Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37302e302f32332d3233203d3e203230383630.roa
File: 33312e3138372e37302e302f32332d3233203d3e203230383630.roa (raw, json)
Hash identifier: fVwmfCi9bwseYfxhMhaoTp7Ly/M6vwNtKW0qjaYqqDU=
Subject key identifier: 4F:2E:9C:EF:35:64:1D:25:86:F3:32:F7:AB:17:CC:C9:45:F9:05:26
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B865F1E8C8B1ADC6F011CCE647EF082A4DADC24
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37302e302f32332d3233203d3e203230383630.roa
Signing time: Mon 08 Sep 2025 15:47:31 +0000
ROA not before: Mon 08 Sep 2025 15:42:31 +0000
ROA not after: Mon 07 Sep 2026 15:47:31 +0000
asID: 20860
IP address blocks: 31.187.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:86:5f:1e:8c:8b:1a:dc:6f:01:1c:ce:64:7e:f0:82:a4:da:dc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 8 15:42:31 2025 GMT
Not After : Sep 7 15:47:31 2026 GMT
Subject: CN=4F2E9CEF35641D2586F332F7AB17CCC945F90526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:ab:c2:60:d7:fe:da:f4:c1:c0:e4:4c:cc:
3f:15:01:61:e1:88:18:96:ec:bc:fa:06:b2:9d:78:
7c:09:1b:b5:b1:4c:75:cb:7a:cf:65:34:8e:22:d8:
7f:30:7f:5d:aa:52:72:53:e7:07:d7:ac:c3:c1:2e:
79:ed:1b:90:75:8f:1b:7c:37:0f:e0:a1:0f:35:af:
f0:df:1c:13:b2:ad:c9:68:02:d6:45:ef:3a:04:42:
ba:4b:08:75:b6:bb:a7:9d:54:d7:e3:80:ef:75:6d:
bf:04:24:0d:a9:db:88:51:66:5b:79:30:27:2a:76:
ec:fb:2e:4f:6c:46:86:e5:f7:e5:9a:8a:59:55:cc:
6e:9f:7d:1f:8f:fe:8d:56:9f:1f:83:ad:8c:b5:fe:
d6:45:22:87:72:83:a9:f4:84:db:9f:ff:28:13:b5:
f7:a8:92:2d:57:99:da:03:0b:14:9c:4b:bf:78:de:
62:19:4f:e8:3d:a2:da:e9:23:aa:cb:4b:b6:1e:6c:
8d:ad:d8:1c:8e:25:7f:2f:d1:97:61:d6:a0:69:0c:
5b:5c:49:4c:bc:b8:18:d4:20:dc:9c:f7:22:8c:d1:
95:b3:6f:c9:8e:9e:78:3e:19:fe:5f:b7:47:ef:24:
da:4f:cd:c7:5a:4c:fb:6d:b7:6e:4f:22:9a:5b:af:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:9C:EF:35:64:1D:25:86:F3:32:F7:AB:17:CC:C9:45:F9:05:26
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e37302e302f32332d3233203d3e203230383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.70.0/23
Signature Algorithm: sha256WithRSAEncryption
72:05:9b:0a:ef:63:09:48:2f:2c:e1:7b:0f:76:46:90:70:f8:
a9:f8:23:08:72:ae:db:6c:01:3d:e4:7d:5d:35:8c:df:af:ae:
2e:d3:d3:f7:2f:5e:7b:67:4c:6d:a0:94:f5:64:71:4c:fa:d8:
30:35:4f:28:bd:39:6c:75:43:86:4a:86:6f:fc:40:02:41:1c:
d7:e3:7d:08:08:05:d4:ae:bb:15:1a:ce:d2:29:7d:d9:68:6f:
43:c8:ba:bb:89:b9:d3:5e:7c:ac:e3:41:76:2a:d9:12:9b:5a:
43:52:43:8b:2a:90:25:f8:58:2a:6f:49:7b:19:d0:a8:cc:8a:
6f:38:9d:30:16:95:ec:fe:10:d5:23:c0:0b:bd:df:54:84:7a:
6b:ef:28:40:0b:d1:67:c6:7f:b3:67:ea:70:e7:b1:e4:27:7a:
a1:1c:1d:a8:b3:e8:28:5b:de:f7:2d:8a:8c:0c:59:48:ce:d2:
84:9c:c6:60:43:19:09:2f:39:b5:07:b1:29:c0:43:11:24:f3:
41:9a:bd:4f:a3:23:dd:d1:35:ed:bc:a0:6b:ff:b5:7e:86:52:
20:a5:af:a5:9c:f7:f3:28:6d:c3:83:12:22:c6:eb:87:3f:dc:
48:fc:b4:f9:c6:f3:fb:aa:bf:cc:00:b8:b5:e7:9d:65:47:83:
41:2c:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:07 2025 by rpki-client