Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e33302e302f32342d3234203d3e20313336373837.roa
File: 38362e36322e33302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: bu19oC3AB1xXfH5r2a+9bKY1xawTIdk9883z1SjfH9I=
Subject key identifier: AF:03:8E:56:63:E8:2F:34:F3:CD:6F:6D:71:4F:B6:8A:76:8E:63:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73E5E0ED59720DC8F587861E34596EC9CB2F68DA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e33302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 15 Oct 2025 19:47:52 +0000
ROA not before: Wed 15 Oct 2025 19:42:52 +0000
ROA not after: Wed 14 Oct 2026 19:47:52 +0000
asID: 136787
IP address blocks: 86.62.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e5:e0:ed:59:72:0d:c8:f5:87:86:1e:34:59:6e:c9:cb:2f:68:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 15 19:42:52 2025 GMT
Not After : Oct 14 19:47:52 2026 GMT
Subject: CN=AF038E5663E82F34F3CD6F6D714FB68A768E6360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:db:bd:97:65:61:56:5d:0a:c4:7a:d7:71:
7d:47:0d:3b:de:44:2f:73:b0:5c:19:b5:05:9c:9f:
3d:78:7e:ac:31:e8:4c:70:34:42:16:60:2c:cd:c5:
46:c6:b3:6d:69:7f:73:9c:1d:ba:ce:f9:3b:65:1d:
56:60:50:a6:b3:9a:aa:da:83:db:c6:68:89:c2:9f:
3a:6e:aa:2e:8a:1b:23:d6:b6:d7:0b:2f:e1:c4:36:
0c:84:2e:9d:18:ab:e9:65:7f:c8:04:6a:45:a0:79:
77:08:c3:41:26:ae:48:c0:45:ac:7b:a5:98:1e:02:
ef:2f:a1:12:ca:0a:cd:ed:46:09:7d:d4:9f:8b:07:
de:1f:c0:c7:a0:03:95:2f:c6:e4:5b:e8:1d:74:6c:
20:2f:89:5d:b0:4d:45:3c:81:26:b0:2d:d7:cd:ab:
78:82:1b:b1:46:d7:ec:18:56:89:dc:4d:ef:98:51:
04:ca:07:91:f7:14:8f:ff:e4:bc:42:ed:fe:09:43:
58:0e:ca:10:76:9e:ba:c0:fb:2d:63:42:74:4e:7d:
30:97:8f:af:ea:df:5e:e8:0c:bb:a4:39:b0:62:52:
12:f0:e2:c9:b5:dc:d9:06:da:32:bb:06:04:f4:57:
2b:0d:d6:2e:64:45:eb:86:d8:64:04:44:14:a4:2a:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:8E:56:63:E8:2F:34:F3:CD:6F:6D:71:4F:B6:8A:76:8E:63:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e33302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:45:d4:fd:87:15:6d:d7:c3:62:b2:3e:8c:cb:47:c6:51:a0:
6f:34:9e:86:c1:65:24:3f:ac:1f:fe:59:4f:4a:d7:10:e6:ff:
32:38:56:f8:e6:a7:18:f8:62:b5:53:cd:f2:f4:27:85:a6:b2:
d3:22:0a:4f:37:ed:af:62:50:4e:f4:78:c4:36:7e:87:8f:ca:
65:d5:14:f7:eb:a0:b2:b4:7d:3e:66:fe:88:44:bd:94:38:35:
a4:2a:bc:fc:03:74:1c:45:63:ed:41:41:11:11:de:b3:30:3e:
af:9a:b2:29:48:25:b2:17:a7:e2:12:13:4c:45:fc:4f:13:67:
5c:ab:58:6d:6c:5f:ba:5b:3c:ed:ea:94:08:19:0b:b5:e0:d4:
dd:4f:0d:64:49:97:5e:49:61:eb:c8:a8:9d:80:bc:3c:36:00:
95:92:a4:33:d8:ec:be:71:be:70:66:21:d3:ed:0e:cd:9b:e2:
9b:c0:1a:8f:2b:72:83:f8:d1:ba:66:b7:a7:18:ee:87:21:bc:
7c:0e:32:71:73:da:3a:08:68:42:e2:63:65:51:87:3c:91:fb:
5c:24:42:0c:a6:9c:f1:6e:49:54:44:63:3b:66:2c:95:b2:a1:
55:2c:92:c5:34:21:f8:a8:3a:8c:bd:1b:da:36:7f:b2:2c:d2:
fd:17:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:27 2025 by rpki-client