Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32332e302f32342d3332203d3e203531313637.roa
File: 38342e35342e32332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: sqssThnqbPquui+Af0WIHAYUejAXLXVkQtBwm7nV280=
Subject key identifier: 8C:10:95:DC:81:A2:B0:F0:F3:2F:E2:EB:EB:11:9C:70:AC:64:31:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 562797A6AB764EDD80CC14DB2FFEBC805C332B52
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:19 +0000
ROA not before: Fri 22 Aug 2025 14:42:19 +0000
ROA not after: Fri 21 Aug 2026 14:47:19 +0000
asID: 51167
IP address blocks: 84.54.23.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:27:97:a6:ab:76:4e:dd:80:cc:14:db:2f:fe:bc:80:5c:33:2b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:19 2025 GMT
Not After : Aug 21 14:47:19 2026 GMT
Subject: CN=8C1095DC81A2B0F0F32FE2EBEB119C70AC6431C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:39:43:f8:2f:03:57:5e:fa:71:c0:99:3f:
d7:bf:ef:20:f4:4f:12:11:eb:8f:c0:8a:04:bb:37:
3e:4a:01:c5:5b:ac:b3:48:e1:7a:3e:0c:67:d4:b6:
42:71:3d:5f:69:8e:8c:22:a1:47:69:a5:de:41:a8:
4d:26:d6:6b:b3:7a:05:f0:30:16:4a:24:45:8b:73:
9e:7b:2c:0b:20:59:ac:ba:9f:62:38:9a:76:e2:df:
4e:14:49:e8:06:1e:da:01:09:35:27:04:fd:d7:49:
76:5a:5f:5a:5f:cb:6a:52:c7:ac:0a:22:8a:42:37:
92:12:86:55:3f:bf:8d:88:ce:41:da:e9:0b:c0:e6:
d0:07:76:c0:cf:d3:30:45:61:cd:12:2f:a1:11:dd:
ae:1e:9a:a2:49:06:ba:02:b8:7d:92:81:0d:19:08:
b9:92:10:b7:d7:cf:57:92:06:92:a1:6d:f9:33:9f:
83:e3:ba:95:a0:fc:4a:ee:48:26:5b:71:c2:b8:be:
d3:f1:1c:8f:f0:83:6e:6b:a7:e1:12:41:e3:d6:60:
e3:7c:2d:a2:d3:ff:ef:28:06:30:8f:43:0e:85:97:
04:14:0f:da:c6:8f:51:ff:fb:ad:8f:78:ac:28:d3:
7a:a8:44:29:c8:ba:5b:6b:18:ee:8a:c0:5a:9d:89:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:95:DC:81:A2:B0:F0:F3:2F:E2:EB:EB:11:9C:70:AC:64:31:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e35342e32332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.23.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c9:dd:fa:08:94:c3:0e:1d:9e:29:3d:d8:d3:e4:e9:90:f9:
f2:75:87:aa:8c:34:b4:27:b2:ac:37:85:f8:7b:b8:09:0e:47:
9b:a3:6a:9c:76:2a:c4:ca:93:21:45:93:a1:70:00:1f:0a:bb:
f9:bd:53:32:bf:0c:b7:bf:6b:bf:ac:7d:e9:2b:e8:f7:cf:53:
a6:95:6f:2f:0d:5c:79:08:df:a7:85:d7:f6:d7:06:5b:f9:b3:
f6:71:9b:d5:b8:b4:b3:4f:c7:89:aa:1f:99:b4:e5:d0:46:5c:
50:29:6e:17:a5:08:ac:92:f2:c4:fb:fc:0d:08:0a:03:1c:ef:
d9:4d:a7:e3:77:10:78:d6:0d:5a:38:83:1e:39:13:b9:6c:b5:
ba:b6:3f:20:ed:37:4e:16:54:91:05:96:5c:b5:fb:2d:ff:3e:
8a:94:45:1b:18:bf:b1:da:f1:5d:a4:f5:23:5f:bc:17:23:a3:
2d:9c:dc:d9:94:ba:fe:c6:d9:fb:85:0b:72:d6:b8:f5:8c:d8:
e2:66:2b:69:d6:22:d4:fe:fb:6c:5d:fb:fd:44:1e:23:73:3b:
a4:3d:12:e8:49:74:b7:24:bf:83:0d:aa:c4:5f:33:5d:f5:f4:
bb:87:64:20:c7:cd:cc:b0:c4:fc:3f:f7:5b:b2:f3:c7:84:8e:
b3:00:2e:b6
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUVieXpqt2Tt2AzBTbL/68gFwzK1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMTlaFw0yNjA4MjExNDQ3MTlaMDMxMTAvBgNV
BAMTKDhDMTA5NURDODFBMkIwRjBGMzJGRTJFQkVCMTE5QzcwQUM2NDMxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVQjlD+C8DV176ccCZP9e/7yD0
TxIR64/AigS7Nz5KAcVbrLNI4Xo+DGfUtkJxPV9pjowioUdppd5BqE0m1muzegXw
MBZKJEWLc557LAsgWay6n2I4mnbi304USegGHtoBCTUnBP3XSXZaX1pfy2pSx6wK
IopCN5IShlU/v42IzkHa6QvA5tAHdsDP0zBFYc0SL6ER3a4emqJJBroCuH2SgQ0Z
CLmSELfXz1eSBpKhbfkzn4PjupWg/EruSCZbccK4vtPxHI/wg25rp+ESQePWYON8
LaLT/+8oBjCPQw6FlwQUD9rGj1H/+62PeKwo03qoRCnIultrGO6KwFqdiWkNAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUjBCV3IGisPDzL+Lr6xGccKxkMcQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNDJlMzUzNDJlMzIzMzJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABUNhcw
DQYJKoZIhvcNAQELBQADggEBABbJ3foIlMMOHZ4pPdjT5OmQ+fJ1h6qMNLQnsqw3
hfh7uAkOR5ujapx2KsTKkyFFk6FwAB8Ku/m9UzK/DLe/a7+sfekr6PfPU6aVby8N
XHkI36eF1/bXBlv5s/Zxm9W4tLNPx4mqH5m05dBGXFApbhelCKyS8sT7/A0ICgMc
79lNp+N3EHjWDVo4gx45E7lstbq2PyDtN04WVJEFlly1+y3/PoqURRsYv7Ha8V2k
9SNfvBcjoy2c3NmUuv7G2fuFC3LWuPWM2OJmK2nWItT++2xd+/1EHiNzO6Q9EuhJ
dLckv4MNqsRfM1319LuHZCDHzcywxPw/91uy88eEjrMALrY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:56 2025 by rpki-client