Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa
File: 38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: u+SbqTUeKE1DB2ZK81W3fWFE+hyztil9eUlNwNNKpNk=
Subject key identifier: BC:94:1B:31:02:E9:E0:5E:12:08:C9:33:3B:A2:A9:43:6E:6F:E1:73
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 435746EB63A22BC0C372A8704276AC6CE8BBC9A8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 22 Aug 2025 14:47:16 +0000
ROA not before: Fri 22 Aug 2025 14:42:16 +0000
ROA not after: Fri 21 Aug 2026 14:47:16 +0000
asID: 136787
IP address blocks: 83.136.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:57:46:eb:63:a2:2b:c0:c3:72:a8:70:42:76:ac:6c:e8:bb:c9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:16 2025 GMT
Not After : Aug 21 14:47:16 2026 GMT
Subject: CN=BC941B3102E9E05E1208C9333BA2A9436E6FE173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:96:56:9a:d3:2d:c7:63:fc:74:8a:22:fd:
58:88:96:19:d7:ee:61:16:6b:0e:d6:f2:3c:07:a7:
dd:19:69:87:32:46:3e:26:2d:57:45:4d:97:4f:6e:
8f:b8:d8:e9:3c:1d:36:a7:ab:be:aa:1b:79:26:1f:
bc:1a:5a:98:e7:15:f7:27:03:35:21:69:c6:8e:1a:
72:74:f0:ff:f4:03:c1:fb:3f:ee:3d:10:a0:c6:78:
8e:5f:7b:33:e7:67:e4:97:0e:d6:99:34:87:6e:f6:
e9:a2:e1:24:b8:d3:46:35:c9:85:99:4a:da:3b:e5:
19:6f:c2:62:c2:26:3c:2e:24:12:29:f1:20:ca:03:
0e:43:dd:93:36:92:ca:f9:7c:c6:1a:00:1c:3b:d5:
89:20:92:bf:51:bc:15:07:0a:12:05:cd:83:fe:a1:
ed:41:4b:58:3b:a2:97:4c:62:34:bc:ba:5d:e8:fb:
e8:19:93:e3:42:3f:14:4a:d0:8a:fe:6d:17:18:cd:
c6:0c:fc:21:97:a9:f6:fb:ee:45:69:40:81:db:28:
0e:83:f1:5a:22:3d:b3:6a:1b:b9:63:c5:1d:24:2e:
ae:85:78:de:94:b1:61:ff:38:3c:8d:4c:e3:cb:b1:
1d:19:d4:0b:ae:30:89:7a:f9:31:aa:bc:c2:d1:84:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:94:1B:31:02:E9:E0:5E:12:08:C9:33:3B:A2:A9:43:6E:6F:E1:73
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3133362e3138332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.183.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:38:f0:6f:e5:8a:8b:50:ba:6f:94:3e:9d:90:32:10:fc:
50:71:64:e5:e7:6e:d9:19:8a:32:77:a4:43:b6:51:93:8c:f3:
fd:58:39:1e:8c:32:7b:77:54:97:ed:51:fb:70:0d:3a:03:e0:
4c:72:50:c0:e9:63:8d:eb:76:b5:3e:8e:70:e4:7f:38:e0:74:
9c:25:30:aa:00:f0:7e:a7:ef:7c:0b:31:bc:37:27:8f:98:63:
f6:af:8c:ab:e0:27:fe:1d:46:b9:3a:c2:f1:d4:1b:a2:3f:5c:
28:c8:94:a2:d6:d6:20:70:a6:01:1f:c2:31:b2:49:52:f5:70:
d3:06:66:73:2c:25:7b:f1:a2:a4:cf:3a:41:cf:db:b7:59:ee:
a4:e9:be:51:e4:4c:8f:fc:e1:37:41:c3:13:16:e5:17:28:70:
9f:0f:67:e8:5d:79:06:0c:6b:b6:c0:59:c8:be:6c:a6:e4:59:
fb:c6:4c:04:4d:d8:7d:f8:62:ef:cd:a9:d3:89:6a:6a:7c:94:
b3:02:47:f7:fe:2c:fa:12:66:2c:e3:5e:56:77:fd:73:ba:34:
0a:45:a4:75:de:4f:83:e2:11:ff:e9:a4:1c:5c:db:18:b9:3a:
54:27:05:58:4c:88:d8:05:ba:16:b1:55:95:83:ef:cb:d5:23:
19:99:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:22 2025 by rpki-client