Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
File: 3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: hy5OOwRR3qIcYHYxTRRnRp1u4fZQoZ7sIZcYJix/EFQ=
Subject key identifier: 9C:B6:2B:DA:DC:0A:95:57:88:F2:13:53:BA:DA:51:57:4B:AB:4D:E3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 499C2D5177580159ED3980D283ADA9D6B49FE52F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:16 +0000
ROA not before: Fri 22 Aug 2025 14:42:16 +0000
ROA not after: Fri 21 Aug 2026 14:47:16 +0000
asID: 51167
IP address blocks: 185.245.183.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9c:2d:51:77:58:01:59:ed:39:80:d2:83:ad:a9:d6:b4:9f:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:16 2025 GMT
Not After : Aug 21 14:47:16 2026 GMT
Subject: CN=9CB62BDADC0A955788F21353BADA51574BAB4DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:37:78:11:e0:81:fa:d2:f3:ac:3e:3d:11:
1e:80:38:34:1d:9f:8f:10:af:74:0c:2c:cf:43:2c:
fe:2a:29:50:1b:d8:3d:e4:5c:45:e0:57:d0:8b:89:
22:2f:e5:1f:5b:b1:58:08:18:7f:ff:e1:14:49:e1:
91:5f:b4:08:8e:41:97:3d:36:ab:c8:20:d6:92:be:
3c:f2:08:d6:b2:01:0d:72:d4:fe:cb:41:22:28:d8:
9a:22:60:cf:a0:61:6e:1e:bc:ad:72:55:f2:34:37:
45:01:1b:8e:c3:29:da:e4:64:8f:ed:b3:a0:48:ba:
fc:07:df:2b:8f:50:3f:4d:84:31:22:b1:e3:18:05:
d6:a0:9f:31:e6:1f:2d:18:80:80:e9:73:b2:44:4f:
ec:1a:47:a8:8d:e4:7f:18:44:62:00:70:3d:78:a0:
94:c3:ce:69:00:fd:54:b3:46:e0:5a:23:73:09:ce:
d2:df:6c:13:d1:33:7f:64:f6:fe:c4:0d:63:03:d3:
9e:23:59:1c:3a:6d:dd:0d:5c:5d:39:5f:d2:af:57:
26:79:4c:7b:98:70:18:8a:55:84:a1:f0:92:13:9f:
dc:e9:84:72:2c:4b:8e:18:b0:7e:05:33:44:46:cf:
e5:f9:17:21:42:c0:6b:65:a8:08:c0:41:cc:b1:ca:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:2B:DA:DC:0A:95:57:88:F2:13:53:BA:DA:51:57:4B:AB:4D:E3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b6:70:45:10:a1:14:bc:fe:e0:3d:b3:bb:8a:0b:3c:60:db:
c5:1a:81:b7:a2:59:ce:c7:1b:41:25:55:04:cc:c2:eb:23:3d:
3d:7f:31:e2:bc:83:4c:cc:ef:71:54:33:b6:bd:9e:ba:0b:5f:
5a:67:63:d3:b7:9e:33:fa:fa:91:b6:1d:e4:e8:4f:cc:10:61:
d4:22:8e:43:11:15:85:d3:7e:cb:53:94:ac:7d:2f:07:2d:5d:
e3:16:43:c7:60:36:58:64:e5:e0:3b:83:6e:6f:0c:4a:9f:23:
27:a5:f9:b5:ee:35:6e:05:d0:43:62:2f:0f:15:e3:9e:36:95:
aa:55:3d:37:86:38:f8:2d:46:3b:01:15:12:38:62:5b:00:0d:
09:d4:8b:bb:ff:72:79:81:eb:cf:d2:2b:d6:bf:93:c5:e2:8a:
18:29:d4:54:eb:16:2f:53:4f:9a:5b:49:69:3a:3f:4e:33:d6:
e0:94:82:4b:8e:96:e1:10:8a:bb:8a:00:64:c5:f2:a6:42:65:
25:08:3f:34:b0:e9:87:14:de:76:cf:b7:ef:bc:e1:95:b3:cb:
5b:69:22:96:c1:c3:ce:3e:cf:9b:ae:af:7e:43:02:6a:b3:4b:
a1:14:68:89:67:01:44:a3:c1:b6:51:b1:0c:a3:f1:0c:19:3d:
f4:b0:81:c6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSZwtUXdYAVntOYDSg62p1rSf5S8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTZaFw0yNjA4MjExNDQ3MTZaMDMxMTAvBgNV
BAMTKDlDQjYyQkRBREMwQTk1NTc4OEYyMTM1M0JBREE1MTU3NEJBQjRERTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQaDd4EeCB+tLzrD49ER6AODQd
n48Qr3QMLM9DLP4qKVAb2D3kXEXgV9CLiSIv5R9bsVgIGH//4RRJ4ZFftAiOQZc9
NqvIINaSvjzyCNayAQ1y1P7LQSIo2JoiYM+gYW4evK1yVfI0N0UBG47DKdrkZI/t
s6BIuvwH3yuPUD9NhDEiseMYBdagnzHmHy0YgIDpc7JET+waR6iN5H8YRGIAcD14
oJTDzmkA/VSzRuBaI3MJztLfbBPRM39k9v7EDWMD054jWRw6bd0NXF05X9KvVyZ5
THuYcBiKVYSh8JITn9zphHIsS44YsH4FM0RGz+X5FyFCwGtlqAjAQcyxyjh5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUnLYr2twKlVeI8hNTutpRV0urTeMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjM0MzUyZTMx
MzgzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC59bcwDQYJKoZIhvcNAQELBQADggEBAAa2cEUQoRS8/uA9s7uKCzxg28Uagbei
Wc7HG0ElVQTMwusjPT1/MeK8g0zM73FUM7a9nroLX1pnY9O3njP6+pG2HeToT8wQ
YdQijkMRFYXTfstTlKx9LwctXeMWQ8dgNlhk5eA7g25vDEqfIyel+bXuNW4F0ENi
Lw8V4542lapVPTeGOPgtRjsBFRI4YlsADQnUi7v/cnmB68/SK9a/k8Xiihgp1FTr
Fi9TT5pbSWk6P04z1uCUgkuOluEQiruKAGTF8qZCZSUIPzSw6YcU3nbPt++84ZWz
y1tpIpbBw84+z5uur35DAmqzS6EUaIlnAUSjwbZRsQyj8QwZPfSwgcY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:43 2025 by rpki-client