Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
File: 3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: RUZVEjhVske/+Fqg3SvizFdUCtQ0tOwAEycIsR7O51s=
Subject key identifier: AE:1A:D3:B9:F9:40:B2:45:DA:76:11:BD:94:C9:89:26:9B:C1:9F:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 090EEF65B82FEFABEF774AA9749A0F1E1FFD2818
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:21 +0000
ROA not before: Fri 22 Aug 2025 14:42:21 +0000
ROA not after: Fri 21 Aug 2026 14:47:21 +0000
asID: 136787
IP address blocks: 192.145.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0e:ef:65:b8:2f:ef:ab:ef:77:4a:a9:74:9a:0f:1e:1f:fd:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:21 2025 GMT
Not After : Aug 21 14:47:21 2026 GMT
Subject: CN=AE1AD3B9F940B245DA7611BD94C989269BC19FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:83:80:b5:90:96:43:8e:c2:b6:32:19:80:
48:2a:c8:4c:e3:64:72:08:17:9d:e5:5f:5e:28:4c:
1a:b3:1f:c4:69:14:45:54:e9:b5:38:1b:5e:6a:6e:
d3:be:ea:4c:51:f2:50:14:37:13:7e:3b:23:51:60:
3b:0f:5f:6b:c1:5f:c0:c8:7e:3f:4c:6a:5f:01:b3:
42:56:d9:29:15:06:d1:52:38:a0:ef:dc:f2:3e:0e:
9d:b1:22:c0:05:e9:d6:63:6f:a7:fc:9b:5c:eb:1a:
0a:75:ae:42:bb:93:c1:8c:d3:e4:eb:c6:b3:10:0c:
71:36:9b:e2:2f:d5:5a:31:a3:f8:f8:6d:41:cb:2b:
af:2f:0c:9e:8b:0f:18:ba:d7:c4:57:0a:ab:33:a2:
89:be:45:95:38:5b:7f:ac:ab:e6:2c:c0:bd:22:89:
02:83:9f:9f:3a:8f:f7:ac:30:53:1b:c5:e8:76:b3:
10:4a:7f:6a:54:55:d6:ef:04:e1:1f:39:96:fe:cd:
2b:e0:11:f3:af:05:5e:d0:b9:65:61:0a:12:d3:b9:
59:fd:79:2d:77:e0:77:0d:52:36:74:e6:6f:70:e6:
28:67:54:18:12:e0:e7:50:33:79:fe:e6:11:f5:59:
71:6a:00:3d:31:82:f5:79:a8:90:f5:9d:97:88:e3:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:D3:B9:F9:40:B2:45:DA:76:11:BD:94:C9:89:26:9B:C1:9F:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1d:46:40:15:65:a3:b6:d0:44:cb:7e:fa:04:ee:be:d9:9c:
5a:45:5a:1a:ad:e7:32:4a:1f:08:3d:09:d7:36:56:4b:2b:f2:
7a:62:e0:fb:25:61:d8:50:1d:b6:cb:b2:d6:c0:12:68:12:be:
f6:96:62:6d:58:6e:ad:f2:bb:09:ef:54:cb:94:55:4e:fc:08:
a3:ed:50:a3:c0:a2:93:22:64:0d:16:7f:e9:8c:01:07:14:5d:
24:4e:cc:63:08:25:ad:32:9b:95:66:08:6d:d6:8d:9f:9d:f4:
28:98:6e:c3:51:5e:9a:2f:90:08:4f:c3:c0:34:eb:f8:b4:d2:
4d:1e:af:e2:0b:9f:91:9e:db:6d:37:a6:c3:45:32:82:52:ae:
51:60:85:16:b0:cb:bb:71:fc:48:45:a3:29:f5:7f:db:58:e7:
ea:81:87:f5:52:aa:4b:b4:4b:f7:01:40:0e:90:e0:5f:3e:10:
db:f4:d1:cc:74:af:a6:ed:70:17:ca:ba:2e:82:48:2f:43:38:
eb:c5:64:83:e1:fb:6c:e8:c1:af:b1:c8:ac:4c:ed:97:66:b6:
60:cc:a1:d0:c8:02:52:41:56:da:1e:9e:6e:28:8c:18:9b:3a:
ca:2e:1f:05:80:22:28:74:54:2e:e9:39:c1:55:e5:f9:43:0f:
26:ac:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:44 2025 by rpki-client