Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa
File: 39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: G9cTnCurSKCXIRpvrdJuJP8/n0YneF5B3X6QrIxOxwk=
Subject key identifier: 42:99:8A:90:04:1C:31:0A:45:AB:0B:D3:27:4B:0E:1F:DD:0A:B3:5B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24A4787B349C95BD0E08D189B5FA82BC0F079DC5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 23 Jun 2025 11:36:38 +0000
ROA not before: Mon 23 Jun 2025 11:31:38 +0000
ROA not after: Mon 22 Jun 2026 11:36:38 +0000
asID: 212238
IP address blocks: 95.214.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a4:78:7b:34:9c:95:bd:0e:08:d1:89:b5:fa:82:bc:0f:07:9d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 23 11:31:38 2025 GMT
Not After : Jun 22 11:36:38 2026 GMT
Subject: CN=42998A90041C310A45AB0BD3274B0E1FDD0AB35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:c6:96:31:26:41:0a:c5:d2:88:cd:c8:da:
c6:4a:4a:a5:54:90:9b:74:20:3d:a8:52:9a:74:e8:
61:e2:8c:ac:62:01:c0:dc:8f:7e:07:2d:87:68:66:
dc:82:29:fa:bd:55:7e:af:b1:cc:7b:2c:93:d9:01:
af:a3:2a:05:58:9b:f9:ff:e9:9f:63:10:d1:64:bc:
fa:56:ca:f5:0e:aa:30:0f:87:44:2e:96:b0:aa:27:
9a:68:4d:1e:0f:c0:7a:32:d9:a3:a7:fc:45:ca:c8:
c5:ee:6a:eb:98:af:1e:84:39:ef:85:85:11:27:65:
af:55:b0:54:91:40:a9:34:f7:7c:da:c1:d6:27:f0:
14:44:e0:d2:b9:51:df:f3:38:31:58:a1:a1:96:44:
6e:eb:ff:aa:91:c7:86:f3:10:2f:0c:59:47:6f:ff:
00:9d:83:69:c0:98:e7:09:04:81:a8:65:30:a5:bf:
00:7c:2f:9c:d1:ec:c7:67:c2:ff:a2:85:1e:05:8d:
9d:71:a0:12:91:39:0c:41:56:5b:38:81:f2:32:f0:
40:1d:64:b8:9b:60:d0:71:88:8f:6b:2f:f7:5d:f9:
aa:17:a6:60:e3:37:22:cb:b1:d9:09:c3:55:bf:d1:
51:9f:2b:b6:64:21:d3:3a:08:e8:83:97:1e:bc:df:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:99:8A:90:04:1C:31:0A:45:AB:0B:D3:27:4B:0E:1F:DD:0A:B3:5B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:11:30:d8:d7:a0:4d:56:5c:5f:ac:50:ea:00:81:73:8d:58:
6e:40:69:33:43:52:c9:71:8b:9d:88:e3:77:a3:e3:cd:08:4a:
38:d2:d1:b2:00:d1:15:e3:9e:8c:9d:3f:05:c1:1f:2a:66:9c:
d9:c4:0a:90:33:f0:f8:e0:ac:2d:29:a4:86:8c:c0:78:78:9e:
84:4d:2a:dd:db:b3:72:79:83:b2:56:de:3d:d1:b9:12:07:62:
fd:ca:b2:4a:d6:a9:82:74:be:3e:48:31:e8:98:a3:ed:aa:35:
1a:cc:7c:d5:d1:03:f9:d1:c3:6c:fa:3d:07:6c:39:38:cc:df:
4b:4e:ff:43:ab:48:7f:85:68:7a:25:aa:61:36:0b:fd:21:da:
a9:c8:d1:51:75:c4:fc:33:b0:3b:a6:a3:d8:7f:e5:ec:54:ba:
61:ce:f7:b7:2f:bc:78:77:bd:29:0f:57:92:80:fe:ea:cd:dc:
93:5c:dd:d3:8e:a2:c4:2f:0b:4b:63:ba:ff:d3:7c:1b:c8:96:
fe:70:dc:78:b9:1e:75:ae:7e:ff:48:49:38:dc:c4:e6:bf:55:
8f:b1:b0:d1:73:61:f6:d4:1b:a5:d1:3b:ba:69:a3:4d:93:ea:
8a:55:8d:d1:ec:7c:00:9c:55:57:4a:eb:e9:88:9f:2d:68:17:
96:c1:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:37:22 2025 by rpki-client