Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa
File: 3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: gJTr94qZzLs6PTt7fbijW1ac+onxDQfEQd5mFSeotMs=
Subject key identifier: CC:B9:47:00:72:17:84:69:B9:C8:19:5E:2C:A1:30:40:F3:D6:C1:6E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25FD9DFC70DF5001E39B2934216547DF7127512D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa
Signing time: Fri 22 Aug 2025 14:47:14 +0000
ROA not before: Fri 22 Aug 2025 14:42:14 +0000
ROA not after: Fri 21 Aug 2026 14:47:14 +0000
asID: 207137
IP address blocks: 185.234.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fd:9d:fc:70:df:50:01:e3:9b:29:34:21:65:47:df:71:27:51:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:14 2025 GMT
Not After : Aug 21 14:47:14 2026 GMT
Subject: CN=CCB9470072178469B9C8195E2CA13040F3D6C16E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:fb:8c:9c:ca:ae:ca:7e:30:a7:f5:22:41:
67:a8:26:ea:b4:08:d9:69:cf:60:be:3e:1c:4b:1b:
14:e9:7c:e3:3c:01:7e:1b:c1:96:06:64:75:d3:b3:
9f:e6:2c:b0:6e:ea:07:a8:b1:33:5f:8b:d8:1e:b6:
65:f8:75:e2:aa:72:4e:01:4b:83:71:6a:e4:1b:08:
3c:a1:34:c0:37:5a:2a:1e:aa:b6:66:57:96:e7:d4:
a9:85:a8:f3:9b:46:c1:1c:39:18:49:25:ee:15:c0:
2b:80:d9:79:8d:33:e1:ec:19:a5:4c:10:c8:f3:31:
46:e9:b4:7a:b6:dd:c7:5c:aa:17:b3:f4:2d:7c:bf:
80:6f:72:dd:29:33:32:ac:7c:c8:23:81:42:d7:e9:
6d:40:82:7e:6a:a1:7c:1b:8d:df:4c:44:e4:1c:97:
ff:16:19:de:38:fe:93:37:d1:90:d7:37:1a:01:31:
72:eb:26:4f:42:03:eb:f9:91:1e:af:4a:e7:07:85:
3c:34:eb:f2:c6:20:e2:25:da:18:f4:7a:62:07:00:
7d:e1:b6:32:d6:2b:20:3e:ee:e7:26:54:fd:5b:75:
c2:ce:1d:c6:44:af:88:6b:c1:48:69:fc:be:4f:bb:
1e:fc:00:9f:71:f6:87:56:d9:c2:e6:f9:0c:e5:e5:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:47:00:72:17:84:69:B9:C8:19:5E:2C:A1:30:40:F3:D6:C1:6E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36382e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7e:07:52:e3:c5:9f:76:82:9b:30:35:54:48:86:72:63:1a:
2f:a2:c2:7f:37:2c:de:b7:f6:0a:8d:c5:50:b1:39:01:72:81:
08:5a:a1:af:1d:30:9f:10:6b:5b:a9:d5:1d:5a:f0:2f:cd:f7:
90:69:8c:8f:b8:e5:b6:45:c2:82:ba:ab:8c:0d:50:75:9e:35:
ee:0c:da:37:8d:dd:1d:02:48:f1:ad:29:60:e7:92:ed:8b:7b:
18:de:20:bc:f6:25:b2:d6:f3:e9:b0:ba:87:b5:64:15:1a:6e:
58:d7:f9:97:a9:44:a5:d9:ca:dc:fe:fa:0d:8f:12:85:cf:3d:
fc:80:24:9a:81:b6:58:50:9f:3a:b9:f5:9e:8a:f0:bc:18:94:
67:95:55:ee:66:7e:1b:8a:54:bf:2f:aa:a5:d5:2e:b5:89:03:
e6:88:7f:6e:f1:fc:84:c6:dd:4e:5a:55:aa:46:47:57:f7:e7:
b6:bc:a4:68:59:6f:0d:e8:5e:96:bd:e0:be:3f:14:f7:63:9e:
a0:9f:58:f5:e7:21:27:05:28:b8:85:d4:d7:05:90:77:87:ea:
d5:0c:d1:f0:87:b4:2a:42:ce:f5:db:6e:24:db:34:39:f7:70:
38:26:b3:69:9a:fc:f4:60:31:b1:0d:5c:0c:a0:ea:d5:8a:3c:
eb:9e:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:26 2025 by rpki-client