Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
File: 3139322e3134352e38332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: u9mHC091LChkvijLi7AAtoxaqt5XWam7HwGGyodWXGQ=
Subject key identifier: 53:3E:A0:BF:FD:9E:FA:97:D3:F0:CA:E6:53:66:79:6D:D7:C6:FB:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7AE34D8C2A1512009987DF44506CE4C8A7519D38
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
Signing time: Fri 22 Aug 2025 14:47:10 +0000
ROA not before: Fri 22 Aug 2025 14:42:10 +0000
ROA not after: Fri 21 Aug 2026 14:47:10 +0000
asID: 61317
IP address blocks: 192.145.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e3:4d:8c:2a:15:12:00:99:87:df:44:50:6c:e4:c8:a7:51:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:10 2025 GMT
Not After : Aug 21 14:47:10 2026 GMT
Subject: CN=533EA0BFFD9EFA97D3F0CAE65366796DD7C6FB11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:db:77:0d:c2:e3:fd:af:f9:c6:49:e2:10:
c9:a2:8a:56:a7:f1:f6:2d:8f:87:dd:5b:20:5c:99:
d6:20:b3:e5:7f:69:25:bd:86:b1:44:bb:38:3d:5a:
b9:22:ee:97:a4:d9:8f:8a:3f:39:47:a3:11:1e:c7:
38:de:bc:26:d3:7a:3d:f0:41:e2:a2:ec:00:6a:8a:
a1:aa:15:35:ad:00:b0:fb:92:0b:c9:17:12:d4:ba:
8b:6a:cf:36:9f:fc:a8:f0:bf:8d:6e:90:78:ec:3b:
d0:a2:8f:4d:52:32:18:53:87:10:db:97:eb:45:d4:
65:28:af:38:22:10:f6:cc:07:bf:72:4f:ab:c5:9b:
65:5c:1f:38:09:a7:0d:17:1d:7a:ba:80:12:61:2f:
23:68:10:b9:8e:9c:51:49:9f:92:a3:31:db:22:65:
d1:2f:b4:d7:e7:e4:fe:e3:6c:20:20:28:7a:04:d9:
2b:82:9f:93:16:2e:e1:c3:93:6c:ef:32:99:71:c7:
0d:29:ab:b4:6a:e4:8e:04:51:34:07:4d:a7:ec:d8:
64:10:b3:12:1c:9a:ff:a2:69:5c:b3:2d:f0:90:37:
ec:05:db:76:a8:85:0f:87:09:bd:53:26:ba:1f:b5:
0e:69:cc:37:cf:7b:6b:b4:b9:97:16:7f:f2:e2:13:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:A0:BF:FD:9E:FA:97:D3:F0:CA:E6:53:66:79:6D:D7:C6:FB:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139322e3134352e38332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:12:21:77:c6:5c:34:14:48:1d:12:44:63:89:52:ed:1e:5e:
ad:e4:34:3b:8f:e5:63:12:e4:7d:44:71:66:80:ad:f1:35:3c:
19:6d:29:9c:d5:72:d6:d2:13:b5:1b:f3:76:29:85:5a:49:94:
9d:90:0d:b1:9a:6a:22:86:47:98:f6:a2:ce:48:c7:c7:1c:6c:
b0:90:d1:10:ae:57:76:cb:2b:ad:63:36:05:ca:f4:0d:59:12:
fe:62:71:74:d6:3b:db:30:59:95:d4:76:5f:59:de:e3:32:5d:
86:ed:38:5f:da:14:29:5b:5b:c3:3f:63:fc:2f:f2:a8:28:0d:
57:02:85:b6:01:54:31:ac:53:af:e0:de:4b:5d:66:bb:f4:05:
0a:d9:5f:4f:f8:a1:36:42:c1:9a:00:ab:63:12:b6:56:4a:f5:
34:fd:b2:c7:71:0c:c7:38:db:5b:8b:9d:3e:4b:72:3c:ab:e1:
d0:19:fc:77:1b:3f:5f:23:a6:a3:8b:a1:49:ec:35:8d:54:3a:
a0:62:e1:55:7f:5f:49:1d:99:9e:76:31:04:de:ca:8c:d5:e6:
70:2d:a5:67:d0:aa:cd:24:02:5e:ee:eb:aa:ef:1a:48:91:b9:
e1:25:b2:0e:8c:4b:1b:af:05:52:06:4e:3a:7a:e3:39:d3:27:
6d:5c:c9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:54 2025 by rpki-client