Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
File: 3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 4PP4G5yuc63534vvsQCR5eivUzd19403C+NGePIMVQM=
Subject key identifier: 6A:62:E7:B0:4F:FF:75:06:22:B3:91:E8:1E:73:B0:E8:2F:5A:3B:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 505239A78202989EE546F2273D289AD13F0F4A56
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
Signing time: Fri 22 Aug 2025 14:47:13 +0000
ROA not before: Fri 22 Aug 2025 14:42:13 +0000
ROA not after: Fri 21 Aug 2026 14:47:13 +0000
asID: 47583
IP address blocks: 185.239.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:52:39:a7:82:02:98:9e:e5:46:f2:27:3d:28:9a:d1:3f:0f:4a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:13 2025 GMT
Not After : Aug 21 14:47:13 2026 GMT
Subject: CN=6A62E7B04FFF750622B391E81E73B0E82F5A3B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:35:1e:bd:80:ad:c1:d7:97:ec:1d:7c:0e:
36:ab:7b:a6:1c:e9:73:97:e9:70:b7:b9:0e:ff:d5:
dc:fa:19:82:b3:7c:95:08:4b:12:19:47:9f:49:fa:
60:fe:55:1f:5e:24:ff:06:63:3d:8d:30:75:d4:20:
ca:3b:4d:12:d4:f3:31:47:75:8a:2a:54:e9:3d:cf:
9b:4e:f8:c3:65:2a:eb:e2:8e:d7:4a:e3:b5:8c:8b:
a0:94:09:fd:6b:53:df:4a:95:4a:a4:5e:d9:60:ce:
fa:60:f4:cc:1f:db:39:97:cd:0c:41:a3:40:4f:3e:
c9:44:e2:4d:22:37:ac:66:8f:20:81:ca:d0:3f:53:
c2:48:02:85:bf:ce:16:83:77:62:6a:13:be:9f:3e:
5e:47:e4:27:d2:bc:11:61:05:2d:cc:6f:44:ac:da:
e5:c6:66:16:3b:2f:e9:2e:40:0f:a2:74:e6:3b:31:
2b:28:7b:27:93:eb:e6:68:85:cf:f0:22:10:4d:4e:
a6:ed:d6:dd:14:44:ff:80:cf:98:39:82:7f:59:6f:
58:69:d3:9a:40:93:6b:06:78:b2:24:4e:11:ea:f1:
a3:8c:fa:e9:59:43:87:35:a0:36:c1:9b:50:85:8c:
d6:86:10:ad:b9:b0:68:8b:54:c1:e8:7b:3a:b0:9c:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:62:E7:B0:4F:FF:75:06:22:B3:91:E8:1E:73:B0:E8:2F:5A:3B:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233392e3231302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:31:4e:f9:b8:62:f6:39:8d:5b:b9:42:3c:51:d5:fa:a3:3e:
8a:9a:3f:fd:54:fc:29:b0:db:c2:08:93:50:d8:88:aa:24:7f:
20:ab:88:78:8b:20:02:d4:5f:eb:44:7b:06:4a:4c:30:6c:3e:
2a:d5:c3:c5:42:4b:5d:dd:8f:06:84:28:7a:0a:30:61:57:ab:
3c:20:c3:2c:22:1e:e0:39:b4:1f:4d:4e:80:3e:0b:e1:b7:ec:
fa:f4:0b:e9:0e:35:13:cf:e3:51:4a:96:c1:ab:a7:e1:24:0b:
53:15:93:4c:f1:b4:6e:92:a6:d3:3d:78:b9:ec:d9:26:95:f0:
64:18:12:9e:f9:82:a1:cc:92:e3:c6:c2:3c:c7:ca:5a:f5:6e:
dd:62:c0:31:ad:70:de:a7:89:8a:ed:7c:51:17:d8:c5:0c:de:
35:7d:38:71:0c:48:c9:bb:28:e4:0f:14:19:2f:2d:f5:fd:5c:
7c:83:78:91:71:bb:df:f9:41:34:af:8e:f5:dd:75:9e:ef:18:
63:96:e0:71:44:53:a5:03:88:7f:3b:15:ee:8f:ab:6a:46:4e:
c4:7f:8b:c7:bb:8b:14:69:ba:9d:48:e4:f7:97:38:06:ac:d9:
44:1e:12:e2:b7:4d:4c:48:cc:46:6c:4f:72:bf:b7:43:e9:fa:
d2:b7:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:32 2025 by rpki-client