Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
File: 3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa (raw, json)
Hash identifier: BcMHKmPHk1iaziojPsolxFQee26qV9WLAd9ZLT4Q3Xs=
Subject key identifier: A5:B3:9D:CA:4E:10:2D:39:D3:70:EC:74:6E:91:18:61:CF:61:97:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B7719893F9DCF24553437762B3ABAFE9105CDA0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
Signing time: Fri 22 Aug 2025 14:47:11 +0000
ROA not before: Fri 22 Aug 2025 14:42:11 +0000
ROA not after: Fri 21 Aug 2026 14:47:11 +0000
asID: 141995
IP address blocks: 185.227.134.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:77:19:89:3f:9d:cf:24:55:34:37:76:2b:3a:ba:fe:91:05:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:11 2025 GMT
Not After : Aug 21 14:47:11 2026 GMT
Subject: CN=A5B39DCA4E102D39D370EC746E911861CF6197AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:ff:3f:60:a7:3e:a4:28:3e:00:f2:c9:37:
e7:09:38:1f:ba:f9:f5:ea:64:9b:09:bf:b8:80:db:
22:d6:41:f5:7b:12:38:e5:cb:c1:b0:a1:54:2d:ff:
99:a3:b4:1a:3b:c5:53:ad:1c:ac:03:f4:56:58:67:
ca:7f:68:7c:5a:cb:33:b3:09:42:a3:90:79:4a:e2:
ee:80:1d:de:e5:25:27:89:e7:2c:3e:ff:90:8e:44:
ae:68:ef:a9:3e:ff:0c:93:fc:92:20:93:e6:82:86:
f8:59:6f:8a:a2:00:77:6b:55:b8:f5:d6:c5:02:cb:
15:71:58:ce:03:4f:4d:db:3f:4f:49:d1:e2:f6:3d:
4d:64:96:10:02:4d:25:69:b3:f7:c5:5c:f6:45:c5:
8e:88:5c:56:7e:a6:6e:d4:0d:17:29:f0:8f:a6:cd:
48:74:97:d6:a5:80:f2:8a:4f:2f:8e:15:09:7d:cd:
56:d6:52:8c:d2:3a:19:35:8d:9d:d7:8f:03:f2:e1:
9a:23:d8:ef:87:bc:6b:1a:7b:48:8b:28:68:cb:cd:
95:7c:41:76:16:9b:a1:23:7e:25:d9:05:86:bd:8c:
d0:5e:aa:d2:f7:11:1a:c7:82:8b:30:f7:da:01:92:
8c:ab:4d:e8:5e:6c:f1:8c:80:63:ec:7b:46:6e:3f:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B3:9D:CA:4E:10:2D:39:D3:70:EC:74:6E:91:18:61:CF:61:97:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232372e3133342e302f32332d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.134.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:e5:2b:d8:48:2b:20:0f:b7:cb:dc:fd:ec:ac:a8:2c:b2:fe:
2b:05:05:68:ee:6c:a7:3d:43:81:4b:2c:60:54:5d:da:bc:a4:
5d:c2:7f:43:b4:e9:b8:67:9b:f9:51:66:bf:6c:cd:53:6a:52:
65:64:47:cf:f3:f2:23:41:18:aa:83:5b:75:07:52:38:22:88:
90:1f:81:7d:39:b8:6f:cb:8a:23:bc:1b:28:c2:13:e5:3c:21:
10:78:f9:c7:b4:aa:75:8d:05:df:c2:c2:48:9a:17:5a:e7:86:
3d:f0:b6:8c:7c:50:b3:63:87:cc:56:f7:9d:3f:21:68:6a:63:
55:ae:45:8a:93:98:c5:61:00:4a:b8:f6:88:45:59:dc:04:21:
01:10:8e:f5:1a:74:3a:65:30:c1:8c:0f:8e:c5:a9:56:ad:bd:
ae:e7:4c:9f:1e:47:5e:c5:85:b4:56:de:9b:64:38:4b:55:e3:
f8:75:2b:65:b9:f4:52:d9:00:ad:b7:b9:69:a8:f6:7d:2a:36:
ff:5f:c9:32:09:a6:6c:82:31:3c:95:60:ae:38:e9:7d:c6:63:
2d:69:41:07:68:ea:6e:30:10:d8:57:9f:f4:40:74:a9:d1:5d:
88:11:cd:3b:63:d6:22:a5:93:6c:c3:9b:e7:2a:4c:70:34:34:
f0:db:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:26 2025 by rpki-client