Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa
File: 3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4KHQnq9wwtiy9o5ZinYOs0Pe/nYQWqGvGDhrSJwsHiI=
Subject key identifier: AF:34:7E:14:ED:BA:2C:A2:44:ED:07:4D:E5:B1:58:32:D5:79:61:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FA71B5E9F31CDBE4506BF3261AAF7305BCFE83B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 16 Sep 2025 08:47:38 +0000
ROA not before: Tue 16 Sep 2025 08:42:38 +0000
ROA not after: Tue 15 Sep 2026 08:47:38 +0000
asID: 136787
IP address blocks: 185.81.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a7:1b:5e:9f:31:cd:be:45:06:bf:32:61:aa:f7:30:5b:cf:e8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 16 08:42:38 2025 GMT
Not After : Sep 15 08:47:38 2026 GMT
Subject: CN=AF347E14EDBA2CA244ED074DE5B15832D57961CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:a5:d1:f5:70:e7:ec:09:6f:c5:f1:7e:21:
ac:11:28:3a:2e:7d:81:5d:ea:ba:32:c5:7b:68:29:
b0:fb:26:d4:d3:50:d2:82:b8:2a:17:c2:00:07:24:
c1:2b:4b:d6:67:ca:13:af:a7:8c:39:02:1d:4c:bb:
da:f7:6f:82:74:36:5c:f2:d4:20:68:0b:5d:53:80:
ce:a1:83:b3:c9:e1:11:93:3e:e4:35:46:bd:dd:32:
88:cc:64:63:be:29:55:4b:fe:4c:87:9c:55:94:89:
ca:51:3d:12:3f:42:cf:c6:71:4a:96:7a:69:5a:ee:
58:39:a0:54:0e:b2:97:32:79:55:15:98:7c:03:b7:
59:4c:32:fd:b1:13:de:77:ad:d2:9b:8e:c4:16:38:
c6:96:c5:cf:41:4b:eb:ef:73:83:17:d1:c3:ce:2c:
f7:1e:86:f6:e8:0e:4f:73:2b:84:92:1d:58:f1:05:
1b:f7:a0:5a:a6:a5:63:85:6d:b9:36:a4:f9:44:ef:
8e:bd:b4:cc:b7:d4:63:62:f3:ad:ff:10:d9:64:b5:
f1:b7:54:61:db:03:f1:12:d3:85:f8:3b:4b:a2:d9:
ff:ed:c2:46:23:70:2a:dc:ff:aa:e4:a7:d9:45:29:
4f:b3:6d:56:c3:49:62:dd:6d:1d:5f:6d:e1:e7:16:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:7E:14:ED:BA:2C:A2:44:ED:07:4D:E5:B1:58:32:D5:79:61:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.124.0/24
Signature Algorithm: sha256WithRSAEncryption
40:03:a6:1c:4b:01:1c:b5:1c:bd:be:e6:75:b2:e3:2b:7c:03:
36:d7:dc:46:74:19:02:83:c6:b6:14:87:f9:d6:00:29:79:cf:
10:eb:34:ae:98:f6:4c:96:c3:68:d8:ee:34:58:7a:e5:8e:2d:
5d:50:14:b4:0c:d5:4b:ce:db:f9:aa:b9:78:31:3e:ef:f9:80:
ec:a5:16:af:61:41:dc:f5:12:ee:0f:1c:f9:34:1b:3c:41:5f:
8a:ce:a5:eb:6e:0e:3a:90:41:db:00:54:96:9b:4b:8d:4f:5e:
f9:dc:cc:5c:47:5d:ac:0b:cd:b8:94:7c:90:24:0e:6e:8c:12:
e7:66:29:b5:83:10:29:ad:c0:61:33:a0:2b:84:c4:8e:a8:54:
61:dd:63:2f:df:b6:a9:5f:bf:d6:7a:5d:18:de:15:fc:d5:45:
7e:0c:da:13:e7:c3:25:95:64:13:13:c9:16:0e:f0:20:85:5e:
38:32:98:b1:f1:d5:1f:fd:2d:67:62:45:10:7e:4d:33:56:c9:
19:0e:4c:23:20:c5:4a:6f:76:ae:47:a6:74:f4:35:9e:65:72:
ab:d4:d1:57:30:a7:55:8a:ae:08:a0:59:c2:05:b2:3b:62:44:
c3:5f:da:94:f0:40:ec:2a:d1:92:38:8f:15:12:01:36:5e:9d:
73:35:e2:bd
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUb6cbXp8xzb5FBr8yYar3MFvP6DswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MTYwODQyMzhaFw0yNjA5MTUwODQ3MzhaMDMxMTAvBgNV
BAMTKEFGMzQ3RTE0RURCQTJDQTI0NEVEMDc0REU1QjE1ODMyRDU3OTYxQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveqXR9XDn7AlvxfF+IawRKDou
fYFd6royxXtoKbD7JtTTUNKCuCoXwgAHJMErS9ZnyhOvp4w5Ah1Mu9r3b4J0Nlzy
1CBoC11TgM6hg7PJ4RGTPuQ1Rr3dMojMZGO+KVVL/kyHnFWUicpRPRI/Qs/GcUqW
emla7lg5oFQOspcyeVUVmHwDt1lMMv2xE953rdKbjsQWOMaWxc9BS+vvc4MX0cPO
LPcehvboDk9zK4SSHVjxBRv3oFqmpWOFbbk2pPlE7469tMy31GNi863/ENlktfG3
VGHbA/ES04X4O0ui2f/twkYjcCrc/6rkp9lFKU+zbVbDSWLdbR1fbeHnFnQ3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUrzR+FO26LKJE7QdN5bFYMtV5Yc8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzODMxMmUzMTMy
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5UXwwDQYJKoZIhvcNAQELBQADggEBAEADphxLARy1HL2+5nWy4yt8AzbX3EZ0
GQKDxrYUh/nWACl5zxDrNK6Y9kyWw2jY7jRYeuWOLV1QFLQM1UvO2/mquXgxPu/5
gOylFq9hQdz1Eu4PHPk0GzxBX4rOpetuDjqQQdsAVJabS41PXvnczFxHXawLzbiU
fJAkDm6MEudmKbWDECmtwGEzoCuExI6oVGHdYy/ftqlfv9Z6XRjeFfzVRX4M2hPn
wyWVZBMTyRYO8CCFXjgymLHx1R/9LWdiRRB+TTNWyRkOTCMgxUpvdq5HpnT0NZ5l
cqvU0Vcwp1WKrgigWcIFsjtiRMNf2pTwQOwq0ZI4jxUSATZenXM14r0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:39 2025 by rpki-client