Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3233322e302f32322d3234203d3e203437353833.roa
File: 38352e33312e3233322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: iTJ48bVmL2XCCbOHlJCrX2LL0aCg9OZsNQJl7+m2CDI=
Subject key identifier: 89:68:73:AD:47:97:AF:82:96:18:3C:D8:EB:DF:D0:9F:08:68:D9:8A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23811FD6AE3DD73F525480B3987D4E754EB8C305
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3233322e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Jun 2025 07:46:39 +0000
ROA not before: Fri 20 Jun 2025 07:41:39 +0000
ROA not after: Fri 19 Jun 2026 07:46:39 +0000
asID: 47583
IP address blocks: 85.31.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:81:1f:d6:ae:3d:d7:3f:52:54:80:b3:98:7d:4e:75:4e:b8:c3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 07:41:39 2025 GMT
Not After : Jun 19 07:46:39 2026 GMT
Subject: CN=896873AD4797AF8296183CD8EBDFD09F0868D98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:4f:83:ca:f9:6d:1e:22:99:a9:d8:dc:70:
2b:3d:a0:1b:a6:e9:0a:a1:17:58:4f:c4:38:2c:09:
88:81:42:07:02:7e:79:b4:0c:8d:d5:84:d6:9a:90:
54:4e:ea:e8:e7:18:8a:00:29:63:f1:8c:49:50:24:
c0:2d:35:34:66:bc:87:72:c1:d3:b1:d8:02:20:84:
43:27:a0:ff:c1:b2:77:22:5d:6f:ef:79:21:c4:61:
df:0e:5d:13:d1:92:28:88:c3:a4:4f:71:8d:44:35:
1a:47:43:49:a2:ed:ee:c4:4c:59:cc:09:ac:56:5f:
29:cd:bf:7a:e6:04:28:45:78:95:4a:bc:e3:f5:94:
f4:e4:bb:60:a4:b9:f0:0d:4a:33:7b:38:d0:f3:e6:
b5:92:4d:3b:77:5a:f2:4c:6b:6d:6c:76:52:e8:28:
23:a5:4a:af:de:f4:15:97:6d:a2:6c:77:16:22:c6:
e9:f7:bf:be:f3:a8:ae:a4:3a:c4:16:31:8e:99:35:
1b:63:cf:96:83:f3:4a:2e:86:99:5c:d8:2f:58:d1:
ec:00:66:bb:ab:69:02:47:79:5d:49:3e:3d:8a:5d:
de:93:f0:88:c4:90:d4:1d:b9:35:aa:38:0e:72:93:
ab:0d:89:3b:98:64:c7:dd:56:0c:d7:37:70:1a:ce:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:73:AD:47:97:AF:82:96:18:3C:D8:EB:DF:D0:9F:08:68:D9:8A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3233322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.232.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f0:b5:c1:e0:10:13:b1:d8:53:55:40:4b:be:cf:46:94:dc:
3e:99:76:63:c5:c8:89:4b:37:55:8c:46:a5:5c:94:3b:a6:e2:
0c:71:ce:57:68:6c:59:c1:8d:5b:9d:b3:3b:eb:ae:08:5f:61:
6f:24:d5:6c:e0:de:a6:f3:ad:33:07:06:19:b1:10:f8:c9:98:
9b:06:9c:df:04:aa:9e:f6:7f:bc:fa:03:e4:af:e3:17:90:b7:
c1:ee:57:69:c4:2c:e8:d3:98:a1:93:f6:6c:e8:ec:8b:35:e0:
46:a9:fa:50:e9:b5:b9:d3:25:f6:58:7c:a1:c0:79:91:47:dd:
a2:93:65:6f:1d:87:c9:7f:20:d3:e3:14:dc:63:b8:f6:e6:7e:
c5:80:36:1a:96:b3:fc:2f:8f:c0:3a:0e:25:27:63:a6:0a:92:
6c:bc:d2:da:9a:c6:db:bd:4e:13:4b:12:ef:49:31:9e:61:ea:
d7:9d:5f:bd:46:c2:69:e0:0a:78:48:12:71:40:90:da:32:03:
09:70:83:ff:6f:88:9e:90:57:6b:9e:fc:77:88:2b:f1:c0:3f:
ce:df:c7:dd:29:7e:bc:e2:21:0f:f7:aa:79:63:bd:03:fc:62:
00:6a:cb:57:ad:73:92:32:d1:ad:16:97:40:9f:ba:d1:49:9b:
a7:9c:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:03 2025 by rpki-client