Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133392e302f32342d3234203d3e20313336373837.roa
File: 3138352e3232352e3133392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: etlD0mjSw9+YH7nx/8hj6hB73fciF7iy5PQsKUPDZ4s=
Subject key identifier: 17:5B:28:5C:24:92:DD:D2:87:CE:14:18:20:75:A0:4F:C0:C4:49:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4D162AA1FEB3A7670DCA53D4F76328B056BE174D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 14 Aug 2025 22:47:05 +0000
ROA not before: Thu 14 Aug 2025 22:42:05 +0000
ROA not after: Thu 13 Aug 2026 22:47:05 +0000
asID: 136787
IP address blocks: 185.225.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:16:2a:a1:fe:b3:a7:67:0d:ca:53:d4:f7:63:28:b0:56:be:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 14 22:42:05 2025 GMT
Not After : Aug 13 22:47:05 2026 GMT
Subject: CN=175B285C2492DDD287CE14182075A04FC0C449C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:33:5e:df:93:77:36:70:83:21:b0:ca:fd:
65:9d:68:f6:6d:35:90:e8:b5:c7:c1:55:66:c6:88:
b1:d2:e8:5b:ed:41:1e:79:e6:83:8f:ba:f2:cf:9a:
2a:3b:28:34:98:4a:e8:d1:30:92:79:f1:2c:2d:c8:
b9:60:09:69:a4:05:45:97:d6:e1:0b:61:4c:21:82:
69:d8:3e:84:4e:02:e1:04:8b:9f:59:db:91:d0:ee:
96:ab:14:89:60:44:77:77:ea:9b:0f:67:61:ea:9a:
a8:0c:d4:ab:da:3c:a0:45:04:6b:10:c2:81:20:f6:
e0:43:b5:5f:3d:cf:a0:6a:5e:48:55:bd:ec:c2:44:
ea:f4:cb:40:86:d4:a2:ec:44:e4:b5:dc:50:16:82:
5d:fd:30:8f:da:f4:b2:7d:52:0b:63:66:e9:d1:09:
ad:87:b0:0b:22:e5:8b:b4:2a:44:6e:da:de:4f:6d:
d2:1d:3b:cd:25:cb:5c:1b:bc:1e:ff:92:10:0d:d8:
31:fa:41:64:e1:52:0a:7c:28:b2:33:46:07:5b:2a:
01:18:3c:43:1d:2c:54:24:ed:81:82:b6:c4:bd:99:
52:6c:f4:8f:49:98:4d:b8:b0:2c:ff:98:83:8c:d5:
f6:d0:8e:25:83:f8:4f:73:43:57:c1:78:3c:02:94:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:28:5C:24:92:DD:D2:87:CE:14:18:20:75:A0:4F:C0:C4:49:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3133392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.139.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c6:31:91:74:2a:78:53:d2:07:ff:2e:a7:3a:d2:77:ae:dd:
73:b0:a3:3e:82:2c:1a:90:ab:b7:f4:81:4f:97:1f:65:5d:ed:
c3:f3:81:a3:1f:ac:fa:ef:81:0d:45:b9:8b:f8:6f:8a:d9:ee:
3b:a2:62:77:b6:1f:b3:f2:79:56:5b:8a:94:93:5c:a1:28:f1:
e2:d8:91:de:2c:ad:c5:63:19:78:71:af:5f:47:dc:62:40:1f:
95:0e:1f:11:8c:3e:d9:b4:90:a3:d8:52:39:e0:5e:01:95:0a:
f3:9c:35:b7:2a:8e:ba:f5:91:a1:2c:66:64:22:b6:90:f7:cb:
9a:c7:0b:74:29:74:b1:46:76:a0:6a:6c:d0:4a:b7:e2:0b:dc:
be:5b:c9:bb:45:0b:d0:50:90:9c:10:91:43:17:ec:5b:c3:d1:
5b:9c:8d:b0:1a:cd:b6:33:01:8c:be:02:de:10:ec:4c:d5:c4:
83:d4:cf:b9:77:b5:10:90:31:1e:f5:f4:e4:3c:54:69:c0:d5:
da:36:23:b6:c2:e7:dd:4f:a8:d4:84:18:35:e8:64:87:7a:1c:
cb:b1:6b:3b:f2:0b:e8:19:93:45:a3:5f:12:d7:24:7b:5b:56:
ff:5f:75:52:93:a6:7d:b8:f8:e2:de:86:34:0c:6a:49:da:c5:
ad:b1:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:53 2025 by rpki-client