Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa
File: 3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: a28QLID1q29sFX9CPFFCmDJ8TPcRTCQHOFFF+jt/nsE=
Subject key identifier: F3:1D:D4:A1:37:A8:D2:7C:C6:47:2A:A1:BF:B8:A8:4E:86:35:23:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2CF1DB992104A9061685F81457F57D8E42BA1681
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Jun 2025 21:30:17 +0000
ROA not before: Mon 30 Jun 2025 21:25:17 +0000
ROA not after: Mon 29 Jun 2026 21:30:17 +0000
asID: 212238
IP address blocks: 178.132.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f1:db:99:21:04:a9:06:16:85:f8:14:57:f5:7d:8e:42:ba:16:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 21:25:17 2025 GMT
Not After : Jun 29 21:30:17 2026 GMT
Subject: CN=F31DD4A137A8D27CC6472AA1BFB8A84E863523A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:01:0b:52:f1:4b:d6:ff:92:19:cc:4d:70:
9d:36:36:c4:34:42:02:b9:65:d3:16:91:26:24:84:
81:87:c6:a0:06:33:c8:56:33:51:dd:ec:7d:78:fe:
a1:6f:a9:d2:57:15:bb:bf:40:2d:21:cd:58:9e:bb:
63:ab:d7:6e:b8:9e:f3:eb:19:3e:eb:0f:bf:31:42:
d3:7f:06:b6:2b:a9:c6:17:73:78:b7:3f:16:5e:cb:
4e:41:a2:91:82:d7:1a:7e:a9:dd:5b:ae:8e:c2:4b:
5c:56:97:c2:1d:31:6f:71:39:3c:ea:ae:09:ec:79:
c0:06:5b:e6:93:47:99:02:77:cf:31:19:10:1f:2e:
27:d4:64:04:49:72:20:0f:81:ae:2d:0e:92:b3:26:
be:61:c3:f0:33:b4:69:1a:0a:1e:ec:15:27:a2:80:
0a:5c:5e:ee:d4:50:87:db:b6:ee:6f:ae:61:22:9a:
82:b1:17:b4:75:ef:1a:89:37:0a:8a:8e:09:37:5f:
8d:ed:17:89:fe:b0:65:d3:df:cc:74:d9:90:a2:d3:
a3:c9:ad:e4:b9:de:b2:72:6b:9d:7a:68:a6:c6:3f:
d8:48:bc:28:a5:f4:8a:d7:90:13:60:c7:0c:1a:c5:
86:87:46:d7:33:64:a4:0e:27:34:1c:98:0c:83:10:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:D4:A1:37:A8:D2:7C:C6:47:2A:A1:BF:B8:A8:4E:86:35:23:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.109.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:eb:3b:d2:e0:68:ff:bb:cb:d6:1f:1a:9a:0c:32:1c:f3:3e:
54:6f:52:07:24:ec:50:51:a0:59:9d:b6:13:1e:76:2f:62:5b:
37:71:4d:d5:4c:61:ae:56:67:30:e3:92:9f:62:42:19:64:18:
b0:8f:ff:40:5b:ea:f7:2a:e3:30:d3:b1:c0:77:ea:dd:21:64:
ca:f1:1d:be:4f:43:9e:c5:24:0c:e6:87:e4:52:b3:5b:32:c5:
a1:14:c7:18:2f:e0:e1:7b:0a:56:d4:f2:b3:6b:a1:eb:76:b5:
ab:0b:9a:de:7d:7d:0d:99:cc:a6:c6:08:a4:05:e5:f9:c3:0e:
ad:0c:59:d1:c1:6f:80:c0:3d:29:b7:8e:52:3a:1b:fb:d3:13:
55:b8:0d:e4:d3:43:c3:f6:a6:28:20:cb:a2:0c:c7:c2:99:74:
40:2a:e7:22:1b:54:ec:8d:2b:ce:c9:1b:59:37:52:64:a2:93:
90:29:7f:37:47:a3:5f:82:50:f2:21:d1:7e:2e:10:0d:64:49:
e7:b8:02:19:dd:27:b2:9e:36:dd:fd:d6:0f:7f:2d:2b:e3:f5:
9e:9c:ce:7d:8f:a3:3d:7f:9b:bc:3a:b3:cc:2f:cf:b6:1e:23:
f7:9e:22:46:ca:f3:24:c4:ba:8f:8b:a4:61:47:ea:4e:6a:aa:
97:7d:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:03 2025 by rpki-client