Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e32352e302f32342d3234203d3e20323031333431.roa
File: 36322e332e32352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: PHWeg91+PsSvZAMjOFUPKNHqGI6qEt8wdbjopIYjqak=
Subject key identifier: BF:50:71:F4:2E:03:83:7B:E8:76:F0:6E:7A:36:20:7E:11:90:2B:F2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E2F5623D78FCC9D12F3DC5DF1C688340A13C88C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e32352e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 22 Aug 2025 14:47:09 +0000
ROA not before: Fri 22 Aug 2025 14:42:09 +0000
ROA not after: Fri 21 Aug 2026 14:47:09 +0000
asID: 201341
IP address blocks: 62.3.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:2f:56:23:d7:8f:cc:9d:12:f3:dc:5d:f1:c6:88:34:0a:13:c8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:09 2025 GMT
Not After : Aug 21 14:47:09 2026 GMT
Subject: CN=BF5071F42E03837BE876F06E7A36207E11902BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:d7:f5:7a:65:b8:14:34:8b:90:71:8e:d0:
4d:d6:63:3e:27:3a:a2:55:71:5d:03:94:99:a0:8b:
e6:58:a2:be:65:a7:a1:5e:cd:63:09:e6:93:d5:ed:
fe:92:c1:d9:ec:23:c1:26:86:fe:23:34:91:6b:c4:
32:f1:ca:11:07:67:c0:f7:93:09:0a:7c:11:2e:8a:
cd:73:8f:68:81:66:f4:39:e4:63:39:73:b7:52:37:
0b:fc:c1:01:a8:14:a5:86:7b:f6:e0:38:6c:4d:00:
61:3c:c5:aa:de:06:e3:bc:8d:9b:c1:88:1a:13:a9:
c5:57:3b:7d:7d:8d:79:b3:3e:93:e6:05:ed:35:c3:
cf:ca:a1:b3:68:f0:b7:08:e1:7c:0a:a3:83:d2:b4:
62:f3:b8:04:8d:c3:d3:d4:a6:34:01:77:3e:9b:0e:
73:1f:ed:22:2b:7c:f1:49:93:2d:0f:03:93:3c:aa:
36:38:22:99:b5:f9:8d:9c:8d:24:b0:3d:54:e0:e9:
56:5e:c9:b3:dd:91:4d:fe:c0:f5:e2:92:32:c0:36:
e7:f2:f6:3e:1f:55:48:ec:88:46:ae:04:eb:43:5e:
bb:34:aa:2a:16:e9:85:87:39:45:e9:e2:db:9a:ca:
46:32:0e:9f:1b:12:c2:95:f5:7e:ca:7f:18:8f:56:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:71:F4:2E:03:83:7B:E8:76:F0:6E:7A:36:20:7E:11:90:2B:F2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e332e32352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8c:68:62:47:be:3c:45:30:46:86:f9:c2:6d:02:53:8e:64:
ae:8d:0c:18:78:9f:ae:e2:15:8e:f1:ce:dc:33:81:dc:05:2e:
80:33:55:6a:21:d3:d6:b4:f5:9c:bc:75:50:88:ae:fb:1a:12:
cd:c7:d1:60:b4:11:9a:8a:15:32:13:61:a8:72:94:37:19:01:
93:f5:5b:a7:a5:35:85:67:84:1a:db:12:ca:3d:50:37:82:d5:
da:55:d4:90:51:52:43:67:fd:60:0e:32:f8:00:37:14:c9:49:
d8:ad:6a:b1:df:1a:73:05:b6:02:f8:b3:1a:30:5e:33:89:23:
3c:8c:d3:74:48:bb:8e:a9:23:e4:c1:d4:7b:f9:af:a4:c4:ff:
d8:a7:d1:e9:60:3f:73:f7:13:75:e9:48:35:b9:ee:ba:c0:13:
3c:07:9a:1c:d7:5b:e1:b7:86:cc:06:94:98:9f:79:c0:64:40:
df:5a:c0:cb:0d:64:38:d3:ee:44:4e:67:bb:e1:d2:75:6f:f3:
4c:78:91:24:b7:7e:bf:2c:8f:eb:9b:11:85:7f:e6:04:a8:58:
af:d4:ad:d5:fa:ec:36:72:44:39:eb:5b:48:cf:2b:4b:9d:bc:
ff:07:b3:a6:78:ef:2c:e0:4f:9c:e2:7a:1e:e5:5b:9e:8d:7f:
b7:10:a2:4d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIULi9WI9ePzJ0S89xd8caINAoTyIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMDlaFw0yNjA4MjExNDQ3MDlaMDMxMTAvBgNV
BAMTKEJGNTA3MUY0MkUwMzgzN0JFODc2RjA2RTdBMzYyMDdFMTE5MDJCRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqdf1emW4FDSLkHGO0E3WYz4n
OqJVcV0DlJmgi+ZYor5lp6FezWMJ5pPV7f6SwdnsI8Emhv4jNJFrxDLxyhEHZ8D3
kwkKfBEuis1zj2iBZvQ55GM5c7dSNwv8wQGoFKWGe/bgOGxNAGE8xareBuO8jZvB
iBoTqcVXO319jXmzPpPmBe01w8/KobNo8LcI4XwKo4PStGLzuASNw9PUpjQBdz6b
DnMf7SIrfPFJky0PA5M8qjY4Ipm1+Y2cjSSwPVTg6VZeybPdkU3+wPXikjLANufy
9j4fVUjsiEauBOtDXrs0qioW6YWHOUXp4tuaykYyDp8bEsKV9X7KfxiPVsh9AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUv1Bx9C4Dg3vodvBuejYgfhGQK/IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzMyZTMyMzUyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+Axkw
DQYJKoZIhvcNAQELBQADggEBABuMaGJHvjxFMEaG+cJtAlOOZK6NDBh4n67iFY7x
ztwzgdwFLoAzVWoh09a09Zy8dVCIrvsaEs3H0WC0EZqKFTITYahylDcZAZP1W6el
NYVnhBrbEso9UDeC1dpV1JBRUkNn/WAOMvgANxTJSditarHfGnMFtgL4sxowXjOJ
IzyM03RIu46pI+TB1Hv5r6TE/9in0elgP3P3E3XpSDW57rrAEzwHmhzXW+G3hswG
lJifecBkQN9awMsNZDjT7kROZ7vh0nVv80x4kSS3fr8sj+ubEYV/5gSoWK/UrdX6
7DZyRDnrW0jPK0udvP8Hs6Z47yzgT5zieh7lW56Nf7cQok0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:37 2025 by rpki-client