Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
File: 3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 5LslwE3v3HknoR1AI3dyMM8vz4gfu7pYwxKub6lKOKE=
Subject key identifier: EB:54:99:11:F0:4C:E7:73:36:30:9F:BD:2E:3C:5F:B3:40:11:56:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1DE6AE2F85B4023A74DBFF632DBA8A510DB0B474
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 22 Aug 2025 14:47:21 +0000
ROA not before: Fri 22 Aug 2025 14:42:21 +0000
ROA not after: Fri 21 Aug 2026 14:47:21 +0000
asID: 201341
IP address blocks: 185.237.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e6:ae:2f:85:b4:02:3a:74:db:ff:63:2d:ba:8a:51:0d:b0:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:21 2025 GMT
Not After : Aug 21 14:47:21 2026 GMT
Subject: CN=EB549911F04CE77336309FBD2E3C5FB340115679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:90:26:b0:09:46:42:8b:0c:ce:d0:c5:c8:
0f:56:4d:d9:af:52:4c:35:d9:cd:5f:3b:e8:a8:f0:
16:65:12:f7:cf:40:6a:2e:f3:90:da:c9:a5:0a:da:
57:95:8f:55:16:a1:ba:24:60:3f:de:f2:0f:19:d8:
48:8d:f6:c9:c9:0a:81:75:10:e4:c7:18:cb:3b:ee:
7f:06:2b:9c:fe:dd:c9:5b:f5:de:51:d7:e0:3c:b8:
85:46:fc:cd:e8:7f:5e:56:32:56:f0:77:f8:af:5f:
58:7a:6f:12:0e:de:1e:4d:64:07:cd:03:92:b6:27:
44:25:ce:c6:4a:88:e7:0d:29:0f:08:08:c9:e0:8b:
58:73:b6:2d:2f:07:6a:2c:07:78:ea:d2:23:09:89:
96:b4:44:d6:f2:f5:43:a0:43:b9:c7:62:b6:bf:ca:
c4:41:89:8b:82:9a:04:23:f0:8a:4c:30:a8:91:ba:
5a:fb:08:72:7b:58:89:2e:ea:cf:4b:38:8e:ad:34:
2b:32:87:7e:45:66:ec:fa:c9:b4:b5:dd:1f:28:0d:
03:0a:b0:6b:95:8d:bf:62:9e:cb:2f:9e:b6:e5:89:
cf:d4:df:b9:ee:5e:60:61:07:f3:10:91:a4:01:8a:
02:f3:e2:7c:04:60:a9:df:09:81:5e:53:00:20:f7:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:99:11:F0:4C:E7:73:36:30:9F:BD:2E:3C:5F:B3:40:11:56:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233372e3235352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.255.0/24
Signature Algorithm: sha256WithRSAEncryption
91:48:55:43:ac:50:aa:45:7b:92:c6:c2:13:18:9d:30:37:ca:
4b:1a:45:79:e0:77:73:6a:bb:08:3f:6a:69:f8:dd:c3:b2:0f:
40:cf:77:a5:33:53:64:e3:ca:b2:76:0c:99:b0:97:34:a9:96:
e1:d8:ed:4e:9c:40:80:93:14:62:93:ac:29:7c:a4:ec:9e:4f:
e3:1c:0d:13:f3:a7:6a:15:94:42:e8:29:88:d9:b1:3c:bf:16:
a6:f5:6b:be:b7:b9:73:2a:00:d2:22:19:8a:5f:13:70:93:e9:
5a:10:95:c1:aa:b6:43:71:d4:e7:68:b8:bf:2d:8d:e2:e6:e3:
fe:56:fc:b9:ba:41:b3:bf:ef:ca:aa:3d:f0:61:d5:e1:3e:ca:
ad:b7:a7:f7:96:af:4c:b6:ea:44:8b:ac:7d:64:f4:ab:8d:8a:
6c:ea:94:f2:58:58:3c:50:cb:70:a5:66:e7:a2:04:4d:a0:57:
72:3b:06:00:bc:77:c2:d6:41:96:93:16:84:b8:6f:3e:c0:84:
84:6f:42:69:8c:03:48:ae:84:74:b9:dc:ee:d6:ba:42:bf:7d:
58:a9:92:2b:d5:73:7f:0f:c4:dd:90:7a:e7:04:63:1d:4d:5e:
93:01:dc:01:54:27:6a:b7:c7:14:8f:c7:dd:b6:18:ec:49:a2:
1e:41:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:59 2025 by rpki-client