Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: RN2Rp+Km1tDmPNkuau7cuWyB2MOQrlqy8Vk9aQdTG/o=
Subject key identifier: 13:04:0A:01:67:85:DE:A4:5A:DF:39:64:49:3C:A9:8E:D7:B3:43:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62CC5571B593A245DF53AE020DF09D00098BCB79
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:23 +0000
ROA not before: Fri 22 Aug 2025 14:42:23 +0000
ROA not after: Fri 21 Aug 2026 14:47:23 +0000
asID: 51167
IP address blocks: 185.245.182.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cc:55:71:b5:93:a2:45:df:53:ae:02:0d:f0:9d:00:09:8b:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:23 2025 GMT
Not After : Aug 21 14:47:23 2026 GMT
Subject: CN=13040A016785DEA45ADF3964493CA98ED7B343C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:43:be:54:f2:34:b3:f2:1a:cd:1b:a6:c0:
11:c9:40:4d:80:55:b5:bf:da:a9:ad:5a:7e:0c:eb:
17:f3:01:0b:d1:2e:d2:2d:c8:11:04:1f:9f:91:10:
ee:47:05:80:96:d7:1f:02:4d:f7:bd:6c:6f:0f:d5:
d0:f0:75:cb:9e:b3:d8:dc:94:51:a8:8d:55:38:ba:
2c:f2:e2:91:31:00:50:0a:83:62:82:a5:aa:fc:0c:
3a:72:09:64:eb:4e:a5:5b:de:82:5b:99:50:7a:be:
f7:37:ea:76:5b:a9:b5:f7:00:3d:52:a1:9d:f9:2b:
ca:7f:2e:44:a5:f4:b7:68:bb:1d:2e:20:3b:4b:02:
f8:3b:e5:4a:d0:48:32:57:1c:6d:15:4f:06:4c:25:
86:fc:c9:75:36:06:ed:a3:c7:b2:66:62:9e:e4:dc:
53:e2:cf:b3:b8:c4:06:08:97:e8:fa:10:d4:0c:4b:
df:d8:ea:ee:34:e6:c2:1b:29:89:da:af:2f:8a:61:
1c:76:6c:14:e7:7e:dc:a9:33:33:2e:a9:19:18:c9:
2a:75:b2:00:28:aa:65:8b:23:d1:d3:4c:f1:d9:9d:
c2:c9:22:5c:c4:2b:2e:9b:5d:c2:d9:ad:c9:c7:57:
10:a6:67:61:a4:5e:d7:d0:9f:dd:f2:a8:50:f4:8b:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:0A:01:67:85:DE:A4:5A:DF:39:64:49:3C:A9:8E:D7:B3:43:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.182.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:71:67:53:f9:7e:e2:df:2e:ee:a8:dc:ad:d7:33:91:92:45:
88:e7:2f:02:e9:91:3e:da:c6:d4:f9:d0:1a:30:93:49:90:0e:
71:6b:85:e0:aa:b6:13:12:2c:81:4a:1c:ee:ce:8d:af:94:26:
38:4b:fc:3b:96:30:64:0b:b1:23:69:20:46:f3:39:72:4e:77:
d7:67:d2:b2:ed:af:b8:af:7f:88:dc:b5:b7:02:e9:81:12:a6:
1b:26:a5:18:3c:f7:b7:45:1f:ea:be:c7:b9:89:30:b7:0c:1a:
f7:8a:85:b2:eb:6e:fb:f1:0b:f4:bb:26:dd:7a:00:73:5a:fa:
a6:61:9b:a8:11:26:87:42:f1:88:66:77:00:fa:32:63:46:10:
22:b1:5a:bd:41:fc:30:7e:57:3b:7f:dc:f4:07:b2:28:5b:21:
01:61:99:ae:88:2d:c3:29:ef:fc:f4:bd:48:d7:4b:9a:e2:46:
26:b2:dc:b5:22:63:47:25:13:b2:e5:55:32:0a:3a:06:a7:5a:
6d:a0:f1:a6:af:f4:d2:de:9d:e5:34:b0:e6:53:df:b3:41:df:
d3:a4:53:09:ad:87:e9:0e:4f:45:b1:ce:99:c0:c6:47:31:a2:
72:f0:51:1f:8d:fa:50:61:92:48:37:13:8e:51:d2:99:60:04:
e2:fd:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:33 2025 by rpki-client