Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234322e302f32342d3234203d3e20313336373837.roa
File: 3139352e3234322e3234322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: oiqOan5PjG1GyYS/2L85tj0hoB3JSwDMT4XtsvE2XAk=
Subject key identifier: 91:7A:E0:73:0A:AF:A6:E3:90:55:07:08:88:7E:F3:57:69:EA:8B:0E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50A8AF8F9BBDFC21EC895498619CB70127F72E4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:53 +0000
ROA not before: Thu 16 Oct 2025 15:42:53 +0000
ROA not after: Thu 15 Oct 2026 15:47:53 +0000
asID: 136787
IP address blocks: 195.242.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a8:af:8f:9b:bd:fc:21:ec:89:54:98:61:9c:b7:01:27:f7:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:53 2025 GMT
Not After : Oct 15 15:47:53 2026 GMT
Subject: CN=917AE0730AAFA6E390550708887EF35769EA8B0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:d8:b7:87:db:61:a2:64:b0:73:da:a8:b1:
32:4d:f2:3a:1d:1a:07:d6:f0:87:3b:dd:c8:d3:6d:
68:ab:b8:86:af:f0:dc:7f:eb:58:d9:19:f1:8f:ec:
79:fc:0e:05:d9:b8:84:98:94:2b:df:9f:41:95:b0:
65:f4:d9:0e:91:aa:a3:a0:41:82:79:0d:6b:8e:0f:
e5:05:cd:24:ff:9d:5b:c4:24:46:00:ea:25:f8:fc:
2d:6a:58:4b:00:d1:47:cb:44:1c:5e:4e:f5:dd:fd:
a5:5e:c6:9c:ca:a4:9d:2f:59:df:2d:31:2f:d2:bc:
9e:99:ed:fb:e3:fe:22:68:32:8d:82:9b:fc:32:c3:
50:bd:fb:c7:22:a8:e6:d1:98:ee:c6:99:04:01:dd:
bc:65:ca:02:15:51:a4:be:5a:3d:1b:73:32:ce:ca:
53:38:94:6e:99:18:05:31:a7:32:46:e2:ec:3e:f7:
c4:81:bc:c5:0f:c0:58:74:40:12:35:aa:23:18:c2:
3f:e5:66:06:e8:e8:7c:06:45:91:55:f0:c0:6f:01:
48:d3:99:94:37:f9:a9:25:83:e5:a1:8b:31:97:3d:
13:10:cd:2f:d3:47:c5:5b:a2:e2:84:b2:cd:06:88:
38:9e:b5:09:5c:5a:c2:ae:0d:8f:3a:c7:bd:99:27:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:E0:73:0A:AF:A6:E3:90:55:07:08:88:7E:F3:57:69:EA:8B:0E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e5:0e:81:f9:cf:ae:31:ab:07:fb:2f:4d:64:02:fa:78:98:
ad:af:52:09:78:a7:b9:7b:d7:bc:b8:22:52:7f:1d:97:69:a5:
ec:2f:bf:fb:0f:fe:99:5a:06:6a:69:44:a1:ec:be:bc:18:95:
19:d4:41:5f:29:ca:f5:30:80:00:c0:b6:8e:09:2e:c3:6a:15:
b5:99:fc:84:21:b2:bf:09:4b:70:ab:52:65:70:64:40:68:67:
5f:5e:07:63:92:b0:81:6d:27:05:80:6f:3c:47:ff:82:b5:57:
47:f9:36:66:ea:54:cb:e2:6c:aa:e0:be:f0:68:8f:7f:1a:0c:
25:1f:27:5e:76:49:1d:2d:c4:0f:bf:2e:49:ac:5a:91:e5:1a:
77:fd:8d:a9:42:a3:9f:0d:f3:d8:c9:a8:97:f4:cb:bf:ca:80:
7b:bb:7f:62:1d:4c:0c:b4:15:89:c5:be:ac:f1:a7:f9:69:a1:
09:af:7f:c0:93:ba:10:3c:e6:eb:45:87:5a:e5:ff:c4:75:9b:
24:f8:96:d5:b9:a1:83:ef:0b:25:59:b4:65:e4:d1:f7:c1:80:
8a:32:23:11:b4:f5:02:ac:87:56:5d:16:d5:e6:b5:20:07:4f:
cc:dd:fa:d9:54:f4:40:1a:cf:a5:86:d1:d5:f8:36:b3:97:21:
86:25:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:57 2025 by rpki-client