Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37322e302f32342d3234203d3e20323034313730.roa
File: 38322e3134392e37322e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: tzFvs5m/BpMypZTLMBo7G3NA+F5UPDLn/nXK1/eLEng=
Subject key identifier: 53:19:B5:28:6C:A3:FC:C2:8A:DD:6D:7B:70:19:77:2A:AC:8A:2F:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DF749EAD890F8C6150EBA99F814871FD886569C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37322e302f32342d3234203d3e20323034313730.roa
Signing time: Wed 18 Jun 2025 14:46:38 +0000
ROA not before: Wed 18 Jun 2025 14:41:38 +0000
ROA not after: Wed 17 Jun 2026 14:46:38 +0000
asID: 204170
IP address blocks: 82.149.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f7:49:ea:d8:90:f8:c6:15:0e:ba:99:f8:14:87:1f:d8:86:56:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 14:41:38 2025 GMT
Not After : Jun 17 14:46:38 2026 GMT
Subject: CN=5319B5286CA3FCC28ADD6D7B7019772AAC8A2F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:65:df:4d:5a:ad:aa:82:b3:77:1e:dd:67:
a6:66:2c:66:af:b5:f9:c7:59:65:9f:d3:c9:58:17:
82:98:fc:02:08:81:74:5c:da:6a:30:76:3c:7f:bf:
a6:0d:79:cd:eb:5a:52:27:3c:7c:52:2a:5b:81:9f:
64:4a:79:e8:f4:dc:b7:e4:62:3f:1c:37:74:59:f8:
13:bd:d9:42:04:32:1b:21:ef:d6:94:b0:5d:a4:7d:
d4:c5:cf:6c:e8:59:41:db:ff:ff:fb:77:e8:75:2d:
ec:68:92:be:01:b1:5a:99:a1:4c:ec:55:76:38:96:
f8:c7:ee:b1:e4:b8:56:af:f3:9e:f9:95:af:c3:0a:
a0:ab:d9:34:79:cc:91:2f:ee:2c:d8:33:bf:6e:b9:
c6:9d:81:bb:93:54:5a:63:b4:5b:d9:ee:94:25:84:
ed:c9:f2:ea:f8:1f:e4:f4:63:01:f2:80:97:9e:f1:
26:c4:53:61:67:e7:cc:25:77:e6:7e:e1:9d:ae:aa:
2b:72:91:e9:f7:a3:a6:fa:a3:27:1d:84:97:73:5d:
d0:df:b6:7b:91:21:c3:68:7a:6f:69:2f:4a:86:d1:
6b:2b:b0:af:19:7e:f8:2f:29:8c:73:f4:0f:1d:b4:
41:09:d6:2f:79:e1:bf:03:20:d0:cf:1e:2e:b2:2c:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:B5:28:6C:A3:FC:C2:8A:DD:6D:7B:70:19:77:2A:AC:8A:2F:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37322e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c7:43:e4:30:fb:fd:56:3f:f3:1b:7f:93:b5:8d:6c:f2:15:
48:89:21:a8:f4:0a:bb:fb:bc:5a:89:71:87:8a:28:8f:5e:45:
26:a1:b7:bb:1c:98:95:c1:11:82:75:c8:eb:85:05:3a:ef:4b:
52:ca:43:4d:bf:9d:3f:b1:bf:a4:e7:cd:a8:c5:ae:a5:3c:78:
bb:35:de:12:21:d0:c2:f1:64:97:bc:a5:0f:54:43:99:0d:f3:
b5:cd:ef:2a:f8:39:71:68:62:0a:56:52:88:58:88:f7:b8:90:
9d:e3:b9:6a:45:ff:59:19:ad:b8:f9:9f:1a:6f:6a:b9:2a:84:
9e:30:ba:6f:f0:c6:50:f9:7f:b2:b5:12:31:34:4e:6f:4e:8a:
42:db:12:08:9d:00:bf:b4:0b:9c:54:1e:cb:a7:61:54:20:11:
31:3f:f4:08:3d:8b:d3:11:42:ef:3d:7c:4f:fc:0e:d6:4e:12:
c5:f9:ad:63:aa:1b:1a:a1:4d:c0:79:b8:a8:9e:2d:b5:2f:94:
10:ad:f8:c2:52:00:f4:7b:55:a9:89:85:60:36:16:cb:18:58:
ab:74:57:8c:e1:a7:7a:7f:68:e5:91:96:7a:a8:17:f6:03:3e:
ca:ad:9b:ba:75:6a:ad:0c:c8:38:97:a1:af:86:7f:8f:2f:41:
54:2a:c0:33
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPfdJ6tiQ+MYVDrqZ+BSHH9iGVpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MTgxNDQxMzhaFw0yNjA2MTcxNDQ2MzhaMDMxMTAvBgNV
BAMTKDUzMTlCNTI4NkNBM0ZDQzI4QURENkQ3QjcwMTk3NzJBQUM4QTJGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SmXfTVqtqoKzdx7dZ6ZmLGav
tfnHWWWf08lYF4KY/AIIgXRc2mowdjx/v6YNec3rWlInPHxSKluBn2RKeej03Lfk
Yj8cN3RZ+BO92UIEMhsh79aUsF2kfdTFz2zoWUHb///7d+h1Lexokr4BsVqZoUzs
VXY4lvjH7rHkuFav8575la/DCqCr2TR5zJEv7izYM79uucadgbuTVFpjtFvZ7pQl
hO3J8ur4H+T0YwHygJee8SbEU2Fn58wld+Z+4Z2uqityken3o6b6oycdhJdzXdDf
tnuRIcNoem9pL0qG0WsrsK8ZfvgvKYxz9A8dtEEJ1i954b8DINDPHi6yLP4LAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUUxm1KGyj/MKK3W17cBl3KqyKL18wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UpVIMA0GCSqGSIb3DQEBCwUAA4IBAQAPx0PkMPv9Vj/zG3+TtY1s8hVIiSGo9Aq7
+7xaiXGHiiiPXkUmobe7HJiVwRGCdcjrhQU670tSykNNv50/sb+k582oxa6lPHi7
Nd4SIdDC8WSXvKUPVEOZDfO1ze8q+DlxaGIKVlKIWIj3uJCd47lqRf9ZGa24+Z8a
b2q5KoSeMLpv8MZQ+X+ytRIxNE5vTopC2xIInQC/tAucVB7Lp2FUIBExP/QIPYvT
EULvPXxP/A7WThLF+a1jqhsaoU3Aebioni21L5QQrfjCUgD0e1WpiYVgNhbLGFir
dFeM4ad6f2jlkZZ6qBf2Az7KrZu6dWqtDMg4l6Gvhn+PL0FUKsAz
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:12:39 2025 by rpki-client