Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
File: 3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa (raw, json)
Hash identifier: IC547uTUQlprLOO9Z15SDnQrJyUiF/Uds9SbkQJnv8U=
Subject key identifier: 1A:97:39:11:4D:08:9E:B1:A4:DB:24:AC:9D:7D:25:3F:53:D0:E3:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 48131382DDF93CBC56292A9E4BA49C2DD14F25F9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
Signing time: Fri 22 Aug 2025 14:47:14 +0000
ROA not before: Fri 22 Aug 2025 14:42:14 +0000
ROA not after: Fri 21 Aug 2026 14:47:14 +0000
asID: 6597
IP address blocks: 185.221.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:13:13:82:dd:f9:3c:bc:56:29:2a:9e:4b:a4:9c:2d:d1:4f:25:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:14 2025 GMT
Not After : Aug 21 14:47:14 2026 GMT
Subject: CN=1A9739114D089EB1A4DB24AC9D7D253F53D0E307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:d5:ab:5a:68:7f:32:21:9e:38:de:f6:d5:
ef:63:f3:97:26:0e:cc:96:13:54:a9:5a:27:36:bf:
e9:8b:ca:66:82:f2:9a:3f:8b:46:a1:73:47:22:7f:
c9:bc:09:1a:2c:ac:72:02:f3:0b:05:61:4c:b5:fa:
a0:12:e3:97:31:83:c2:4d:4b:c6:7b:ee:68:45:72:
ad:53:48:c2:07:31:e7:16:03:e8:33:cb:bc:af:38:
5f:c6:a4:2d:2f:6c:e3:ed:7f:99:bf:01:02:d4:3e:
d3:52:d0:7e:a9:8a:6e:e2:7c:94:e3:13:fa:18:ed:
66:a7:94:9c:1c:3e:26:b1:cb:9a:a8:4f:32:6b:e3:
21:f7:76:c8:84:2e:5b:90:f0:12:e4:12:f2:12:d6:
2d:eb:c0:c2:14:86:60:1a:c9:54:00:75:9b:2c:16:
9b:ee:fe:46:be:2c:b0:bc:d5:f2:2f:ca:74:6c:6a:
19:cb:ff:f7:14:98:ee:a4:f1:4d:aa:b6:bb:71:e0:
0c:af:7a:38:f1:e6:84:47:b0:96:c1:ea:7b:13:9f:
ab:ca:41:2c:e3:a0:99:f5:c2:46:9e:4d:28:d9:77:
05:62:a9:0d:fe:76:46:47:92:c0:99:a3:73:a4:06:
d8:f3:b6:ce:70:bc:26:10:2c:fb:54:c6:6d:dc:52:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:97:39:11:4D:08:9E:B1:A4:DB:24:AC:9D:7D:25:3F:53:D0:E3:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133332e302f32342d3234203d3e2036353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.133.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8a:3f:8a:d7:55:85:2d:3d:76:5c:22:0a:5e:b7:5c:c7:cb:
50:50:eb:11:3d:b4:1a:0c:11:17:32:ae:ab:02:75:52:49:ba:
e6:1a:dc:bd:37:04:ea:97:32:d4:07:96:51:4c:be:71:1b:aa:
c4:d2:f9:a5:72:c4:61:dc:37:49:28:83:15:0f:c2:b3:c9:b1:
09:8c:2d:1f:ec:90:b8:ca:63:d3:c8:97:4a:ec:ed:a6:d7:1d:
8f:ce:87:b2:3a:00:59:18:24:f7:f7:f0:05:04:2b:c8:13:0e:
2e:20:9b:81:31:50:a3:c5:d6:5e:66:fb:be:63:a2:22:ca:83:
93:5f:e9:0a:2e:e0:f0:7e:14:fd:09:ea:13:a7:57:a7:6c:df:
41:d7:e8:8a:72:37:62:ad:61:26:79:b7:86:d2:57:8a:92:bc:
d7:d5:fe:58:ae:04:25:80:5d:9b:f2:7e:a5:4e:4a:ca:9b:f7:
1d:d0:39:43:96:6d:4f:17:69:1a:0f:e1:11:b9:fe:7a:5a:e4:
f3:e1:e3:a9:5c:a5:d5:34:87:0d:01:f7:58:f2:a2:9e:64:62:
f0:7d:80:ec:fe:5b:71:4b:3c:61:54:d7:c6:d3:80:63:1e:54:
fe:b5:e7:da:0d:f1:08:78:47:44:ea:7a:68:1b:29:73:42:79:
d4:8a:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:24 2025 by rpki-client