Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa
File: 3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: //PvG3atVpqVHnLvaI3Vy1Tf9EE8GpRoGyyBYDfhnm4=
Subject key identifier: A3:4E:5A:41:61:D5:80:BA:C7:D5:69:4A:80:FD:ED:D9:CC:74:E6:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 657FF291D8249FE1E10432A063ACABA3090E2ED9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 23 Jun 2025 11:36:30 +0000
ROA not before: Mon 23 Jun 2025 11:31:30 +0000
ROA not after: Mon 22 Jun 2026 11:36:30 +0000
asID: 212238
IP address blocks: 194.233.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7f:f2:91:d8:24:9f:e1:e1:04:32:a0:63:ac:ab:a3:09:0e:2e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 23 11:31:30 2025 GMT
Not After : Jun 22 11:36:30 2026 GMT
Subject: CN=A34E5A4161D580BAC7D5694A80FDEDD9CC74E650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:a4:03:d4:6b:59:34:ff:76:d2:d1:6c:1c:
77:2c:df:bd:ef:7b:57:43:c8:b1:9f:87:c6:b8:95:
f2:f7:43:a7:ed:f7:5d:6f:12:77:f7:a4:52:cd:24:
f7:4c:0f:28:05:db:26:8d:2d:15:1e:8e:92:79:c5:
7c:e7:7d:3e:1f:d1:a5:64:7d:e1:8e:af:c6:4b:f7:
dd:a5:0a:cd:1a:84:fb:fa:1d:18:55:ee:ab:9c:41:
e3:85:f9:ee:08:eb:8a:b8:8d:bb:6c:3f:25:17:de:
ab:a2:8d:19:a0:44:4e:50:fb:1e:a8:1f:dd:67:2f:
72:70:a8:67:c6:eb:14:90:28:c0:fe:50:58:2a:74:
89:11:19:ff:72:5c:88:28:0f:c6:a7:36:9d:f4:8b:
40:26:0b:f1:c1:44:01:5f:86:0a:76:c5:db:e6:5f:
d5:40:ff:7e:f5:03:9c:8b:0e:d2:d0:90:93:a3:f4:
3a:f0:c7:64:3c:20:93:9a:38:5c:5d:18:d0:9d:dc:
fd:2a:ae:b5:66:20:8d:1e:8c:61:30:a6:ce:38:b8:
75:4f:94:f9:4f:2b:c8:32:94:c8:02:1a:cf:bd:d1:
4b:89:cb:4e:95:93:a5:66:de:de:f1:07:90:c3:9a:
88:c6:0d:03:44:15:67:82:c4:e1:66:8c:db:b1:5d:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:5A:41:61:D5:80:BA:C7:D5:69:4A:80:FD:ED:D9:CC:74:E6:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e39382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c7:d1:8e:06:0f:1f:6d:84:a1:f9:3c:92:27:a5:08:40:0a:
a4:14:c0:98:08:4b:cb:d5:0f:74:17:50:59:12:86:4a:5f:72:
4a:eb:89:38:0e:52:95:31:4d:24:57:88:3a:4a:70:21:62:94:
d6:46:1a:6e:bc:b0:e1:3a:93:44:8e:bc:75:ad:60:1e:9d:78:
02:cc:fe:fc:7b:b8:fd:b9:7a:d9:d8:c4:08:84:83:d2:3d:f8:
20:d9:bb:42:5f:66:ae:7e:85:1b:f5:a0:e4:42:d3:98:90:61:
58:3c:84:b0:1f:44:ce:03:44:a9:82:94:d9:26:6d:99:70:39:
41:ac:70:7b:3c:58:f9:21:11:2f:a4:14:33:c9:be:0e:1d:1a:
ba:f9:a2:be:61:0d:b3:aa:ff:ca:25:61:d6:a6:2e:0f:c8:70:
3f:b4:80:df:b8:ff:98:9e:8f:5b:22:f3:1d:25:1d:15:16:86:
98:c2:73:25:eb:cf:8d:4b:2d:74:d6:60:18:e1:2f:a0:04:63:
e9:b6:0d:d8:ad:72:db:23:26:14:59:15:d8:be:8f:a8:6c:92:
c1:ba:a6:09:b3:6f:a3:62:98:62:9c:ff:56:72:b1:a2:4c:c5:
8c:f1:95:3e:b6:6a:60:33:3b:de:76:bc:59:6e:b1:16:8e:72:
7a:ea:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:58:38 2025 by rpki-client