Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa
File: 3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xKaIQH0C2vGqkoe3owDBMl9Q0zOEHMU6a+AkB780Jls=
Subject key identifier: FD:96:74:3F:F3:57:A5:5D:88:53:C9:51:13:28:71:67:27:CB:C5:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FBCE964A2021A675FE8BABDB6CAFC32E81EDF5C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Oct 2025 15:47:55 +0000
ROA not before: Thu 16 Oct 2025 15:42:55 +0000
ROA not after: Thu 15 Oct 2026 15:47:55 +0000
asID: 136787
IP address blocks: 195.242.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bc:e9:64:a2:02:1a:67:5f:e8:ba:bd:b6:ca:fc:32:e8:1e:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 15:42:55 2025 GMT
Not After : Oct 15 15:47:55 2026 GMT
Subject: CN=FD96743FF357A55D8853C9511328716727CBC543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:a7:82:dc:0a:cf:52:23:c3:fd:09:90:73:
69:80:b8:2b:2d:c9:ab:60:ba:91:34:08:2c:83:a9:
d1:31:2d:0a:be:8f:07:b7:f3:d7:98:8d:a0:f5:bd:
2c:19:93:8b:85:90:4b:16:49:2d:b1:a4:e1:18:ed:
67:ec:5c:f1:8c:ea:11:cb:81:04:2f:2d:1f:ef:dd:
9b:f5:55:9c:19:af:53:ef:79:71:6b:e5:4a:f6:b9:
e8:63:e0:b9:87:7a:11:f2:97:a5:50:bc:7b:5d:f8:
9b:6a:85:d8:66:8e:8b:8c:b2:a8:02:f7:c4:3f:b0:
c5:f9:18:f5:b6:a5:24:60:2d:1c:27:a9:c1:81:bb:
b5:8c:a2:39:18:2e:80:e3:60:ba:be:17:3b:24:5f:
2e:60:e3:68:58:d6:f6:87:5a:71:14:e7:45:1b:4c:
fe:3d:5c:67:3f:81:23:a1:6b:51:98:c5:3c:71:07:
69:f3:8c:d1:61:30:cf:e3:ab:5d:a3:47:32:15:77:
f7:48:88:13:e0:a2:a7:53:f1:48:2a:4f:7e:88:e9:
eb:59:88:6d:d1:77:48:60:96:92:5b:60:1f:2a:2b:
56:96:21:20:d8:db:86:32:9a:7a:a6:a4:19:75:6b:
89:a0:f1:f7:0c:12:8a:d3:8b:86:87:ab:5d:0a:e9:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:74:3F:F3:57:A5:5D:88:53:C9:51:13:28:71:67:27:CB:C5:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
94:57:22:f8:57:6e:38:fc:70:95:39:dc:23:f2:d3:dd:c3:77:
1d:bd:b6:f6:ba:61:aa:c5:81:bc:1a:c6:17:00:b6:6a:bb:7d:
c4:e1:57:aa:bd:ed:88:73:12:68:a8:e6:a2:82:55:e7:9a:92:
d0:c7:3d:37:c8:dd:b3:0e:38:78:34:2d:ca:63:21:4c:9d:a7:
43:cc:e1:db:79:74:4f:35:21:56:78:ac:35:76:37:17:3c:29:
f8:73:15:bc:a0:8e:28:c6:cf:d1:72:00:fd:43:33:36:76:74:
cb:61:34:c2:f0:36:fc:21:da:89:52:7f:a1:ed:1b:79:da:6b:
97:75:7e:2f:ee:3a:93:92:83:18:a7:51:9f:1a:c7:06:0e:a1:
e0:4a:03:fe:db:41:ae:d8:fa:fb:55:9f:a6:36:6b:f8:4e:c5:
47:cd:3e:d2:ae:09:c3:83:c1:69:20:44:6c:46:f6:e4:49:f5:
d4:8d:8a:96:3f:5e:e3:97:81:4d:0b:17:f4:57:87:08:69:b2:
da:5f:64:ad:2b:38:2e:c0:de:cc:51:14:21:cd:1b:84:e6:d9:
db:81:b9:c0:34:00:e3:71:64:88:b5:73:df:b9:66:e8:65:b4:
64:96:52:a0:84:c9:6a:ce:04:6f:b6:7d:5a:c2:ef:9c:d1:02:
91:75:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:10 2025 by rpki-client