Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: NA8zHuODhakd1vIAhDgE9zt+qdacVNYKhtCuKfY2C3c=
Subject key identifier: C8:31:85:49:97:89:2B:0C:32:14:49:7D:AF:AF:E9:FC:3B:E5:8D:72
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F9F4F3BFE37832E18270D610354218FACFA0D81
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Jun 2025 07:46:39 +0000
ROA not before: Fri 20 Jun 2025 07:41:39 +0000
ROA not after: Fri 19 Jun 2026 07:46:39 +0000
asID: 47583
IP address blocks: 85.31.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9f:4f:3b:fe:37:83:2e:18:27:0d:61:03:54:21:8f:ac:fa:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 07:41:39 2025 GMT
Not After : Jun 19 07:46:39 2026 GMT
Subject: CN=C831854997892B0C3214497DAFAFE9FC3BE58D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:91:50:ed:53:0f:69:1c:34:02:55:55:dd:
9f:d1:0c:43:8b:11:60:9d:13:7c:03:b2:24:0c:c7:
43:26:ed:3d:62:6e:a1:de:a7:65:b6:c4:c8:54:d4:
87:64:b2:6d:ab:3c:e8:d9:24:aa:96:c2:0c:82:c1:
68:06:0d:06:9b:46:1e:e2:25:69:00:27:e2:dd:79:
02:ec:ee:76:c9:b1:3e:17:c2:2b:51:93:7f:e9:d2:
0d:2a:46:64:f6:ab:c6:44:e7:4e:a6:1d:05:72:86:
9e:cf:b9:74:e9:6c:6d:a5:1a:ff:d6:51:23:44:2a:
0c:c2:56:84:bd:92:34:0d:d5:5f:5b:24:65:8c:6b:
fa:cf:91:0a:54:40:5a:3a:bc:6c:42:16:3f:8b:1b:
3a:ff:70:d7:c1:70:f0:c9:bc:f6:60:75:ec:15:4d:
cd:55:16:a3:5e:a4:5f:43:83:e0:e9:ef:60:cc:39:
1f:46:1c:d0:f4:07:59:a4:3f:d2:2c:c1:3f:3b:88:
e1:04:b2:b9:ac:b9:18:70:ef:b8:c1:e3:f9:d8:8a:
4e:f2:e4:da:81:9c:db:92:0b:c3:e9:0d:89:d5:b5:
2c:a8:5b:21:32:31:ee:57:5f:df:71:c4:c8:f9:5d:
8d:36:0a:62:0f:e0:99:36:ac:d3:57:9b:04:15:0a:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:85:49:97:89:2B:0C:32:14:49:7D:AF:AF:E9:FC:3B:E5:8D:72
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.228.0/22
Signature Algorithm: sha256WithRSAEncryption
56:dc:b7:a8:a2:73:fb:8b:fd:d1:9b:ba:36:ed:c3:31:a1:4c:
92:6f:ec:4f:62:24:53:04:29:90:43:2c:82:8b:9e:f8:e7:e0:
71:96:81:50:7d:a1:5a:42:88:66:cb:37:a3:bd:1e:0d:81:98:
aa:4c:4b:2a:f7:c1:4f:7e:71:ee:b3:ea:40:33:89:9b:7e:10:
a6:ae:4e:44:c2:07:59:6e:8d:b0:78:6e:25:a3:15:70:da:18:
21:bf:e3:31:63:50:fc:43:90:aa:b8:4e:d9:22:f2:0e:53:33:
b2:94:9a:fc:b9:d1:47:c6:b0:3d:ed:fc:08:74:63:ce:32:91:
ad:02:f2:e9:0f:e5:ef:db:55:a8:76:5c:18:be:a6:b0:da:3c:
3a:77:60:7e:4c:15:9d:2e:bd:08:8b:fc:94:d3:58:57:5e:db:
2e:81:40:52:74:f6:bd:37:8e:53:d1:22:2a:a6:30:ac:c1:ac:
a9:41:3d:1f:51:f8:d9:b6:1c:0d:e7:17:30:55:63:cb:ad:6f:
59:dd:af:4b:fb:47:bc:07:a4:70:a1:7a:5b:1e:ac:75:80:9f:
12:e4:f6:8c:ec:b1:46:31:2e:14:9b:e4:e8:84:ef:bc:9c:b5:
14:3e:77:99:32:f2:ba:0b:8d:06:d2:da:1f:2a:f9:97:bd:fe:
9e:7f:aa:d9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUf59PO/43gy4YJw1hA1Qhj6z6DYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjAwNzQxMzlaFw0yNjA2MTkwNzQ2MzlaMDMxMTAvBgNV
BAMTKEM4MzE4NTQ5OTc4OTJCMEMzMjE0NDk3REFGQUZFOUZDM0JFNThENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NpFQ7VMPaRw0AlVV3Z/RDEOL
EWCdE3wDsiQMx0Mm7T1ibqHep2W2xMhU1Idksm2rPOjZJKqWwgyCwWgGDQabRh7i
JWkAJ+LdeQLs7nbJsT4XwitRk3/p0g0qRmT2q8ZE506mHQVyhp7PuXTpbG2lGv/W
USNEKgzCVoS9kjQN1V9bJGWMa/rPkQpUQFo6vGxCFj+LGzr/cNfBcPDJvPZgdewV
Tc1VFqNepF9Dg+Dp72DMOR9GHND0B1mkP9IswT87iOEEsrmsuRhw77jB4/nYik7y
5NqBnNuSC8PpDYnVtSyoWyEyMe5XX99xxMj5XY02CmIP4Jk2rNNXmwQVCpuJAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUyDGFSZeJKwwyFEl9r6/p/DvljXIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzMzMTJlMzIzMjM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlUf
5DANBgkqhkiG9w0BAQsFAAOCAQEAVty3qKJz+4v90Zu6Nu3DMaFMkm/sT2IkUwQp
kEMsgoue+OfgcZaBUH2hWkKIZss3o70eDYGYqkxLKvfBT35x7rPqQDOJm34Qpq5O
RMIHWW6NsHhuJaMVcNoYIb/jMWNQ/EOQqrhO2SLyDlMzspSa/LnRR8awPe38CHRj
zjKRrQLy6Q/l79tVqHZcGL6msNo8OndgfkwVnS69CIv8lNNYV17bLoFAUnT2vTeO
U9EiKqYwrMGsqUE9H1H42bYcDecXMFVjy61vWd2vS/tHvAekcKF6Wx6sdYCfEuT2
jOyxRjEuFJvk6ITvvJy1FD53mTLyuguNBtLaHyr5l73+nn+q2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:16:26 2025 by rpki-client