Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
File: 38352e3230382e35312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 8X40Tld/x5mS1DXdhzjg6mQWaTdWj7DAU6YtsOeL+1c=
Subject key identifier: FF:8C:17:75:43:03:36:83:5F:40:04:4F:1F:86:C6:67:14:7C:A5:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7DB17800D8D05A938E6B863185C2B5910343D68D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:15 +0000
ROA not before: Fri 22 Aug 2025 14:42:15 +0000
ROA not after: Fri 21 Aug 2026 14:47:15 +0000
asID: 51167
IP address blocks: 85.208.51.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b1:78:00:d8:d0:5a:93:8e:6b:86:31:85:c2:b5:91:03:43:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:15 2025 GMT
Not After : Aug 21 14:47:15 2026 GMT
Subject: CN=FF8C1775430336835F40044F1F86C667147CA500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:bb:e7:f5:92:22:e1:d3:57:4c:d8:8a:97:
e4:de:69:ca:ee:0f:cb:73:eb:3b:7b:b7:87:6b:c1:
f3:96:3e:1a:ef:14:a3:14:3b:3b:84:7e:d5:b4:16:
47:9a:71:2a:d9:78:c2:d7:b1:bd:94:ae:ed:ec:77:
b0:2a:6c:1c:21:9f:28:f0:a5:90:dc:35:d8:1d:4a:
11:7d:d3:42:83:7e:0c:8c:b9:d2:23:e4:21:be:ff:
24:e6:12:02:b2:d3:59:51:6a:fd:80:0b:b7:35:36:
46:71:09:02:a7:d1:79:b8:81:03:4e:b4:90:fe:7a:
3b:b1:b4:38:50:41:38:6e:b3:0c:0d:df:00:b2:e2:
a3:ad:b4:fb:08:87:ff:a1:30:d3:0d:af:33:32:91:
a4:b5:23:f4:88:a9:db:be:fb:59:0c:9a:81:c8:d6:
f6:09:0f:bd:30:26:4a:dc:b6:fe:24:53:96:91:b9:
bb:3a:5f:a4:c7:fd:ad:d8:5e:f8:6e:05:15:cd:e5:
84:da:8b:b8:ae:ac:d4:fc:1e:58:dd:7f:08:2d:f6:
7e:cb:92:2f:2f:17:c3:f4:67:6d:d0:ed:07:dc:22:
eb:51:a3:b4:44:34:de:e8:12:39:79:97:0d:e8:6b:
15:57:2e:78:3c:dd:88:58:cc:a9:db:5b:d0:12:58:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:17:75:43:03:36:83:5F:40:04:4F:1F:86:C6:67:14:7C:A5:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.51.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:69:a0:fa:b9:6d:18:21:59:16:53:a1:42:b4:65:d4:99:46:
db:13:f4:52:6b:78:d7:fc:f6:6f:d4:9b:f9:15:14:fe:a6:5c:
cb:10:8f:cc:ec:d7:b2:f5:e6:63:75:87:3e:01:7f:00:31:00:
87:10:2b:39:71:f7:cc:70:da:47:25:ab:20:dd:a3:23:68:b5:
33:5c:a8:73:58:eb:58:32:28:89:29:af:8c:32:e3:e7:e4:f8:
07:95:5e:b9:9b:ac:1c:8d:f9:32:8a:a7:c7:d9:a3:71:f9:09:
2f:5c:2c:96:3b:e2:e0:dd:31:9e:4d:f7:64:7e:c6:2d:31:8a:
f0:93:a0:f4:5d:34:0e:c7:94:fb:e2:b8:c7:3e:94:b1:9a:c9:
cd:6a:46:e2:ed:ab:ed:0f:06:d6:6c:16:57:3a:1e:4b:57:e4:
6f:f6:39:3b:17:6f:34:17:1c:06:d9:5c:b7:4f:cc:1c:0d:22:
c4:94:90:2e:e1:64:2b:c0:17:48:b3:52:0a:8d:cb:9c:a7:e0:
d8:c8:2b:34:9f:79:b0:a6:68:29:49:53:2b:6f:4c:c1:eb:1c:
0b:4b:bc:d2:ea:56:79:f7:4c:32:b3:46:7a:13:b6:da:db:d5:
db:9b:19:e1:ef:73:1a:0d:67:2a:1d:be:d9:54:06:4b:42:f1:
6d:a2:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:53 2025 by rpki-client