Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa
File: 3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 6lDUlGYoqGVrS4lIUMAkFkIPEheW1+2xF5qGTzTflck=
Subject key identifier: 8C:FE:82:0C:62:48:F8:3A:29:E0:83:A5:C3:73:8F:80:CB:6C:C8:08
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43D09797C0C023667BA5215DD4F1817F9C30D9B8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 27 May 2025 22:46:30 +0000
ROA not before: Tue 27 May 2025 22:41:30 +0000
ROA not after: Tue 26 May 2026 22:46:30 +0000
asID: 204170
IP address blocks: 185.225.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d0:97:97:c0:c0:23:66:7b:a5:21:5d:d4:f1:81:7f:9c:30:d9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 27 22:41:30 2025 GMT
Not After : May 26 22:46:30 2026 GMT
Subject: CN=8CFE820C6248F83A29E083A5C3738F80CB6CC808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:4c:4c:fa:fc:58:e6:d0:aa:00:95:f1:e9:
5f:99:28:c1:19:1b:06:12:6a:89:38:e1:6e:66:3d:
49:89:b6:b3:6d:68:4e:0c:23:c6:7c:53:c9:dd:63:
7e:36:09:07:35:d2:52:9f:6a:ea:af:a8:38:38:1b:
b5:59:2a:41:ae:91:b3:d9:ae:bd:7a:2c:33:9b:7f:
8b:69:c8:91:a0:19:6d:cc:f7:99:3a:bc:0a:64:12:
df:9f:61:3e:52:0a:e7:41:3f:f9:c6:8f:8e:23:ea:
56:c0:9d:80:43:1d:de:df:98:8a:2e:12:24:61:7d:
b7:29:7a:62:b2:e0:97:d8:c6:d1:65:2b:c1:14:7a:
84:a2:6f:58:35:53:27:2a:37:1d:96:c4:5d:f4:31:
0f:8a:2c:0e:36:77:66:55:ff:c5:eb:d8:be:66:6b:
bd:ac:ba:10:7e:7f:fc:f4:8c:6f:ea:29:dc:78:52:
b5:e9:0c:cd:7f:50:a3:bb:58:67:19:06:80:a1:ed:
9c:bf:af:e7:02:46:9b:20:4b:09:ec:a3:aa:dd:8d:
62:66:27:56:a1:40:a3:09:8f:d3:7f:f0:ee:6d:f5:
a9:5b:e0:73:b9:dc:95:c9:02:82:3e:b2:78:03:2a:
08:88:60:52:02:df:be:4c:b9:97:6e:93:9b:6c:70:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FE:82:0C:62:48:F8:3A:29:E0:83:A5:C3:73:8F:80:CB:6C:C8:08
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232352e3233352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.235.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8e:f8:13:3a:50:98:76:32:97:0b:a9:b2:3c:ab:84:9f:e2:
e1:f1:9b:88:f3:4e:8f:87:93:fd:e3:36:ba:a3:67:15:55:00:
e9:94:a9:99:af:bd:e0:66:83:b9:bc:d8:d3:9c:13:6e:72:db:
47:69:b8:86:f4:c8:15:b5:54:ca:32:13:b6:41:6c:67:af:64:
c8:46:6a:8d:a0:d0:ba:63:53:fe:c6:a8:2b:10:3b:68:0e:18:
77:02:11:02:2e:4d:66:e8:2e:74:90:0f:c6:5d:b0:a7:b5:2d:
43:4d:ea:ea:16:85:7f:d1:32:7e:b9:75:36:ca:95:2b:0e:36:
55:eb:08:f6:6f:67:28:49:f7:ba:c6:5c:d4:5a:f7:c9:a2:4a:
87:0f:d9:10:32:f1:37:0c:e9:49:4e:f9:19:fc:7a:0c:e5:a9:
3e:df:f0:5b:3b:ca:0e:d1:b6:55:af:fd:29:ed:22:77:c1:a8:
f2:24:91:16:d1:c1:f2:d9:21:d6:1b:02:c8:b3:bd:71:83:05:
29:72:07:21:ab:58:dd:86:8a:e1:30:02:c6:ae:c5:ff:5c:9f:
30:0d:0c:8d:3e:07:ff:34:1d:94:53:3d:9d:12:5d:c8:4d:4e:
0c:85:17:07:d7:47:de:65:c5:89:7e:4b:38:77:10:43:fe:13:
93:fb:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:02:39 2025 by rpki-client