Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
File: 3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: B4S1xKFxkgyGXsDC2Jp7AwBI58SLpuZY5vuicS+NEoE=
Subject key identifier: 60:7E:C0:64:8A:DF:57:F3:03:0E:D3:2D:85:DF:1E:81:EE:28:A0:77
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41F923DE644B90E2C5A0DCD70D12F561A07035CD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 22 Aug 2025 14:47:19 +0000
ROA not before: Fri 22 Aug 2025 14:42:19 +0000
ROA not after: Fri 21 Aug 2026 14:47:19 +0000
asID: 141995
IP address blocks: 185.250.38.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f9:23:de:64:4b:90:e2:c5:a0:dc:d7:0d:12:f5:61:a0:70:35:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:19 2025 GMT
Not After : Aug 21 14:47:19 2026 GMT
Subject: CN=607EC0648ADF57F3030ED32D85DF1E81EE28A077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:81:d9:f8:74:ec:6b:2c:01:73:42:0c:59:
64:d3:98:c2:22:d9:f0:91:18:ff:13:a0:80:38:a3:
93:b4:22:60:54:fc:9d:56:f8:91:07:5c:4a:a0:1f:
75:a7:67:93:67:1f:e7:7c:50:75:8c:85:0c:51:a5:
ca:f8:f4:4c:67:8c:c8:10:51:2b:92:b9:57:8f:f5:
f3:5c:e4:8e:84:d0:fd:a7:f8:63:6f:31:10:33:d3:
2a:ee:df:bc:2d:1a:89:ee:0c:0b:6a:12:66:c1:92:
b5:c7:87:72:3e:20:01:4d:75:9b:bf:1c:3a:17:b1:
de:7a:6d:90:d7:80:67:c0:b3:b7:52:e0:75:2e:54:
07:01:97:03:7e:f4:69:35:51:8b:43:1b:c7:7b:b9:
27:f9:4d:8f:18:34:85:ce:d6:eb:3a:d3:de:45:ec:
c8:4e:ef:05:19:14:b3:4c:ff:64:98:54:ef:fe:01:
27:07:2a:f5:bd:d8:5b:09:98:ff:2f:a4:0c:0e:93:
78:b1:6b:da:07:3e:9a:1c:7b:0e:db:1d:a4:c9:7a:
9d:73:6b:80:9e:7e:ed:c4:82:c2:86:cd:57:71:b3:
88:40:35:14:3c:88:a9:6d:40:76:43:4b:68:63:e3:
1f:58:04:c9:c9:5c:fe:e5:cb:7a:a5:55:3b:0a:4a:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:C0:64:8A:DF:57:F3:03:0E:D3:2D:85:DF:1E:81:EE:28:A0:77
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33382e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.38.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cb:09:13:b8:41:c8:43:bc:e0:27:89:aa:8b:61:47:4a:32:
bc:ce:97:73:b4:bb:d5:1a:6a:51:c4:fc:24:3d:80:a5:84:e8:
30:d5:d4:06:c5:5a:1f:b5:fb:c9:6c:5c:bb:80:dd:e6:bd:07:
c2:4b:26:8f:9f:22:14:86:e2:3f:b9:fb:99:25:4e:a7:cf:48:
c7:3d:33:d6:46:ef:bd:6b:46:f9:e9:54:97:b9:d0:42:58:eb:
36:2b:ff:af:10:fb:fb:c9:7d:09:f2:30:31:7c:cc:d6:91:a3:
6d:20:6d:c7:a1:24:4a:cb:1d:7e:b0:6a:6a:92:53:3b:7d:fc:
03:ae:e6:7b:d7:bb:f8:4f:45:01:99:0c:20:7e:c5:81:0a:4a:
81:58:52:3f:a1:eb:3c:b3:66:36:4e:9a:d3:51:ac:00:58:9e:
ac:c1:89:46:aa:7d:58:b4:79:34:42:c1:8e:69:87:05:35:5e:
96:c3:ae:15:84:0c:83:d2:9d:e3:0a:79:ca:57:54:53:aa:01:
cb:1c:c7:cd:17:a5:da:42:e7:55:fb:6a:1b:40:30:88:94:cf:
01:f5:da:9d:69:5c:08:20:ff:90:3a:68:e9:f3:cd:82:02:14:
99:96:e2:a5:14:de:c4:e0:46:02:b4:91:93:69:6f:c6:8a:9f:
f6:dd:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:58 2025 by rpki-client