Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
File: 38352e3230382e35302e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: y7vMwDO0CvvxmeQRmCbRkKMX45PRYxOps/e0XvTjWbc=
Subject key identifier: 49:19:B3:0C:7B:DE:52:F2:AF:63:AF:9C:9D:09:AD:EF:05:3A:B6:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 56802EF9409107A96DFBDF8116AA18E11FB150EA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
Signing time: Fri 22 Aug 2025 14:47:18 +0000
ROA not before: Fri 22 Aug 2025 14:42:18 +0000
ROA not after: Fri 21 Aug 2026 14:47:18 +0000
asID: 43260
IP address blocks: 85.208.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:80:2e:f9:40:91:07:a9:6d:fb:df:81:16:aa:18:e1:1f:b1:50:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:18 2025 GMT
Not After : Aug 21 14:47:18 2026 GMT
Subject: CN=4919B30C7BDE52F2AF63AF9C9D09ADEF053AB6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:1e:63:b9:f0:17:9f:e8:31:e8:92:58:6c:
f6:6a:07:6d:f8:23:8c:62:fc:3c:81:43:70:5f:dd:
3d:2b:68:1b:5b:ee:0c:af:8c:23:f9:da:68:46:9f:
98:af:a8:f9:5a:d3:a2:51:aa:d3:3b:4c:3b:44:aa:
19:13:bd:5a:81:64:9b:6a:3d:ab:f5:a1:31:9c:12:
3f:c9:ec:38:fe:18:b6:bb:8f:34:ea:4f:04:db:10:
0b:9a:5d:5c:3a:a3:63:85:2e:1a:e8:e9:bb:cc:c2:
05:62:f4:ef:07:96:5c:28:60:e1:45:c1:09:f4:5a:
e0:23:73:51:8f:6b:04:08:dd:8f:42:a9:4c:09:40:
fd:b0:7a:5a:c3:3d:25:88:e0:19:68:65:1b:35:a8:
7c:5d:65:42:4a:60:a0:2c:ea:de:ce:92:08:16:22:
b3:06:65:b0:5e:09:76:47:73:b9:2d:8c:c7:34:56:
1b:66:0e:32:2d:d5:11:bc:ac:82:98:b6:5a:97:1e:
0c:8a:ca:a7:3e:6a:1b:0f:a3:bd:79:13:1e:91:b1:
c8:b7:bb:74:d2:9f:47:d1:ef:ad:67:bd:00:2e:e0:
7b:7d:44:b7:36:6c:82:e6:ac:4c:db:f6:a5:78:66:
5f:44:2f:b4:2d:f9:a6:a8:e2:7c:59:6c:12:31:77:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:B3:0C:7B:DE:52:F2:AF:63:AF:9C:9D:09:AD:EF:05:3A:B6:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35302e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3f:bd:8e:17:40:0a:d2:82:6c:1f:88:f1:3e:cf:c3:0f:58:
e9:3e:49:1e:22:df:1c:c8:4b:ce:57:68:45:9b:cb:03:78:43:
ea:03:7e:64:10:cc:99:e1:75:25:dd:8a:e0:d0:9d:72:91:7e:
f4:08:16:67:83:76:29:b4:b2:2c:bb:86:89:98:6a:0a:c8:f8:
01:34:8a:04:77:78:d5:36:8b:11:e4:20:b1:ea:82:09:85:0c:
db:40:4d:33:ce:03:d9:ef:63:c0:04:3e:dd:41:3e:dd:52:cd:
a7:88:24:d1:c7:5a:29:a1:a8:7d:fe:d4:00:3b:15:7f:82:97:
14:0e:f4:d6:11:f4:a3:8a:9e:26:e8:41:cb:74:30:c4:13:a2:
b3:b9:fa:41:3e:e2:13:a2:15:d3:eb:2a:e0:a1:72:51:c6:09:
d8:cb:d2:e6:99:b7:a8:ca:3a:1c:05:00:92:f7:7b:df:2f:dd:
fa:a7:7c:8f:75:4b:4d:7a:8e:6b:37:e9:ed:9e:05:96:62:71:
2c:60:e9:07:63:33:a6:1a:45:7d:69:7e:c4:77:ae:07:e0:66:
9e:03:47:e2:0e:8b:5a:4e:a0:9a:74:65:73:36:4f:d5:5b:6b:
3d:27:e9:00:c7:b8:70:ef:97:cb:5a:e4:6f:90:06:5f:ae:47:
ce:b4:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:08 2025 by rpki-client