Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37352e302f32342d3234203d3e20323034313730.roa
File: 38322e3134392e37352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: gntZFa5bG7MvsE4Y646LdF7B2m2m6BBsx+WlTVvqPcw=
Subject key identifier: FB:07:2D:71:4B:CC:0A:97:8A:17:5B:2E:B2:19:7F:64:5D:5B:47:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0986F6611A0FF2F28F0411EC5D8072B4766138D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37352e302f32342d3234203d3e20323034313730.roa
Signing time: Wed 18 Jun 2025 14:46:38 +0000
ROA not before: Wed 18 Jun 2025 14:41:38 +0000
ROA not after: Wed 17 Jun 2026 14:46:38 +0000
asID: 204170
IP address blocks: 82.149.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:86:f6:61:1a:0f:f2:f2:8f:04:11:ec:5d:80:72:b4:76:61:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 18 14:41:38 2025 GMT
Not After : Jun 17 14:46:38 2026 GMT
Subject: CN=FB072D714BCC0A978A175B2EB2197F645D5B47F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:77:b3:b2:a2:96:5f:85:de:e8:bb:c1:31:
e1:54:ce:bf:f6:e3:a8:15:9e:d8:fa:c8:96:ad:06:
38:76:2d:50:29:90:71:8c:f4:42:18:9b:a2:9a:ae:
2f:81:47:b7:e0:f2:29:e0:a3:a8:9f:91:e5:c0:21:
2e:b0:ec:11:64:d8:9d:17:86:6f:b1:03:8c:22:31:
52:79:64:47:fd:6e:92:c6:d1:ba:42:19:1b:31:ef:
92:81:fb:bc:a7:90:3f:60:2f:8a:e5:1b:0b:fc:ce:
4e:4e:bc:0a:29:7e:13:98:00:26:1f:a6:f6:5c:7d:
da:81:00:19:b6:63:61:e7:8a:dc:aa:b1:29:5e:66:
06:f1:f1:8f:4f:7e:aa:1b:84:d2:c9:7a:34:77:7a:
6d:b3:26:a5:fb:ff:3e:1e:dd:11:b8:ed:87:c1:e1:
c7:6b:87:42:f7:1d:c6:ee:57:c0:fb:80:ce:57:a3:
5a:03:35:8f:28:da:4c:a9:4a:7f:38:fc:43:13:67:
cb:64:59:b5:99:5e:de:38:f1:8e:8e:2c:53:7a:89:
af:a5:88:34:8d:40:3f:32:da:dd:ec:81:cf:ba:47:
5e:3b:e4:6c:e1:6a:97:09:26:ae:30:4c:89:17:a0:
45:b1:ba:c4:88:79:be:36:41:a2:3a:32:58:25:57:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:2D:71:4B:CC:0A:97:8A:17:5B:2E:B2:19:7F:64:5D:5B:47:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.75.0/24
Signature Algorithm: sha256WithRSAEncryption
35:56:d4:ea:32:90:85:ef:da:c0:57:d3:76:ea:b5:ba:46:88:
32:bc:15:9a:a1:fe:ca:ec:63:b7:a1:1a:4f:57:7d:e8:8a:46:
ff:b5:43:61:7a:fc:23:d7:fa:da:83:7f:f1:67:8a:30:49:f5:
64:4f:65:b5:42:c5:0a:cf:f0:1c:dc:cc:77:b2:dd:79:f7:61:
d8:26:e6:90:17:37:de:15:dc:c7:09:4a:94:fe:4b:a9:29:ae:
c5:22:a9:70:e3:bc:2b:c9:8d:42:61:2c:17:25:80:18:81:85:
0d:3f:c7:97:d2:ce:be:eb:95:09:59:5e:8a:f0:52:b8:16:46:
7e:76:92:de:2a:d3:fe:79:d1:21:07:13:4c:8a:13:68:c2:b3:
f7:fd:28:82:32:08:cd:e0:4b:d0:05:d3:51:3b:38:c1:56:2e:
79:67:13:a7:0b:3c:9a:e8:92:b0:56:44:23:1c:7b:b1:4b:c8:
d2:40:c7:df:b4:e3:f9:80:2f:ae:4c:6c:4c:34:52:1b:6d:6c:
43:0f:94:b2:a3:96:06:50:4c:43:b9:e5:6b:bc:d5:3a:7e:ad:
9f:cc:3d:cc:c5:68:77:25:82:29:01:85:d4:43:0c:dc:1c:8e:
c7:04:be:21:6f:56:4c:c4:50:38:18:7b:22:bb:e8:3f:6d:f4:
7d:30:36:78
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCYb2YRoP8vKPBBHsXYBytHZhONIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MTgxNDQxMzhaFw0yNjA2MTcxNDQ2MzhaMDMxMTAvBgNV
BAMTKEZCMDcyRDcxNEJDQzBBOTc4QTE3NUIyRUIyMTk3RjY0NUQ1QjQ3RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRnezsqKWX4Xe6LvBMeFUzr/2
46gVntj6yJatBjh2LVApkHGM9EIYm6Kari+BR7fg8ingo6ifkeXAIS6w7BFk2J0X
hm+xA4wiMVJ5ZEf9bpLG0bpCGRsx75KB+7ynkD9gL4rlGwv8zk5OvAopfhOYACYf
pvZcfdqBABm2Y2HnityqsSleZgbx8Y9PfqobhNLJejR3em2zJqX7/z4e3RG47YfB
4cdrh0L3HcbuV8D7gM5Xo1oDNY8o2kypSn84/EMTZ8tkWbWZXt448Y6OLFN6ia+l
iDSNQD8y2t3sgc+6R1475GzhapcJJq4wTIkXoEWxusSIeb42QaI6MlglV9+1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU+wctcUvMCpeKF1sushl/ZF1bR/UwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UpVLMA0GCSqGSIb3DQEBCwUAA4IBAQA1VtTqMpCF79rAV9N26rW6RogyvBWaof7K
7GO3oRpPV33oikb/tUNhevwj1/rag3/xZ4owSfVkT2W1QsUKz/Ac3Mx3st1592HY
JuaQFzfeFdzHCUqU/kupKa7FIqlw47wryY1CYSwXJYAYgYUNP8eX0s6+65UJWV6K
8FK4FkZ+dpLeKtP+edEhBxNMihNowrP3/SiCMgjN4EvQBdNROzjBVi55ZxOnCzya
6JKwVkQjHHuxS8jSQMfftOP5gC+uTGxMNFIbbWxDD5Syo5YGUExDueVrvNU6fq2f
zD3MxWh3JYIpAYXUQwzcHI7HBL4hb1ZMxFA4GHsiu+g/bfR9MDZ4
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:57:26 2025 by rpki-client