Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 6ctuh2ZSNL3QtwdgILNB9Dvv5/v1V1anXk3A96u/71Y=
Subject key identifier: F4:B3:83:26:E4:0E:12:74:B4:95:A3:B0:C1:00:A4:FA:AD:D8:9E:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 10B004D97BABA93B90D60668DCAB3C83A2F55C29
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:20 +0000
ROA not before: Fri 22 Aug 2025 14:42:20 +0000
ROA not after: Fri 21 Aug 2026 14:47:20 +0000
asID: 136787
IP address blocks: 185.222.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b0:04:d9:7b:ab:a9:3b:90:d6:06:68:dc:ab:3c:83:a2:f5:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:20 2025 GMT
Not After : Aug 21 14:47:20 2026 GMT
Subject: CN=F4B38326E40E1274B495A3B0C100A4FAADD89E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:67:55:d3:2e:3e:e8:09:3d:67:1d:af:e5:
d5:11:9f:a0:f4:81:be:db:7f:9a:fa:9a:02:13:ea:
83:09:20:1e:f3:a8:f2:37:d3:37:57:c3:6d:b8:18:
d7:66:40:e0:5f:d1:f2:96:4f:96:1f:b4:0f:7a:55:
8d:cc:af:e5:d1:2c:08:e4:47:b8:41:bc:cd:7b:ae:
d4:cd:73:45:dc:a0:4c:f7:37:9b:42:c9:56:7a:65:
50:e2:e4:b8:85:36:78:8c:58:87:c2:ff:22:33:df:
f6:37:56:63:5e:54:b9:3d:da:14:9f:45:89:1b:a0:
7c:24:42:01:34:28:f8:a9:6b:c5:bd:7b:f8:15:ed:
1e:0a:08:d9:5b:6b:bb:25:dc:50:af:f2:6f:9b:b6:
ca:cc:c8:b5:71:55:7c:87:de:d8:76:ae:c2:93:d8:
03:a9:62:82:dc:1c:4c:2d:67:f6:05:9a:ea:7e:72:
f7:23:01:a3:b2:0c:bc:61:72:88:ce:85:83:96:63:
f0:48:b7:27:88:b1:ad:15:e9:cf:aa:2f:6a:d2:dc:
37:8b:e7:73:94:31:17:80:58:31:b4:8a:7c:96:2b:
9b:7f:f9:bd:62:63:ef:be:53:a9:55:9a:91:b0:5d:
ae:48:cb:14:a1:ca:07:50:40:b0:9a:1c:b2:bf:cd:
52:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:83:26:E4:0E:12:74:B4:95:A3:B0:C1:00:A4:FA:AD:D8:9E:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cb:f2:b2:87:b2:47:53:22:30:e0:fd:91:b1:f4:b4:84:75:
4e:12:0c:36:a0:53:a1:c0:f1:7b:2b:a7:84:73:ef:bf:5f:51:
20:ed:1e:45:22:71:e7:c2:52:ef:9a:99:a1:c0:5e:67:74:8e:
34:8c:36:8a:0b:60:c6:84:7b:d6:6f:b7:8e:a0:5d:64:b0:72:
2f:6f:e2:eb:30:02:f7:f6:44:c5:17:c2:a9:6e:a2:e6:2a:53:
fa:d2:49:fb:f8:d2:5a:79:e0:3c:51:f0:6d:d1:92:aa:bc:a1:
a1:d3:f5:e7:2c:92:c8:f1:03:77:40:9f:b4:e1:1c:80:8f:ca:
e7:2b:ab:91:9d:f2:92:06:2d:16:7b:b2:2e:51:0a:0a:c6:26:
97:6f:e5:39:71:5b:37:e3:55:a4:d6:dc:f1:44:57:e1:88:3d:
07:8a:fa:fd:81:d5:cd:2e:f5:29:ed:29:e4:9e:b2:41:b8:c0:
45:df:02:96:e1:b0:4c:7f:38:61:4e:c9:41:12:e0:96:cb:e6:
ed:f0:27:f8:d0:3a:df:f8:85:eb:96:c6:cb:fa:d3:90:2e:00:
72:29:c3:0f:1a:3e:e1:f3:a7:c4:9c:66:0d:29:ac:12:86:85:
0e:e2:9b:42:9a:96:fa:17:b8:0d:5b:df:78:55:07:a3:b3:40:
56:52:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:52 2025 by rpki-client