Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa
File: 3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: N9XWCOVGm8dTbVKoGwnLA2cFp/gPwxDDUxT+PsKJqYs=
Subject key identifier: 85:B0:0C:9F:8A:38:C3:C5:90:C9:2B:03:80:78:96:E6:EE:65:A9:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4C7599B59590378BB8D85BC68827D2FD94D57A55
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:54 +0000
ROA not before: Thu 16 Oct 2025 15:42:54 +0000
ROA not after: Thu 15 Oct 2026 15:47:54 +0000
asID: 136787
IP address blocks: 195.242.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:75:99:b5:95:90:37:8b:b8:d8:5b:c6:88:27:d2:fd:94:d5:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:54 2025 GMT
Not After : Oct 15 15:47:54 2026 GMT
Subject: CN=85B00C9F8A38C3C590C92B03807896E6EE65A9D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3c:1a:6b:7b:c3:37:36:d8:04:7b:8b:43:56:
56:c5:8f:02:9d:5e:cd:61:d2:b0:7b:ca:52:c9:36:
88:9e:59:47:b3:d6:bf:77:70:6e:59:cf:01:5a:ef:
cb:97:71:85:0a:65:76:ae:53:e5:f0:4c:7b:09:24:
4f:62:e7:66:99:d8:15:6c:a4:b7:62:72:84:fc:1a:
90:69:f2:42:fa:5e:1f:b1:b9:d5:31:5b:0a:a3:e2:
60:7c:9f:46:bc:43:e2:92:6b:14:de:c2:c8:9a:f6:
b8:62:41:d3:0d:3b:41:17:bb:ea:4b:1a:76:3b:ff:
12:66:08:2a:85:77:c4:51:71:5b:0a:83:ad:fd:65:
06:ff:41:56:cb:5d:27:4f:32:c6:cc:a2:92:dc:eb:
20:51:c2:7d:f6:7b:de:0c:a2:f6:c3:2d:91:7e:f3:
eb:ae:01:de:06:c1:10:db:92:ee:3f:e6:fa:c3:43:
a9:8b:95:67:12:44:ff:83:ab:9b:60:e0:7f:a3:c8:
e0:e2:1a:3e:23:61:56:f6:7c:a3:b4:4f:8d:4e:5a:
33:d4:71:da:1f:79:01:c0:42:bd:92:08:a2:70:c5:
a7:f1:f9:ef:13:55:26:30:7d:20:48:16:8b:6f:c3:
4e:c5:7e:ef:d7:91:4e:03:10:76:65:04:35:99:3d:
57:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:0C:9F:8A:38:C3:C5:90:C9:2B:03:80:78:96:E6:EE:65:A9:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bd:97:18:3e:47:d0:8f:c1:e5:dc:11:e0:60:57:45:c1:0a:
28:ce:d7:a4:2a:6e:67:8f:d0:da:2a:d4:86:e7:7a:c2:50:1f:
dd:45:0d:ff:06:15:32:a2:1e:7e:7b:d3:42:22:df:6f:06:d5:
f7:1f:f1:08:07:bf:4f:30:63:cb:6b:03:d5:0b:0c:33:e7:d1:
80:77:c6:fe:9a:7d:3b:e8:79:eb:65:54:1d:e8:22:56:c6:7a:
34:c8:57:89:39:8c:ef:56:f5:5e:02:24:3a:18:97:f5:7a:0e:
01:82:44:d9:9b:f3:f1:1a:89:20:2f:26:4d:67:f8:dc:70:fb:
27:68:cf:9a:ee:0a:48:81:36:89:ae:02:86:bb:69:2f:65:1a:
8b:5f:ad:c6:b0:b1:39:9e:83:54:f6:10:51:fa:54:dd:06:8c:
c2:20:e6:fa:a3:06:d9:ea:7a:48:7e:1d:33:1f:f4:0b:b5:62:
1e:40:f0:7d:db:71:59:45:dc:6f:8e:5c:23:d3:45:ef:66:71:
23:c4:00:ab:ab:75:8e:fa:6d:a8:8a:c4:e7:73:5f:a6:8e:f9:
1b:97:db:60:a0:42:0e:9d:6a:15:c0:7e:77:83:f2:e3:10:86:
cf:6e:a6:b5:a1:a6:8c:fa:f0:47:d8:7d:e0:d7:29:a9:8c:cf:
99:4d:b1:22
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUTHWZtZWQN4u42FvGiCfS/ZTVelUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMTYxNTQyNTRaFw0yNjEwMTUxNTQ3NTRaMDMxMTAvBgNV
BAMTKDg1QjAwQzlGOEEzOEMzQzU5MEM5MkIwMzgwNzg5NkU2RUU2NUE5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7PBpre8M3NtgEe4tDVlbFjwKd
Xs1h0rB7ylLJNoieWUez1r93cG5ZzwFa78uXcYUKZXauU+XwTHsJJE9i52aZ2BVs
pLdicoT8GpBp8kL6Xh+xudUxWwqj4mB8n0a8Q+KSaxTewsia9rhiQdMNO0EXu+pL
GnY7/xJmCCqFd8RRcVsKg639ZQb/QVbLXSdPMsbMopLc6yBRwn32e94MovbDLZF+
8+uuAd4GwRDbku4/5vrDQ6mLlWcSRP+Dq5tg4H+jyODiGj4jYVb2fKO0T41OWjPU
cdofeQHAQr2SCKJwxafx+e8TVSYwfSBIFotvw07Ffu/XkU4DEHZlBDWZPVcVAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUhbAMn4o4w8WQySsDgHiW5u5lqdAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMjM0MzIyZTMy
MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMPy8TANBgkqhkiG9w0BAQsFAAOCAQEAb72XGD5H0I/B5dwR4GBXRcEKKM7X
pCpuZ4/Q2irUhud6wlAf3UUN/wYVMqIefnvTQiLfbwbV9x/xCAe/TzBjy2sD1QsM
M+fRgHfG/pp9O+h562VUHegiVsZ6NMhXiTmM71b1XgIkOhiX9XoOAYJE2Zvz8RqJ
IC8mTWf43HD7J2jPmu4KSIE2ia4ChrtpL2Uai1+txrCxOZ6DVPYQUfpU3QaMwiDm
+qMG2ep6SH4dMx/0C7ViHkDwfdtxWUXcb45cI9NF72ZxI8QAq6t1jvptqIrE53Nf
po75G5fbYKBCDp1qFcB+d4Py4xCGz26mtaGmjPrwR9h94NcpqYzPmU2xIg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:30 2025 by rpki-client