Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa
File: 38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: h/qVEImw5+lmNLokeehu+vvn/fnV3vDxZaZLc3Vnidk=
Subject key identifier: 2A:C0:A3:D2:C8:5E:76:51:83:40:BC:AC:03:6B:18:12:0B:0D:62:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34DC5D8098FF93C31DE717F46E6769574E127711
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:12 +0000
ROA not before: Fri 22 Aug 2025 14:42:12 +0000
ROA not after: Fri 21 Aug 2026 14:47:12 +0000
asID: 136787
IP address blocks: 83.136.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:dc:5d:80:98:ff:93:c3:1d:e7:17:f4:6e:67:69:57:4e:12:77:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:12 2025 GMT
Not After : Aug 21 14:47:12 2026 GMT
Subject: CN=2AC0A3D2C85E76518340BCAC036B18120B0D6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:f2:9d:65:f7:ea:03:dc:b1:27:0e:75:4d:
42:41:38:2d:fa:de:60:9c:01:ae:21:3f:cc:b0:5d:
4b:a7:ff:78:08:81:bb:cf:7b:c6:c1:74:a6:db:8c:
e8:ab:5b:17:47:56:1f:f4:27:c9:5f:1f:1f:c9:aa:
aa:d8:71:71:1e:4b:5d:16:a9:47:97:03:06:40:4f:
2a:af:fd:2d:df:7f:95:7f:ae:42:9e:f1:a5:7f:df:
09:41:05:ba:85:e2:b3:4c:1f:85:1d:f9:e7:b4:6d:
e0:de:be:3a:6b:76:69:e2:47:a7:ee:f9:d5:fb:46:
4a:bb:27:92:d9:bf:f2:e7:0f:1d:45:fa:aa:8f:2a:
2b:6b:15:82:11:2d:35:78:11:59:7b:59:c8:b2:35:
27:68:42:1f:eb:d8:27:00:05:5b:7e:63:28:6c:6d:
b5:a6:08:75:1a:f1:54:8f:12:a0:1a:fc:86:1a:de:
60:46:d6:3f:62:d4:7e:2f:44:5f:42:2e:31:8d:f7:
dc:9f:35:c7:af:7d:28:1b:29:42:09:36:7f:cd:7e:
a7:9a:81:1a:8d:fa:4b:a5:2d:39:19:e0:86:ec:94:
0e:ec:18:07:4c:15:15:55:73:f2:8c:bb:6f:bf:6a:
17:b2:f5:a2:d6:e6:53:6b:e0:74:f1:8e:99:8b:74:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:A3:D2:C8:5E:76:51:83:40:BC:AC:03:6B:18:12:0B:0D:62:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.180.0/24
Signature Algorithm: sha256WithRSAEncryption
02:6c:23:a7:08:7c:be:44:f4:a4:d6:c0:9b:4e:9e:b4:0f:d4:
e2:51:bc:19:6d:7d:28:2f:3f:2b:5f:dd:a2:1a:29:fd:b0:92:
3d:da:be:0e:56:85:02:ac:1b:ff:07:57:66:3e:d2:88:25:e9:
f1:09:17:2b:ad:a0:11:8b:7e:7a:75:7a:cc:57:46:ea:66:a3:
84:8a:0b:24:a8:a6:ef:09:cf:a7:35:fb:85:b0:d3:9e:63:43:
1c:50:ce:f0:e6:c2:fd:69:88:33:2a:77:68:3a:12:22:af:d6:
c1:53:ca:01:86:5f:a4:d1:39:f6:aa:22:bb:8b:38:3b:cf:45:
2c:1b:00:f8:f2:a6:72:6d:40:18:8e:d8:7c:2d:d6:6e:36:b8:
f6:60:40:3b:78:86:86:65:f7:b6:0d:79:18:c3:5c:bc:55:73:
9c:5e:43:57:0b:82:27:fe:d6:34:22:9d:14:0c:8c:e7:07:31:
71:ac:7a:94:68:02:dd:d5:f0:0f:8e:89:9b:82:b5:e4:6a:22:
a3:0b:80:ae:8a:28:7e:0e:a4:58:6a:0c:66:b0:42:f2:7d:15:
74:70:55:56:a0:81:97:08:5a:2e:20:7c:16:b4:b7:ae:b6:c0:
41:32:df:ec:00:a5:d7:31:0e:20:a3:14:d2:9f:dc:43:ff:21:
65:79:b3:45
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNNxdgJj/k8Md5xf0bmdpV04SdxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTJaFw0yNjA4MjExNDQ3MTJaMDMxMTAvBgNV
BAMTKDJBQzBBM0QyQzg1RTc2NTE4MzQwQkNBQzAzNkIxODEyMEIwRDYyMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMfKdZffqA9yxJw51TUJBOC36
3mCcAa4hP8ywXUun/3gIgbvPe8bBdKbbjOirWxdHVh/0J8lfHx/JqqrYcXEeS10W
qUeXAwZATyqv/S3ff5V/rkKe8aV/3wlBBbqF4rNMH4Ud+ee0beDevjprdmniR6fu
+dX7Rkq7J5LZv/LnDx1F+qqPKitrFYIRLTV4EVl7WciyNSdoQh/r2CcABVt+Yyhs
bbWmCHUa8VSPEqAa/IYa3mBG1j9i1H4vRF9CLjGN99yfNcevfSgbKUIJNn/Nfqea
gRqN+kulLTkZ4IbslA7sGAdMFRVVc/KMu2+/ahey9aLW5lNr4HTxjpmLdAD7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUKsCj0shedlGDQLysA2sYEgsNYgUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMzJlMzEzMzM2MmUzMTM4
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABTiLQwDQYJKoZIhvcNAQELBQADggEBAAJsI6cIfL5E9KTWwJtOnrQP1OJRvBlt
fSgvPytf3aIaKf2wkj3avg5WhQKsG/8HV2Y+0ogl6fEJFyutoBGLfnp1esxXRupm
o4SKCySopu8Jz6c1+4Ww055jQxxQzvDmwv1piDMqd2g6EiKv1sFTygGGX6TROfaq
IruLODvPRSwbAPjypnJtQBiO2Hwt1m42uPZgQDt4hoZl97YNeRjDXLxVc5xeQ1cL
gif+1jQinRQMjOcHMXGsepRoAt3V8A+OiZuCteRqIqMLgK6KKH4OpFhqDGawQvJ9
FXRwVVaggZcIWi4gfBa0t662wEEy3+wApdcxDiCjFNKf3EP/IWV5s0U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:21 2025 by rpki-client