Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235352e302f32342d3234203d3e203231383539.roa
File: 38322e3139382e3235352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: BceqyXbqwwniZoK+9C3UsRxlSUeskkBISSq+Ew5tOyU=
Subject key identifier: 72:E4:0C:AA:BA:AE:B6:FC:11:51:F0:AB:BD:99:99:2E:3C:0B:AD:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A148EDAFB2D20B4AE2D1BF26B3B6C54C529C4EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235352e302f32342d3234203d3e203231383539.roa
Signing time: Thu 21 Aug 2025 10:39:14 +0000
ROA not before: Thu 21 Aug 2025 10:34:14 +0000
ROA not after: Thu 20 Aug 2026 10:39:14 +0000
asID: 21859
IP address blocks: 82.198.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:14:8e:da:fb:2d:20:b4:ae:2d:1b:f2:6b:3b:6c:54:c5:29:c4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 10:34:14 2025 GMT
Not After : Aug 20 10:39:14 2026 GMT
Subject: CN=72E40CAABAAEB6FC1151F0ABBD99992E3C0BAD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:7b:a4:09:a2:9a:66:47:a3:7d:92:35:a3:
26:ee:5f:3e:e6:f0:98:f7:f8:2b:f7:28:e1:e5:cf:
62:e7:de:7d:a7:76:bf:64:b4:c9:e1:47:96:f3:83:
14:11:99:cd:2c:88:13:94:36:06:35:d1:8f:68:82:
e6:86:b9:21:7f:91:80:d2:20:74:80:54:0c:a1:32:
b5:8a:3e:fb:9e:2c:88:d1:d5:41:75:4e:b4:18:4d:
5f:ba:a5:d1:e2:f6:f4:35:5a:c0:f8:70:d3:66:91:
8d:d6:0d:ce:21:68:36:9b:06:71:d9:4c:a8:17:44:
b3:8d:94:04:7a:5a:84:c9:05:28:1d:11:2c:0a:7a:
73:12:a7:85:5d:79:ed:45:54:2e:ad:4c:a4:f5:21:
7d:e5:3a:9e:d0:65:1d:b6:59:f4:a6:cc:24:5c:e7:
db:43:34:79:1a:20:e9:60:12:54:41:44:d6:e8:0f:
22:8a:20:9d:64:76:2d:cb:35:c1:c1:21:4a:86:ab:
f5:fe:52:d1:43:39:f7:77:d9:31:61:b2:51:6a:1f:
c3:ab:88:1e:29:81:9f:cc:a5:fb:66:13:cd:4f:6e:
f7:f1:0a:f5:81:8d:69:01:28:fb:7f:35:8f:d2:f8:
19:1e:dc:a8:61:ab:2f:d7:b8:21:ca:4b:93:e4:df:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E4:0C:AA:BA:AE:B6:FC:11:51:F0:AB:BD:99:99:2E:3C:0B:AD:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235352e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.255.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c0:ac:a1:4d:18:9a:dd:54:87:69:a4:23:c8:40:f2:f0:14:
81:9f:cb:d1:31:66:58:82:98:0d:48:c9:90:c6:d3:cc:3a:71:
4e:49:a8:c0:ed:b8:b6:a3:85:85:2b:1b:de:d5:36:c0:7e:23:
7f:07:57:b5:78:81:2e:c0:eb:64:73:36:49:28:8c:a5:f7:f9:
1e:3c:67:34:e2:26:79:d3:85:c0:60:e3:21:9e:32:d1:bc:80:
4a:73:d1:eb:7a:2a:31:4a:f0:74:a7:e6:37:3e:fe:21:59:6c:
e7:ba:d2:f9:a7:72:c1:7e:2f:fd:c3:aa:44:88:88:90:48:aa:
68:29:56:e1:61:41:62:d8:c3:09:98:b7:6a:c1:b3:56:38:47:
2c:0c:9e:36:c2:26:34:a0:5e:95:67:a0:24:2c:9b:41:fe:f7:
14:8c:d9:2b:1d:61:40:b5:45:4d:68:ae:94:e2:6c:c3:0b:94:
3f:2f:f0:01:10:ce:3e:39:72:f9:08:97:ec:5b:e0:f1:75:82:
1f:3b:7f:bb:c0:db:c6:9f:9f:21:56:08:cc:46:47:c6:f6:65:
cb:76:80:6a:86:12:26:10:98:60:76:43:59:85:21:46:88:ca:
08:72:e3:81:2d:b6:da:8a:2a:05:39:29:27:85:67:d4:b2:03:
3b:4d:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:03 2025 by rpki-client