Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3133372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232322e3133372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: scmk+Mqv5bUO9rIJ4mkAd3ToCPlIMsFZcqQvqTXLUZc=
Subject key identifier: E8:41:C3:77:25:DD:7C:91:80:29:FC:8E:FE:57:4E:9C:DB:D2:E9:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 343F2DAB1AFE18AE2CDC6C96D88AC754F5168580
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3133372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:38 +0000
ROA not before: Sun 28 Sep 2025 20:42:38 +0000
ROA not after: Sun 27 Sep 2026 20:47:38 +0000
asID: 136787
IP address blocks: 185.222.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3f:2d:ab:1a:fe:18:ae:2c:dc:6c:96:d8:8a:c7:54:f5:16:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:38 2025 GMT
Not After : Sep 27 20:47:38 2026 GMT
Subject: CN=E841C37725DD7C918029FC8EFE574E9CDBD2E9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:cb:1c:7c:ba:04:d2:4a:9a:74:5a:c8:1e:
a2:99:59:33:5b:9d:5c:be:66:e8:08:a8:d8:7b:63:
89:a2:82:b6:ce:88:dd:c9:5e:c4:cd:dd:b7:38:fb:
3f:84:16:26:b2:08:e9:80:e9:5e:a0:7a:76:39:d4:
0b:49:f4:e7:b0:11:8a:9f:73:2b:aa:ae:7d:b3:65:
9c:92:0a:e1:ac:be:cf:9b:95:f3:9a:94:16:93:21:
69:21:ea:d0:18:fd:e7:09:8e:3b:7b:81:a8:cc:58:
dd:f1:3c:85:49:c6:fe:1e:f2:ca:42:cc:d4:fe:f0:
ff:5b:9a:c2:b3:01:b0:ce:bf:a2:3a:e5:f5:86:ce:
47:a1:3a:74:bd:34:28:d6:5c:1f:03:0e:81:3b:01:
d7:bb:ea:f4:fc:ba:d2:39:2a:7b:bc:48:27:a6:f0:
c3:83:2d:a4:97:5f:04:d8:62:43:4d:8d:17:2a:b6:
30:a6:1a:85:a4:6d:f9:8e:b7:40:2d:41:aa:c4:73:
d8:04:aa:8b:2c:7d:04:d9:75:ff:a6:c8:05:21:ca:
8e:39:95:bd:e2:21:66:11:62:85:a3:8e:d6:bd:98:
82:f5:7d:b6:c1:5c:41:3d:da:08:29:7a:c2:59:9c:
1e:f2:1e:6f:5e:0b:ce:81:6d:6a:54:cd:ef:77:ba:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:C3:77:25:DD:7C:91:80:29:FC:8E:FE:57:4E:9C:DB:D2:E9:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3133372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.137.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9c:9f:db:93:dc:32:59:50:f4:bf:2b:9d:0b:01:50:d8:3e:
1d:40:2f:68:71:5a:bb:3e:5e:02:90:fc:3a:25:d3:b9:29:a0:
68:49:1d:1c:a6:b8:16:43:6d:95:07:9b:6c:9c:8a:a3:49:e1:
ba:17:f0:5e:fb:aa:a3:2c:4c:3e:ef:df:e9:92:4a:fb:aa:12:
44:1b:08:d2:c2:c3:95:59:7c:31:6c:00:3b:78:e1:2b:cb:5d:
ee:43:c3:d4:ad:ef:c4:60:77:c3:1b:b4:5f:fb:5d:e5:78:15:
11:21:18:83:6a:71:2f:66:dd:be:43:ab:4f:b5:aa:22:c9:36:
24:13:1f:08:72:ad:2d:43:e0:3e:e7:47:4f:56:ac:2a:e3:b5:
0d:c8:05:07:2d:d5:77:0c:a0:31:cc:4d:4d:fc:d9:cc:3a:89:
a7:a5:c8:98:e0:7b:be:bb:ef:fe:64:19:2b:47:43:a3:be:db:
a2:87:94:9d:6a:1c:dd:1a:b2:cc:f6:f8:58:a0:2e:4c:1f:70:
54:ae:4d:7d:04:60:5c:2b:58:ad:68:92:a2:00:e7:9c:28:df:
2d:da:b1:1a:fd:d3:8b:8c:09:17:45:ff:3e:fa:e0:ce:c2:64:
43:bd:80:f4:b5:c6:d2:2f:b5:fa:da:4d:bc:13:18:6c:58:ea:
fa:99:44:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:56 2025 by rpki-client