Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
File: 3138352e3235302e33362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: E2Y1aZdaHZNVQwHW2CHk1eNSnwh9sjbSiF0NettSNy8=
Subject key identifier: DE:2B:6B:49:62:74:5E:FE:43:9D:A7:C3:01:86:48:1C:DC:CA:F2:52
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12E4A8077FBCE65A173C1DB118D8408CE0ED3094
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:15 +0000
ROA not before: Fri 22 Aug 2025 14:42:15 +0000
ROA not after: Fri 21 Aug 2026 14:47:15 +0000
asID: 51167
IP address blocks: 185.250.36.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e4:a8:07:7f:bc:e6:5a:17:3c:1d:b1:18:d8:40:8c:e0:ed:30:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:15 2025 GMT
Not After : Aug 21 14:47:15 2026 GMT
Subject: CN=DE2B6B4962745EFE439DA7C30186481CDCCAF252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:f0:e2:59:9f:10:c8:aa:de:97:d3:86:c4:
d8:8e:0f:bf:cf:14:8e:2b:9c:70:a0:22:dd:6d:93:
33:e6:cb:4b:0c:c5:70:d1:f4:59:da:cf:71:ab:5a:
39:c6:17:0b:bf:b7:29:e8:ac:eb:41:e6:1e:b4:ed:
bb:bf:69:61:de:d6:c1:a4:8a:3f:e3:68:57:f5:c0:
dd:df:cc:89:ed:13:df:79:46:2d:55:de:a5:f5:bf:
d8:41:24:73:5e:cd:bd:85:76:de:ac:c7:ca:5f:e9:
ab:2d:3a:ba:e0:4b:56:ac:f1:95:a1:8f:09:76:72:
32:66:68:bd:59:0f:c2:44:94:b1:8c:f7:08:5f:dc:
e6:61:c5:8d:ab:3d:44:e7:0e:61:1d:6f:c1:a8:c8:
e7:76:59:94:00:ac:02:44:52:07:32:cd:3c:1b:f8:
09:1d:66:21:6e:94:6b:3e:db:9c:24:ca:98:1a:0f:
dc:b0:fe:f1:48:d8:30:2c:dd:1c:b8:48:86:e9:e6:
9a:ee:84:46:94:b0:6b:f2:30:24:86:bf:de:4b:f8:
37:6a:a0:18:03:d9:62:a3:3d:c4:bf:01:4d:bf:95:
fa:e7:65:5a:89:26:27:66:9a:64:91:62:80:a0:4c:
a4:66:68:11:7d:45:aa:92:93:ef:ad:8b:46:ff:e8:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2B:6B:49:62:74:5E:FE:43:9D:A7:C3:01:86:48:1C:DC:CA:F2:52
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.36.0/23
Signature Algorithm: sha256WithRSAEncryption
78:c0:8c:7a:0e:af:44:ee:1f:88:08:7e:8c:68:09:78:5f:12:
3b:35:96:61:01:45:13:05:bc:99:72:91:3c:64:7c:50:a2:98:
21:8f:68:2c:de:4d:68:ab:29:d7:56:0f:2b:7e:b6:b3:3c:39:
a9:20:13:83:60:d7:02:fd:0f:94:38:99:25:0d:82:e4:62:2a:
f8:2e:23:78:3a:25:ce:0f:35:a4:70:c9:37:b0:5e:62:b8:3a:
49:1e:3b:4d:46:10:06:87:fa:af:d6:77:3c:56:fc:30:65:9e:
b2:98:d2:2c:8f:5d:be:f3:7f:ed:8b:c5:1e:74:07:b4:85:5f:
fd:7c:09:d1:d6:df:bc:39:66:79:27:4b:90:06:1c:a0:01:42:
7e:83:06:57:95:6d:54:2f:d4:62:5a:b9:d6:5c:19:1c:87:d6:
24:ab:ce:9e:b4:f2:c7:08:90:01:a1:6d:2e:72:77:8f:4b:9e:
bd:34:e4:13:a4:c2:2d:66:00:c9:ba:16:3d:12:0b:2c:19:cb:
99:ba:14:38:8f:cc:7d:8d:d5:d8:5c:c9:df:4f:38:e3:80:11:
41:dd:f9:8f:e9:b9:30:bc:7f:73:4a:83:56:38:1b:06:4c:79:
7e:69:2d:11:19:53:ee:63:0d:90:74:56:3e:16:ba:4f:e9:5d:
eb:bd:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:48 2025 by rpki-client