Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233372e302f32342d3234203d3e20313336373837.roa
File: 38352e3139302e3233372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 7tRN8JtSF/504bO3beakxNizWUwnsqQFTFf/J0JTvdU=
Subject key identifier: E1:B8:97:4D:FA:32:DC:D8:D7:10:BE:E2:07:D0:40:51:65:6A:99:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 681ABB6009CA47264F26993BCE31F89C816032D7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 28 Sep 2025 20:47:41 +0000
ROA not before: Sun 28 Sep 2025 20:42:41 +0000
ROA not after: Sun 27 Sep 2026 20:47:41 +0000
asID: 136787
IP address blocks: 85.190.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:bb:60:09:ca:47:26:4f:26:99:3b:ce:31:f8:9c:81:60:32:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 28 20:42:41 2025 GMT
Not After : Sep 27 20:47:41 2026 GMT
Subject: CN=E1B8974DFA32DCD8D710BEE207D04051656A9969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:a7:bd:71:0d:64:01:04:c0:bb:0e:b7:08:
06:d6:43:24:4d:4f:d7:7c:e1:c0:57:6c:dc:c3:13:
93:67:6c:59:30:99:e9:c2:06:ba:0a:6b:6d:32:0a:
8b:b3:f0:1c:ca:cc:1a:c3:a2:2e:a9:b4:ea:73:3a:
f0:52:13:39:9c:87:6f:51:88:78:91:3b:b2:9b:d5:
cf:06:f6:cd:20:eb:7c:93:fe:c5:fd:0e:65:83:ff:
65:1c:02:02:2a:96:da:95:e1:86:a9:1f:ae:6c:73:
80:4a:ac:0a:d3:c2:66:bf:a1:1e:8f:5d:d1:5a:38:
bc:e8:db:f4:26:07:1f:88:d9:fd:a0:3b:d7:fb:e7:
3f:ed:12:ca:82:34:06:4d:4b:96:32:96:52:06:37:
2f:82:6c:4b:54:9b:74:ce:d7:67:a8:c2:ed:34:9a:
90:bd:ff:d7:d2:86:8a:b3:a6:4a:ff:81:c6:08:72:
f7:1a:16:1f:2d:f0:5c:c9:93:63:e6:d2:f6:98:e5:
37:45:0d:80:8e:b1:cf:5d:79:f1:cb:37:1c:8e:30:
5e:09:90:9c:f1:fa:7b:0e:be:3c:fd:49:1c:60:b8:
8b:4b:66:77:94:e1:04:6c:8a:72:06:e0:4a:3e:32:
25:22:57:53:94:3b:fe:0b:d7:0f:d3:ab:39:9b:a6:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:97:4D:FA:32:DC:D8:D7:10:BE:E2:07:D0:40:51:65:6A:99:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2f:ca:e3:98:ec:bb:90:46:37:d1:94:ee:95:73:2d:60:c0:
3f:3e:5a:7a:d7:44:f7:db:19:2e:98:60:6f:58:43:4b:c1:70:
71:c1:14:f1:80:db:ed:cc:f7:65:23:49:44:cd:0d:06:15:f8:
79:ec:02:42:aa:14:5d:42:6c:96:1a:9b:fc:ba:86:fe:a5:af:
60:a3:0a:3f:fe:85:12:9e:22:67:d5:99:1c:77:0c:65:db:de:
17:4c:83:6e:66:0e:e1:e2:26:22:67:ac:f2:e3:59:76:3f:f5:
5c:0c:8f:ac:11:f5:64:6f:1a:7f:b0:53:22:0d:c1:f3:4e:03:
89:d1:81:b7:de:66:aa:47:13:84:6e:b2:6a:8d:84:b6:c9:bc:
80:f3:0e:be:ea:82:43:df:d0:68:84:5f:1f:bb:7e:e0:c0:e0:
93:2c:6c:86:7f:c5:1b:35:66:a3:4a:8a:db:58:17:b8:69:f1:
4d:df:f5:b5:c8:f5:e8:cd:86:b0:77:65:52:00:ad:62:b9:56:
a6:7d:3d:05:e4:42:ea:24:29:c2:3e:5c:db:fb:33:81:e7:a1:
51:5d:91:21:51:45:b2:e9:da:5a:98:89:2b:b6:ae:6e:db:72:
d8:23:f8:97:6b:c8:68:7b:6e:d4:ae:b0:9f:7a:a2:f7:eb:5c:
31:5a:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:42 2025 by rpki-client