Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20383334.roa
File: 3139342e302e3230312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TlWg1CeXL3AAbsuimpx+DEEmMhwqIgSVjwRyo3PY2RE=
Subject key identifier: 0C:DB:DD:0F:86:B2:D2:C3:43:EF:85:AB:A8:63:1C:BF:93:AC:76:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 232BECF9103B6090343A8346429397EB30451C56
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20383334.roa
Signing time: Thu 26 Jun 2025 08:07:09 +0000
ROA not before: Thu 26 Jun 2025 08:02:09 +0000
ROA not after: Thu 25 Jun 2026 08:07:09 +0000
asID: 834
IP address blocks: 194.0.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2b:ec:f9:10:3b:60:90:34:3a:83:46:42:93:97:eb:30:45:1c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 26 08:02:09 2025 GMT
Not After : Jun 25 08:07:09 2026 GMT
Subject: CN=0CDBDD0F86B2D2C343EF85ABA8631CBF93AC76BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:71:96:a8:5e:fa:13:53:bd:65:bb:64:b2:
e6:a3:57:23:e4:96:69:04:2f:33:8f:3e:c8:30:9c:
96:5d:0c:ff:12:18:b3:f7:34:6b:4b:b2:71:1f:dd:
a1:e4:10:76:da:d0:de:41:01:5e:a7:c5:99:ac:0b:
51:bf:59:ed:71:85:a1:4b:fb:b4:5d:f5:5f:c5:47:
a0:ac:4f:5a:89:87:31:d3:7a:96:49:eb:ac:87:da:
bc:70:77:4a:f9:67:53:5b:18:ba:0c:02:73:00:19:
27:fe:d8:ae:81:9a:66:30:7e:29:ab:23:3e:d5:59:
fb:8b:ac:4f:52:3d:ee:aa:a7:e7:fe:d9:d7:16:b7:
8a:9f:30:cd:9e:3e:f1:31:7c:64:06:92:4a:00:1a:
df:a0:69:a3:f4:77:95:1d:96:26:51:05:0e:e5:27:
db:63:db:0d:9c:e2:13:56:ca:09:51:e7:ee:fb:46:
eb:28:b0:80:7e:7d:6d:bb:c7:11:14:31:d7:87:fc:
74:89:91:48:b1:4b:5a:84:d4:bd:67:31:46:f6:2d:
6d:04:75:2b:e0:48:7b:81:30:0b:e3:31:d0:d0:ea:
1b:88:fa:50:04:84:d2:69:11:c5:ba:44:bc:99:35:
ef:19:9c:94:0a:3c:6c:19:c7:1a:0e:42:bc:4c:5d:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:DD:0F:86:B2:D2:C3:43:EF:85:AB:A8:63:1C:BF:93:AC:76:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e302e3230312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ab:ae:cb:2b:90:c3:f0:15:b3:5a:cf:96:b8:2a:dd:c3:e2:
da:df:ea:d7:1e:d2:3b:ca:cd:7a:98:7e:fb:01:8d:bd:08:3f:
a0:40:dc:3a:87:59:77:a5:f0:54:7f:43:f3:bc:b9:91:3a:ee:
c6:74:63:ae:e4:f1:dd:ad:41:60:08:4d:c7:4a:9c:17:ac:f3:
87:f9:e4:3a:a5:05:51:39:74:76:93:7f:96:7b:5b:bb:8d:e9:
da:89:dd:3e:b7:94:b0:e8:25:40:65:36:58:fc:ca:41:a5:ef:
cc:f5:7a:d0:92:e0:98:a5:54:6b:0a:fc:a7:76:94:51:47:2c:
12:37:ba:62:81:71:fd:c0:19:e0:28:e8:16:c7:31:1d:bd:05:
b0:a5:b3:99:47:82:8b:a6:53:93:4b:36:b4:de:03:6f:45:94:
b2:46:9a:fb:07:ae:a0:b0:b7:0c:3c:7c:cb:da:01:88:98:2d:
e8:c2:2e:5c:3d:be:61:fb:df:bb:aa:6f:3f:29:68:cd:05:9e:
bd:7f:2a:25:2c:33:23:c9:a1:4f:60:95:72:e6:05:04:fc:1e:
e4:cd:bf:57:66:3f:20:ec:9c:26:30:f9:03:07:97:1f:fe:51:
b0:0c:ff:4c:c8:f7:ba:9e:cf:9f:3e:37:e2:e5:63:5d:90:2d:
76:91:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:51 2025 by rpki-client