Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37342e302f32342d3234203d3e20323034313730.roa
File: 38322e3134392e37342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: NLg2sgsIt1CDJWjvowRvxCjEgJDLURMrn4DaCl/pDOE=
Subject key identifier: 88:61:C5:44:CC:2E:9D:6F:D5:C9:74:43:A1:D9:A7:B5:55:F8:36:49
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F0812ED8AD06E5F10851FAFABD1F9B6BD3A9C06
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37342e302f32342d3234203d3e20323034313730.roa
Signing time: Wed 18 Jun 2025 14:46:38 +0000
ROA not before: Wed 18 Jun 2025 14:41:38 +0000
ROA not after: Wed 17 Jun 2026 14:46:38 +0000
asID: 204170
IP address blocks: 82.149.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:08:12:ed:8a:d0:6e:5f:10:85:1f:af:ab:d1:f9:b6:bd:3a:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 14:41:38 2025 GMT
Not After : Jun 17 14:46:38 2026 GMT
Subject: CN=8861C544CC2E9D6FD5C97443A1D9A7B555F83649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:f7:d1:c4:ed:9b:db:9d:19:43:ef:ea:3e:
fc:ae:fa:69:3e:00:b4:e7:7f:19:e1:bd:c1:9a:66:
21:0b:40:64:a5:ae:cb:b2:9c:3d:5e:44:54:e3:74:
67:a6:b3:fa:70:91:3f:fb:fd:9f:6b:3b:fc:be:de:
97:ae:4e:67:51:91:6a:ff:36:bf:57:0d:32:86:c8:
fb:c8:fa:20:4a:6d:1f:e9:f7:19:ee:82:84:55:95:
b8:eb:83:dd:94:5f:43:c8:44:41:74:f8:a6:f2:9e:
19:4a:49:37:c6:76:ec:8e:b1:7b:70:02:05:9d:eb:
ae:f8:60:48:70:1f:44:0e:3b:d9:f9:ac:fa:21:c2:
18:05:fe:c1:87:7d:40:d8:4a:95:d0:ad:49:2d:bd:
b6:0b:e5:c2:a3:4e:4f:a1:52:83:29:b8:bd:cb:45:
48:7b:f7:87:5d:fe:c1:05:03:78:2d:27:38:c4:09:
c4:14:46:a3:e3:d5:0c:2a:5f:cc:f7:cc:92:9f:09:
ef:5b:e1:62:86:2d:a8:e9:e6:a8:39:82:f7:fc:dd:
e4:96:e0:61:59:5c:de:f7:df:ec:17:e3:95:39:56:
d3:ac:c0:84:ae:73:6b:7b:61:86:9f:f0:e8:9b:4f:
5f:17:08:b3:bc:13:cd:26:40:5d:f0:6a:0d:d8:74:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:C5:44:CC:2E:9D:6F:D5:C9:74:43:A1:D9:A7:B5:55:F8:36:49
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37342e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.74.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ee:54:d6:bc:2a:c8:58:d6:9b:56:14:0a:08:35:94:6c:cb:
c2:55:b3:07:d3:4e:fd:a8:8e:6b:1f:bf:f9:ff:0d:63:b9:e8:
ab:f8:c3:e3:a7:57:d6:a8:62:da:e2:af:54:aa:70:12:de:dd:
85:f5:5e:7f:4e:d4:0d:fa:18:75:66:fe:46:fd:e9:51:6f:8d:
5d:99:b7:91:35:97:e1:2c:d9:3c:9a:1a:ab:2f:b2:96:2f:83:
3d:1c:1f:e0:c3:68:f8:06:b0:3e:77:a3:47:76:ca:d7:77:8a:
ee:89:a1:13:72:f6:c7:07:0c:42:85:ea:c0:8c:53:48:2d:32:
e1:d2:5b:b2:1d:97:1c:d5:c6:ae:b1:20:81:50:ce:cd:2c:94:
f9:49:60:67:82:52:ad:48:43:5e:33:ae:1e:68:a6:0f:70:54:
16:01:cd:61:36:49:a8:3f:09:fe:12:60:cc:29:a2:59:d9:f8:
c3:ee:08:04:62:d5:4b:0c:81:0a:94:c9:2e:9d:6f:ac:cf:a9:
3d:7b:dc:49:24:61:5b:de:15:11:cb:16:84:9f:87:b6:9f:70:
d3:0a:a0:e3:17:07:e2:4f:5e:4f:b8:67:df:b1:25:2c:69:13:
cc:72:70:0d:76:d2:71:56:87:28:9e:f4:8e:16:e6:b7:6f:86:
11:32:b3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:46 2025 by rpki-client