Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132352e302f32342d3234203d3e20323132323338.roa
File: 3138352e38312e3132352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: HyW8oquxG1m81GrioBaJ5hejYj/LPOoM6ypFTown4KE=
Subject key identifier: 4E:9F:1A:7B:5F:DF:EB:E8:93:25:36:C3:BC:4B:75:09:7D:91:83:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55674843932DD241D8E94A6FE5B69F82FC56C9B4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132352e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 17 Jun 2025 13:28:03 +0000
ROA not before: Tue 17 Jun 2025 13:23:03 +0000
ROA not after: Tue 16 Jun 2026 13:28:03 +0000
asID: 212238
IP address blocks: 185.81.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:67:48:43:93:2d:d2:41:d8:e9:4a:6f:e5:b6:9f:82:fc:56:c9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 17 13:23:03 2025 GMT
Not After : Jun 16 13:28:03 2026 GMT
Subject: CN=4E9F1A7B5FDFEBE8932536C3BC4B75097D918370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:34:70:ee:03:9e:ad:fd:0d:b3:22:fd:55:
5b:6a:f4:81:3b:53:cb:ab:ce:bb:9f:90:85:95:6f:
37:a3:b0:a7:9e:d1:6c:6a:05:c4:26:d7:b2:76:ca:
8f:02:21:cc:a8:84:11:66:26:b7:eb:a3:d5:18:0a:
d1:69:51:36:21:cb:73:84:d2:ae:9a:3a:f3:fa:20:
7e:85:24:67:e8:e1:8b:80:80:d0:e8:a3:62:09:68:
4d:45:b9:6e:5d:d1:94:14:e1:bb:77:f5:66:53:db:
d7:3d:ae:98:c6:03:a0:c8:8d:28:89:71:98:2d:f0:
d8:8b:91:29:01:1a:69:cc:67:94:20:73:8e:53:40:
2d:31:6b:47:4a:49:b7:e5:6d:ef:23:88:44:59:47:
06:c0:e3:3a:61:ef:85:8a:ab:d5:59:69:cc:42:1f:
e8:0a:14:c2:50:8d:5f:0a:48:40:4e:19:77:a3:76:
82:2a:60:10:07:54:68:8a:02:43:a7:d1:df:07:3e:
c7:55:de:d7:29:7d:ef:e6:1b:e0:32:a6:88:e2:25:
67:bc:18:48:89:c4:b2:b0:f5:3f:ff:e2:d8:1c:36:
a8:ad:91:da:d7:ee:a7:bf:ba:95:e7:22:00:20:04:
41:de:9f:40:f6:0b:13:61:e1:28:72:2f:ea:95:3a:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:1A:7B:5F:DF:EB:E8:93:25:36:C3:BC:4B:75:09:7D:91:83:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e38312e3132352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.125.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b6:59:50:d4:9f:56:c9:ea:54:64:f7:45:1a:63:ee:78:92:
6f:6e:a0:09:2b:51:ee:ee:e4:46:06:7d:8f:d6:c2:24:6b:a4:
46:fa:8a:ef:b3:1c:e9:68:ca:0e:b0:3a:d7:9c:cf:34:a9:fa:
0c:f2:ca:35:57:6d:e5:6f:10:58:c6:b5:eb:0d:a8:7c:a7:53:
c7:c0:07:f1:6a:95:8a:e5:b6:2a:95:c3:99:b9:8a:20:fb:52:
78:e7:fb:6e:6c:82:3f:1f:23:a4:61:3c:ce:ed:cc:96:bf:d3:
40:bd:a2:dd:4a:5b:96:04:21:21:e1:18:87:10:28:0e:70:87:
a3:56:1c:f0:cb:1b:97:1e:c4:af:9c:84:67:a9:d1:05:5f:fd:
c1:2b:1b:77:93:44:65:d6:00:c2:f0:20:a6:33:96:4f:08:a6:
ec:5d:cd:a6:26:ca:f5:02:86:4c:c9:ed:93:0d:9b:de:35:23:
55:52:60:ef:36:f2:14:6f:f7:25:34:08:d6:15:ef:6f:f7:ff:
66:25:ee:d2:60:02:d5:98:d1:f2:71:44:77:cf:e5:d8:ad:8d:
24:0d:87:ce:a8:57:64:83:ed:f5:60:3f:98:2c:e9:61:a3:93:
71:fa:9c:b9:b0:b1:c5:f4:db:ae:de:43:5a:17:1a:49:1c:e2:
4f:e3:c9:a3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUVWdIQ5Mt0kHY6Upv5bafgvxWybQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MTcxMzIzMDNaFw0yNjA2MTYxMzI4MDNaMDMxMTAvBgNV
BAMTKDRFOUYxQTdCNUZERkVCRTg5MzI1MzZDM0JDNEI3NTA5N0Q5MTgzNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KjRw7gOerf0NsyL9VVtq9IE7
U8urzrufkIWVbzejsKee0WxqBcQm17J2yo8CIcyohBFmJrfro9UYCtFpUTYhy3OE
0q6aOvP6IH6FJGfo4YuAgNDoo2IJaE1FuW5d0ZQU4bt39WZT29c9rpjGA6DIjSiJ
cZgt8NiLkSkBGmnMZ5Qgc45TQC0xa0dKSbflbe8jiERZRwbA4zph74WKq9VZacxC
H+gKFMJQjV8KSEBOGXejdoIqYBAHVGiKAkOn0d8HPsdV3tcpfe/mG+AypojiJWe8
GEiJxLKw9T//4tgcNqitkdrX7qe/upXnIgAgBEHen0D2CxNh4ShyL+qVOmdvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUTp8ae1/f6+iTJTbDvEt1CX2Rg3AwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzODMxMmUzMTMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5UX0wDQYJKoZIhvcNAQELBQADggEBAGm2WVDUn1bJ6lRk90UaY+54km9uoAkr
Ue7u5EYGfY/WwiRrpEb6iu+zHOloyg6wOteczzSp+gzyyjVXbeVvEFjGtesNqHyn
U8fAB/FqlYrltiqVw5m5iiD7Unjn+25sgj8fI6RhPM7tzJa/00C9ot1KW5YEISHh
GIcQKA5wh6NWHPDLG5cexK+chGep0QVf/cErG3eTRGXWAMLwIKYzlk8IpuxdzaYm
yvUChkzJ7ZMNm941I1VSYO828hRv9yU0CNYV72/3/2Yl7tJgAtWY0fJxRHfP5dit
jSQNh86oV2SD7fVgP5gs6WGjk3H6nLmwscX0267eQ1oXGkkc4k/jyaM=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:20 2025 by rpki-client