Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
File: 3139322e3134352e38332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: 7UxunauDe2IBFum0YV/RKEOsIoLRjW2Qp37KsGO/2F0=
Subject key identifier: E2:3E:A6:82:DE:53:A9:F6:E0:FF:8D:F9:CF:8E:16:91:C7:64:7E:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4A1D8C3120902054A06D643AE8583F98AF85B1B5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
Signing time: Fri 22 Aug 2025 14:47:12 +0000
ROA not before: Fri 22 Aug 2025 14:42:12 +0000
ROA not after: Fri 21 Aug 2026 14:47:12 +0000
asID: 20473
IP address blocks: 192.145.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1d:8c:31:20:90:20:54:a0:6d:64:3a:e8:58:3f:98:af:85:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:12 2025 GMT
Not After : Aug 21 14:47:12 2026 GMT
Subject: CN=E23EA682DE53A9F6E0FF8DF9CF8E1691C7647EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c1:6f:79:0e:03:54:24:59:14:55:37:9a:7d:
ba:54:aa:6d:52:c9:1b:f6:f4:5b:9c:c1:b7:36:c3:
43:95:d0:50:4f:cc:be:0d:79:59:44:2d:ab:e0:19:
7c:d2:87:23:13:d0:5e:c4:b1:34:08:50:b0:69:c2:
10:6a:6c:f6:42:d1:b8:6f:2f:58:4d:2b:6d:91:93:
c4:24:15:e3:04:ab:c3:3a:aa:b0:de:37:c8:f9:21:
60:2c:50:8a:64:d7:29:ed:cd:81:fb:f4:a7:df:35:
cd:57:0b:a3:05:76:76:09:78:23:41:62:e1:b4:a9:
27:a1:1c:9e:0c:c5:74:03:3c:c1:3d:79:d5:df:93:
a3:7b:d2:e8:ba:67:73:1e:26:d5:b8:9e:24:49:b5:
73:3a:cb:de:e1:5d:aa:6c:a5:47:22:16:6a:45:c4:
2c:7c:1d:3e:a4:5b:5f:c6:22:88:fc:fe:54:85:d4:
f2:09:97:00:ec:71:5b:72:7c:86:e5:77:e3:10:ff:
82:5b:96:1b:c7:f9:48:07:d5:6b:1a:90:2b:38:67:
ed:98:81:73:39:9e:d0:35:03:a3:6d:dc:73:a1:1a:
1f:cc:c2:ea:d5:60:b5:e5:19:ea:1a:d8:fc:3d:88:
7b:cc:37:61:d0:39:bf:8b:b3:06:73:e6:c1:43:58:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:A6:82:DE:53:A9:F6:E0:FF:8D:F9:CF:8E:16:91:C7:64:7E:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.83.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c2:63:8d:b0:ef:2d:8c:95:a1:f2:70:85:f8:fe:68:f4:29:
eb:13:91:bb:a4:f9:d5:e0:e7:2b:89:4a:9c:3d:2b:1e:1b:ce:
c5:c7:6a:f3:b6:ba:f6:18:3f:ab:ec:88:ec:a4:de:0d:b3:f3:
ad:6f:70:21:68:31:d5:24:99:33:9a:83:3f:fe:cd:ed:50:ca:
27:cb:29:d8:ba:59:f6:37:a6:35:a3:dc:08:21:a8:fc:fa:ea:
66:7c:5d:04:2c:7b:ca:60:b9:ea:86:b7:8a:2e:4d:3f:6a:f4:
cd:56:bc:fd:8e:02:bc:31:00:0f:ce:f0:c8:14:8f:05:b9:e5:
6d:44:a6:88:ac:fd:11:c1:a1:7b:5e:2e:4f:3c:bb:ac:2c:f9:
f8:e9:dc:3f:9b:5d:3c:c0:91:94:14:74:39:86:dc:6f:55:72:
ca:dc:a3:29:5c:bf:5a:8d:bc:0f:b4:0b:de:92:50:92:59:d3:
6e:0d:46:20:63:6d:14:ca:ef:df:e6:5d:4b:5f:67:56:08:bb:
6e:51:b9:2c:48:db:55:06:05:5b:96:2d:20:a7:0a:fc:30:87:
88:39:62:4c:ba:a4:d7:3f:4f:71:9b:b3:ee:82:46:18:e5:40:
95:1c:22:5f:dc:1a:a2:46:db:ad:7a:74:93:fb:ed:61:dc:88:
e3:50:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:11 2025 by rpki-client