Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3232342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: luiJDYDYWl4bqzocEgml2bNd1/S5FO8nbtIstCZyPWY=
Subject key identifier: 25:7F:FD:B1:A3:F1:F0:A9:B9:76:8C:8E:34:60:2B:91:CE:78:C5:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5424F2EDB7215D3BA71B7E03B71DED690170DEA4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 23 Jun 2025 16:46:43 +0000
ROA not before: Mon 23 Jun 2025 16:41:43 +0000
ROA not after: Mon 22 Jun 2026 16:46:43 +0000
asID: 47583
IP address blocks: 85.31.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:24:f2:ed:b7:21:5d:3b:a7:1b:7e:03:b7:1d:ed:69:01:70:de:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 23 16:41:43 2025 GMT
Not After : Jun 22 16:46:43 2026 GMT
Subject: CN=257FFDB1A3F1F0A9B9768C8E34602B91CE78C516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:a3:01:72:e2:45:ec:a6:59:f6:1c:0e:a7:
97:d8:3e:89:c3:2b:93:0c:6f:34:0f:5d:de:45:45:
e5:73:15:c3:4b:33:05:25:0e:b4:51:12:b4:b6:9b:
e3:b8:7f:21:92:76:2f:5c:cb:e1:47:dc:08:0d:3f:
14:cf:b9:4b:80:f2:b2:15:6a:21:a5:96:fd:31:14:
e8:b9:44:21:ca:d9:2b:fa:00:8a:55:61:c1:cc:47:
ef:e8:83:39:30:a3:55:c9:bd:92:2b:4c:9b:77:0b:
59:7f:e3:d3:0a:a1:6d:a9:2a:a7:86:f0:7c:ff:89:
18:95:53:8c:45:1f:b8:c4:de:1c:da:3a:e7:fc:46:
0c:25:28:f0:2d:9a:91:1a:29:e6:ca:29:ea:27:6d:
5e:e7:5b:ba:ab:07:cc:66:58:38:df:e6:04:98:7f:
78:df:64:08:51:d4:33:c6:43:f6:50:b8:45:27:96:
4d:a6:69:51:0e:a8:12:af:e5:78:04:ff:16:3d:85:
00:de:5d:8d:a7:60:9b:dc:0c:8b:ab:c0:9f:87:10:
92:3f:f7:3f:9e:2e:1b:06:c9:2b:c8:e4:e1:e4:8d:
28:c1:ef:89:27:f2:60:b8:72:00:7a:a2:67:df:f2:
2c:8e:fd:92:8f:9b:b3:c1:ee:0d:fe:50:71:22:a2:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:FD:B1:A3:F1:F0:A9:B9:76:8C:8E:34:60:2B:91:CE:78:C5:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.224.0/22
Signature Algorithm: sha256WithRSAEncryption
70:d4:d6:36:10:d6:34:66:15:fd:c1:ca:55:37:1c:5e:49:7e:
91:9f:2d:b7:c5:b8:74:e2:8f:70:95:47:5a:e4:ff:a1:5b:67:
1b:50:40:37:41:b1:26:8a:7f:57:d7:bb:e9:3e:6a:ee:18:5a:
55:3b:57:de:da:8a:ae:de:ec:ef:5e:fa:70:0c:a8:a9:ed:34:
ab:47:22:2d:2d:ae:14:7f:0b:91:17:ac:8e:a6:f8:57:36:bd:
d2:8b:3e:b1:af:50:2b:69:00:23:2b:fe:52:e7:68:ad:bd:3b:
cc:1a:2b:f4:1e:90:af:7b:6c:c5:62:6d:9a:59:0a:90:34:e2:
03:79:8d:e0:40:fd:6e:90:63:d0:f4:26:2a:5e:82:98:6e:2e:
f4:d4:19:a8:82:b0:45:3a:1a:76:e7:13:f4:67:14:82:cb:d2:
c7:5c:4a:08:71:0d:6d:38:aa:c2:64:e9:cc:cb:db:93:c7:c2:
a8:7d:d3:81:b5:63:d4:eb:81:7d:6b:73:2a:ef:f6:d6:75:fc:
41:e5:ce:24:49:66:cb:51:06:84:f0:91:8a:55:b3:29:37:4b:
e6:c8:05:60:13:ab:ec:51:cf:9a:06:bc:37:a7:8c:46:61:73:
47:71:cf:ca:77:d4:f2:d1:b2:bc:9b:0a:2a:1d:3a:86:e2:ac:
49:54:10:3f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVCTy7bchXTunG34Dtx3taQFw3qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjMxNjQxNDNaFw0yNjA2MjIxNjQ2NDNaMDMxMTAvBgNV
BAMTKDI1N0ZGREIxQTNGMUYwQTlCOTc2OEM4RTM0NjAyQjkxQ0U3OEM1MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxsqMBcuJF7KZZ9hwOp5fYPonD
K5MMbzQPXd5FReVzFcNLMwUlDrRRErS2m+O4fyGSdi9cy+FH3AgNPxTPuUuA8rIV
aiGllv0xFOi5RCHK2Sv6AIpVYcHMR+/ogzkwo1XJvZIrTJt3C1l/49MKoW2pKqeG
8Hz/iRiVU4xFH7jE3hzaOuf8RgwlKPAtmpEaKebKKeonbV7nW7qrB8xmWDjf5gSY
f3jfZAhR1DPGQ/ZQuEUnlk2maVEOqBKv5XgE/xY9hQDeXY2nYJvcDIurwJ+HEJI/
9z+eLhsGySvI5OHkjSjB74kn8mC4cgB6omff8iyO/ZKPm7PB7g3+UHEioh3ZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJX/9saPx8Km5doyONGArkc54xRYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzMzMTJlMzIzMjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlUf
4DANBgkqhkiG9w0BAQsFAAOCAQEAcNTWNhDWNGYV/cHKVTccXkl+kZ8tt8W4dOKP
cJVHWuT/oVtnG1BAN0GxJop/V9e76T5q7hhaVTtX3tqKrt7s7176cAyoqe00q0ci
LS2uFH8LkResjqb4Vza90os+sa9QK2kAIyv+Uudorb07zBor9B6Qr3tsxWJtmlkK
kDTiA3mN4ED9bpBj0PQmKl6CmG4u9NQZqIKwRToaducT9GcUgsvSx1xKCHENbTiq
wmTpzMvbk8fCqH3TgbVj1OuBfWtzKu/21nX8QeXOJElmy1EGhPCRilWzKTdL5sgF
YBOr7FHPmga8N6eMRmFzR3HPynfU8tGyvJsKKh06huKsSVQQPw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:10 2025 by rpki-client