:2b:13:c5:fc:b4:c3:34:a7:3e:5d:
07:49:d9:bf:8a:93:62:48:e8:25:7e:32:bc:24:d0:8f:07:52:
20:9c:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:00 2025 by rpki-client