Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa
File: 3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: OgDHTaR/KSeMcJIxrgut39lwo/bwuvtzPdgeWknUumE=
Subject key identifier: DE:28:D2:FC:FE:7A:17:42:17:54:0C:23:38:14:04:92:15:D5:CA:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 388AB8E6DCD806427660D4B3A88F80C3BFBF6439
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 03 Jul 2025 19:58:22 +0000
ROA not before: Thu 03 Jul 2025 19:53:22 +0000
ROA not after: Thu 02 Jul 2026 19:58:22 +0000
asID: 212238
IP address blocks: 176.53.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8a:b8:e6:dc:d8:06:42:76:60:d4:b3:a8:8f:80:c3:bf:bf:64:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 19:53:22 2025 GMT
Not After : Jul 2 19:58:22 2026 GMT
Subject: CN=DE28D2FCFE7A174217540C233814049215D5CA76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:d0:45:23:ea:0e:95:f5:70:2b:02:5b:ce:
2d:c8:d5:11:c5:a9:2c:4c:85:55:06:de:b7:79:3a:
27:e2:95:52:dc:97:5c:97:55:ad:20:7b:f9:46:81:
c2:2b:0a:fa:d7:fc:f0:74:66:25:dc:79:08:55:e9:
5b:69:66:8b:69:00:48:1f:3f:61:f5:9c:3e:ad:f4:
ab:03:c3:6a:ed:a2:fc:e0:9b:60:99:56:e8:22:a8:
04:d7:25:67:45:4f:87:a4:24:70:97:de:9d:b7:7f:
d0:bb:e5:24:d3:c2:3e:31:f8:28:ae:fe:05:6d:33:
a0:47:0f:e7:38:d3:64:c7:80:fe:aa:08:33:bf:6f:
3f:7f:ed:9c:91:66:21:2d:16:58:34:cd:ad:05:d7:
f3:99:8f:95:46:cc:4e:92:e0:fc:76:74:71:b1:c6:
6d:b0:32:aa:01:e0:59:86:93:37:44:ae:60:97:4b:
1b:bc:9d:c6:c8:22:78:84:01:b1:34:1a:d2:b7:8c:
60:b9:e9:e9:69:5b:7c:c7:71:9e:81:46:5e:37:84:
f8:6a:4f:03:58:fb:72:15:b4:e1:21:f5:63:16:7b:
fd:21:42:d8:d8:02:58:f2:fc:81:57:03:03:ad:b1:
63:fc:86:ba:ed:0a:8b:f1:bd:36:ad:71:93:a4:c9:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:28:D2:FC:FE:7A:17:42:17:54:0C:23:38:14:04:92:15:D5:CA:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.176.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3f:a6:11:8e:37:63:65:0f:aa:72:83:8b:17:01:48:0d:b2:
77:3d:e7:d4:e5:c8:3f:4f:fd:da:38:e6:2b:0a:8c:82:4d:fe:
21:17:80:55:50:74:89:9c:9d:96:e7:19:79:1e:6d:ff:c9:28:
73:26:95:5c:03:89:22:84:25:a7:d2:84:54:b3:2b:0b:45:be:
4c:6f:85:b6:bc:f1:21:3d:73:b6:87:cc:48:27:e9:05:ba:93:
88:d9:81:19:0c:ac:3c:68:99:4e:cc:18:6a:73:0d:87:4d:55:
42:92:48:7d:4e:83:0e:00:6c:bd:ed:29:71:8d:ec:d6:89:ab:
ac:1f:1a:0c:48:57:7a:ad:dd:8b:ee:7a:55:04:41:32:e3:8c:
08:51:a5:98:66:cf:61:f4:db:87:4e:68:c9:95:fd:5b:2b:7c:
d9:45:ce:0f:35:86:6a:47:45:01:36:2f:91:55:69:8b:89:4f:
4d:5c:24:7e:48:37:a5:00:e1:a7:8e:54:82:a7:d7:ec:6e:af:
24:80:0a:0a:ed:63:be:c1:6e:ab:fa:08:9c:87:6f:c0:91:b0:
b8:ae:61:82:8a:a0:5c:df:34:5d:7f:da:50:f5:f9:b8:c9:bf:
f4:0a:a7:c0:f7:39:6b:28:02:4b:b3:a3:5d:54:e4:46:73:49:
78:6d:88:ca
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUOIq45tzYBkJ2YNSzqI+Aw7+/ZDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MDMxOTUzMjJaFw0yNjA3MDIxOTU4MjJaMDMxMTAvBgNV
BAMTKERFMjhEMkZDRkU3QTE3NDIxNzU0MEMyMzM4MTQwNDkyMTVENUNBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZNBFI+oOlfVwKwJbzi3I1RHF
qSxMhVUG3rd5OifilVLcl1yXVa0ge/lGgcIrCvrX/PB0ZiXceQhV6VtpZotpAEgf
P2H1nD6t9KsDw2rtovzgm2CZVugiqATXJWdFT4ekJHCX3p23f9C75STTwj4x+Ciu
/gVtM6BHD+c402THgP6qCDO/bz9/7ZyRZiEtFlg0za0F1/OZj5VGzE6S4Px2dHGx
xm2wMqoB4FmGkzdErmCXSxu8ncbIIniEAbE0GtK3jGC56elpW3zHcZ6BRl43hPhq
TwNY+3IVtOEh9WMWe/0hQtjYAljy/IFXAwOtsWP8hrrtCovxvTatcZOkyRWrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU3ijS/P56F0IXVAwjOBQEkhXVynYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNzM2MmUzNTMzMmUzMTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACwNbAwDQYJKoZIhvcNAQELBQADggEBACE/phGON2NlD6pyg4sXAUgNsnc959Tl
yD9P/do45isKjIJN/iEXgFVQdImcnZbnGXkebf/JKHMmlVwDiSKEJafShFSzKwtF
vkxvhba88SE9c7aHzEgn6QW6k4jZgRkMrDxomU7MGGpzDYdNVUKSSH1Ogw4AbL3t
KXGN7NaJq6wfGgxIV3qt3YvuelUEQTLjjAhRpZhmz2H024dOaMmV/VsrfNlFzg81
hmpHRQE2L5FVaYuJT01cJH5IN6UA4aeOVIKn1+xurySACgrtY77Bbqv6CJyHb8CR
sLiuYYKKoFzfNF1/2lD1+bjJv/QKp8D3OWsoAkuzo11U5EZzSXhtiMo=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:09 2025 by rpki-client