Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
File: 3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: SvnZWV31MRcxeE8bDC//zxgaOc9d96AULqGCjz+5sHE=
Subject key identifier: 55:4F:F1:C3:43:E4:F7:45:28:C0:CB:17:07:41:C0:18:C3:C1:C8:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FD590E9463B7BD5C1EB709362C130135DD7D03B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
Signing time: Fri 22 Aug 2025 14:47:17 +0000
ROA not before: Fri 22 Aug 2025 14:42:17 +0000
ROA not after: Fri 21 Aug 2026 14:47:17 +0000
asID: 47583
IP address blocks: 185.245.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d5:90:e9:46:3b:7b:d5:c1:eb:70:93:62:c1:30:13:5d:d7:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:17 2025 GMT
Not After : Aug 21 14:47:17 2026 GMT
Subject: CN=554FF1C343E4F74528C0CB170741C018C3C1C821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:38:82:97:fa:31:f9:23:6a:75:ff:12:88:
62:b2:98:26:b7:2c:f8:5f:89:10:5d:10:de:07:e9:
33:7a:1a:8a:e0:bd:8a:fc:3c:0e:83:40:fc:26:af:
a5:e9:ff:4d:12:83:eb:7d:f7:fe:eb:aa:8f:00:8f:
47:42:f4:7a:b9:cf:cf:4b:03:76:39:16:51:48:69:
2a:88:9e:a0:77:8b:45:3c:c8:82:0d:30:9f:84:cf:
29:4d:b0:b5:b2:5d:b9:e5:9b:84:2d:69:62:b8:10:
dd:1e:f6:f5:93:b4:29:2e:16:8d:1a:3b:1c:49:2a:
23:36:60:57:8c:05:6a:74:a3:c9:80:cc:6f:48:0c:
3f:19:e1:c5:53:b5:d1:93:91:fd:7f:26:05:72:99:
f6:d2:c2:48:98:e8:3c:38:04:89:c6:d0:47:99:bc:
45:0a:96:53:79:a5:b8:5f:c0:f7:fe:13:3d:9b:98:
76:78:c4:ff:a4:45:05:fb:1b:78:92:cb:f2:5f:70:
0f:fb:21:97:7c:7b:72:a6:fa:cf:17:0b:e8:58:05:
61:5a:46:12:86:8d:7f:90:ae:f2:27:a2:d4:ac:16:
1e:d5:7e:fb:c7:c6:74:6f:9f:f9:bd:67:92:60:28:
68:68:6d:42:59:84:ae:16:5e:90:8f:77:4b:3a:c5:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:F1:C3:43:E4:F7:45:28:C0:CB:17:07:41:C0:18:C3:C1:C8:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.180.0/24
Signature Algorithm: sha256WithRSAEncryption
89:47:4b:8b:fc:b7:d0:02:67:f9:55:7c:bc:d0:c6:13:07:22:
64:93:27:26:e0:62:b1:d2:fa:1c:35:ea:c9:f8:5e:7a:27:02:
b1:db:fc:b1:1b:85:cd:e1:84:3c:4e:fe:cd:6c:68:bf:d0:54:
d3:57:83:d2:9d:e4:6b:38:fb:5e:64:7a:1b:1d:ef:ea:e5:ae:
02:8b:f6:ef:48:67:25:cf:8d:7e:9d:b9:ba:d9:c5:c6:cf:01:
49:db:c0:52:cf:b3:d8:30:5c:cf:92:34:3e:68:83:68:bf:f3:
bd:0f:5e:3b:65:db:de:73:46:04:61:b6:2e:2f:5d:b2:0f:30:
63:c2:6b:a7:d0:a0:96:31:6b:4a:53:f7:5f:99:38:00:3f:89:
6e:9b:97:2c:8c:24:ab:82:05:4a:de:fc:ca:bc:d9:75:75:aa:
22:d2:ad:54:43:b6:1c:e6:14:6b:ed:a7:8b:fa:58:cb:ee:29:
14:8f:15:9d:b8:75:8f:8a:c4:31:6c:fb:87:15:e1:8a:96:a4:
c7:74:fe:ca:20:97:26:33:35:9a:d0:72:51:28:da:4a:ab:57:
ef:a6:88:5e:00:de:b5:28:bd:17:6e:12:2d:40:a5:bf:84:9c:
2f:ab:f8:5b:61:da:76:7d:9b:f0:44:9a:ff:0d:48:92:c1:39:
8b:12:6c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:10 2025 by rpki-client