Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3234332e3137372e302f32342d3234203d3e20323033333830.roa
File: 39312e3234332e3137372e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: xJSUkAkHZg1gSmtwNL8kn0/thUAvmdMOER8EDoSot98=
Subject key identifier: C7:C5:64:87:91:98:F6:6A:DA:EF:E0:4B:E4:F7:B9:2A:85:82:84:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5231C40B668D441C5BDCE7F0347384EED5E8E0B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3234332e3137372e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 20 Jun 2025 09:46:41 +0000
ROA not before: Fri 20 Jun 2025 09:41:41 +0000
ROA not after: Fri 19 Jun 2026 09:46:41 +0000
asID: 203380
IP address blocks: 91.243.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:31:c4:0b:66:8d:44:1c:5b:dc:e7:f0:34:73:84:ee:d5:e8:e0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 09:41:41 2025 GMT
Not After : Jun 19 09:46:41 2026 GMT
Subject: CN=C7C564879198F66ADAEFE04BE4F7B92A8582843E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:0c:56:70:76:ae:64:30:41:5d:07:c4:2b:
8c:e9:fd:30:48:83:71:db:71:28:7f:f9:85:db:c6:
bb:79:48:f6:d4:9f:4c:12:d4:fe:57:1a:50:13:42:
89:66:b1:09:ea:71:ca:de:70:3b:2d:ed:f4:47:19:
e1:63:71:b2:2a:11:57:37:88:79:a0:0e:fd:6e:06:
98:03:40:7f:d3:60:ca:9e:ab:08:2f:65:45:ea:cd:
ca:1f:16:68:b5:d0:41:88:94:51:07:39:37:64:14:
cb:80:bb:44:3a:cc:80:9e:21:2a:03:fa:aa:ed:64:
55:de:92:3e:fd:02:ab:04:96:a2:76:b2:41:4f:6c:
d7:cf:44:9c:2d:6e:48:d6:7e:57:b2:75:90:55:43:
4f:b8:bb:b5:34:e5:94:b7:02:c9:b7:ba:1f:2b:0b:
0d:2b:0a:e0:50:e4:51:5c:c6:a5:94:5a:de:82:ed:
8e:90:45:14:e3:02:7a:9a:30:5d:51:b9:0e:15:7f:
72:2b:58:29:92:56:60:19:f8:ac:34:5d:27:13:e7:
1a:28:a6:d5:06:8d:fb:85:76:ec:e2:f3:dc:6e:88:
52:ce:f0:cd:14:f6:94:db:a9:ba:8d:c1:68:d8:40:
af:97:24:85:d8:65:a8:93:0d:a2:60:e8:6a:a3:2a:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C5:64:87:91:98:F6:6A:DA:EF:E0:4B:E4:F7:B9:2A:85:82:84:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3234332e3137372e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.177.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3c:66:61:70:08:17:e4:8a:de:2e:5e:fc:70:a4:0e:6f:f5:
ea:74:d9:a8:e0:ec:24:6e:02:66:35:06:80:34:81:93:3f:9b:
41:fe:81:a2:05:31:08:38:82:a8:30:e0:a6:b7:a3:ac:0a:2b:
a2:fb:4d:81:b7:b9:b2:b8:73:be:82:c2:07:5e:c8:48:a3:f6:
95:00:8c:f6:1e:5f:ba:76:79:21:be:ea:51:3c:97:ab:bc:74:
f0:31:60:54:66:44:fd:6a:1b:3e:ca:25:df:b8:f1:a9:3d:ef:
ee:c9:b6:05:3b:74:c4:ae:02:17:9e:0a:8e:cd:fc:c7:b7:9d:
af:04:9f:ef:db:73:9f:1c:08:e0:e7:1f:d1:57:8c:62:cc:79:
86:a9:6f:e7:53:22:3d:e8:5d:e4:5c:e0:72:17:a5:1b:7c:b4:
a0:f0:72:a6:7f:21:53:bd:bb:30:39:d1:76:5a:62:65:25:74:
c2:9d:8e:3c:2c:db:41:eb:53:a7:91:b9:49:eb:43:b6:a6:83:
c3:7d:2d:80:dc:13:b7:20:09:31:04:2f:fd:80:9e:5f:77:c4:
3b:05:5f:59:d5:2c:1a:c0:c6:be:88:f8:ad:21:83:97:71:cb:
18:b0:df:56:47:96:f1:17:44:4f:eb:94:d1:95:58:96:4e:8f:
b9:f7:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:56 2025 by rpki-client