Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa
File: 3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: B/2an//X4r9XRDs6ES9EWM8zNHXyxXaBVFlX52CQtvs=
Subject key identifier: CE:F5:96:6E:12:B4:B6:E6:9E:40:85:9E:9E:C4:17:C9:23:D4:2D:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 53FFC9D19E30F485D6D6510B9D6D8B4106200ED8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 22 Aug 2025 14:47:17 +0000
ROA not before: Fri 22 Aug 2025 14:42:17 +0000
ROA not after: Fri 21 Aug 2026 14:47:17 +0000
asID: 147049
IP address blocks: 185.219.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ff:c9:d1:9e:30:f4:85:d6:d6:51:0b:9d:6d:8b:41:06:20:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:17 2025 GMT
Not After : Aug 21 14:47:17 2026 GMT
Subject: CN=CEF5966E12B4B6E69E40859E9EC417C923D42DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:7a:c9:33:9f:34:4e:d5:ec:55:c4:d3:04:
bc:b5:7c:33:c2:c7:be:d0:3e:b3:7b:57:15:ad:b3:
97:60:fb:b5:49:f1:b1:02:5b:3b:08:78:57:bf:c4:
34:22:00:56:95:46:7d:7f:3f:c9:be:12:3a:00:49:
73:da:54:02:df:c9:a0:74:c7:50:f3:08:d0:4a:81:
12:f6:8a:11:02:d4:9e:48:bb:be:97:b9:f7:b5:70:
52:f4:32:ac:7e:de:d2:a5:66:35:c3:0f:07:c4:e0:
ae:b8:47:87:2d:76:2a:4f:57:5b:7d:c8:88:47:8f:
c8:62:b3:a0:a6:2f:ec:56:cb:bf:bb:83:3b:68:65:
c0:42:9a:87:ca:c4:d7:fe:60:a5:91:af:4d:98:1b:
b0:7f:3a:91:44:29:b7:52:b5:c7:03:c6:d7:16:2e:
e2:e8:51:a6:14:1d:00:31:fd:e4:2c:39:e3:9d:19:
41:9e:b3:f1:f9:d1:ea:b2:85:58:4a:ad:2e:c2:56:
8e:b1:02:e8:98:b9:8e:ba:76:57:32:4a:20:e1:1b:
8a:9b:9e:7d:9a:be:74:0e:cb:2d:b4:4b:71:0f:a7:
06:be:ae:a7:26:71:dc:fc:31:64:f5:70:a2:0c:5c:
95:8e:c8:d4:dc:b5:88:cf:34:0e:5b:65:ac:36:51:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:96:6E:12:B4:B6:E6:9E:40:85:9E:9E:C4:17:C9:23:D4:2D:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134312e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.141.0/24
Signature Algorithm: sha256WithRSAEncryption
45:86:37:49:fd:ca:9a:a8:12:f2:12:b6:b1:06:8f:4c:70:df:
89:7a:c1:5e:73:5d:ef:5a:ac:86:0a:96:19:db:44:e7:13:6d:
cd:3e:1b:6b:ad:b2:fc:de:a6:10:49:f6:d2:62:ca:14:af:d7:
49:50:78:c6:54:6e:13:11:62:94:bf:28:93:6f:e7:48:3f:36:
e6:f7:53:3a:a3:b2:e2:f0:7b:b3:c5:3c:43:ab:1a:68:b3:f0:
07:3f:38:1c:93:7c:55:50:c8:85:28:20:3b:03:0b:5d:ed:dd:
36:fe:07:4d:a7:bf:70:60:64:a9:38:f5:43:c6:dc:7b:84:3d:
17:9d:4c:69:73:14:70:99:9e:b3:f5:63:70:cb:70:ea:73:c8:
5f:a3:a0:81:eb:5a:10:50:ec:4a:da:26:19:f0:0c:de:a6:53:
e0:66:74:1f:d1:48:63:f0:ac:7d:47:37:8f:89:ce:2f:7c:30:
7f:f6:ee:d9:f2:6d:8a:1a:32:58:28:7a:7c:37:b4:4c:c8:4e:
b6:f5:73:3e:51:8b:44:0e:1a:97:1e:b1:14:ec:3e:a2:c4:0c:
aa:c8:d5:17:9c:23:fc:17:19:60:98:7e:37:9a:7a:0e:20:39:
0c:45:c4:0a:b1:70:91:60:e6:6d:2c:af:af:83:2c:48:e5:55:
bd:93:5c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:32 2025 by rpki-client