Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa
File: 3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: dtmNoK0T9qVCuNcsm9RN2l9pFS8BinndtyuzIL8gZm8=
Subject key identifier: F7:32:FA:55:6F:01:5D:82:F3:EE:B5:31:F1:42:88:BA:63:25:8C:B0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22F588657B03606584C6EA7F2F39377C503144B6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:10 +0000
ROA not before: Fri 22 Aug 2025 14:42:10 +0000
ROA not after: Fri 21 Aug 2026 14:47:10 +0000
asID: 51167
IP address blocks: 185.229.119.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f5:88:65:7b:03:60:65:84:c6:ea:7f:2f:39:37:7c:50:31:44:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:10 2025 GMT
Not After : Aug 21 14:47:10 2026 GMT
Subject: CN=F732FA556F015D82F3EEB531F14288BA63258CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:99:e2:d4:3f:74:6f:c5:47:ba:a7:eb:d0:
77:74:98:09:30:3a:91:a7:d6:c0:f0:1d:da:15:b5:
81:ea:8a:22:0f:aa:21:de:45:bd:8d:41:1b:fb:7a:
c7:78:7c:cf:ef:71:ba:3c:25:29:e4:15:a5:7a:49:
87:da:ce:09:af:7b:76:1b:a9:59:dd:66:85:c8:4e:
79:d8:9f:c7:46:c5:38:44:c5:2c:d1:a0:88:00:65:
31:76:5c:8c:30:ad:61:da:db:b3:9a:aa:c3:30:51:
0d:46:5e:13:66:ce:e9:ac:94:5f:47:6b:63:4c:60:
94:e1:56:92:0e:3e:9c:23:fd:07:9e:df:b3:23:50:
14:de:42:a8:54:8c:d1:49:70:79:2e:0c:05:b7:9e:
7e:90:84:0a:46:a0:c8:06:3f:9c:be:48:13:5e:a2:
26:7d:90:75:2c:f3:cf:f1:39:b7:35:e8:1f:be:b4:
8c:d8:b3:7e:b8:b6:6f:5a:2b:fe:d0:2b:ed:04:bc:
88:20:6b:5d:68:b4:98:d4:b1:a7:1a:2a:75:00:f9:
28:4a:5f:a6:fe:96:5a:a1:dd:bf:b3:ca:46:17:7c:
6c:7d:af:cc:98:dd:7b:cc:9a:ba:48:cf:ff:fa:85:
5d:1b:a2:bf:95:5e:ca:0a:9e:3c:49:bf:8f:01:12:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:FA:55:6F:01:5D:82:F3:EE:B5:31:F1:42:88:BA:63:25:8C:B0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9e:db:d3:25:42:39:95:d1:ca:b9:87:81:65:e9:03:45:bb:
d2:d0:1c:a1:90:9d:8a:92:fd:c8:4c:27:d5:64:69:24:16:54:
76:63:e4:f4:45:72:5e:aa:89:14:6c:a5:54:4f:5f:0a:1f:2e:
11:72:b9:9c:c1:2a:08:75:f5:2f:41:bf:23:b0:ea:e8:61:f0:
8e:9b:98:b0:3d:8b:c2:51:ba:44:d1:f1:b1:9a:c1:63:0d:f1:
9c:49:19:8e:fc:99:71:aa:92:37:50:0c:0e:4c:8c:14:7c:94:
32:1c:42:8b:3b:55:6b:bc:8e:d7:9d:90:21:62:3c:4c:e1:de:
54:af:c6:d0:0b:24:67:89:70:68:f7:35:c2:2b:d0:ef:fb:14:
f3:ce:54:f5:d0:bd:68:c2:e3:97:33:90:1a:17:65:a7:16:0a:
cb:40:38:74:62:e5:0a:4e:b1:88:24:de:5a:f6:e2:6c:e6:78:
13:4b:2d:5b:f9:cf:5e:39:d9:1c:dc:fc:95:85:c7:2e:23:11:
49:b9:08:b2:08:51:57:e5:76:47:2a:98:fe:0a:5a:28:d0:b5:
9a:4c:cc:75:6b:fb:99:49:5f:b8:f2:c4:16:7a:e2:10:3f:04:
a1:ea:6c:8c:d2:21:2a:4d:ea:d0:d0:0c:4f:ed:27:4c:d0:07:
e8:16:b3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:30 2025 by rpki-client