Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132342e302f32342d3332203d3e203531313637.roa
File: 3139332e3137362e3132342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 1ebk1fvfONQ1cbudeyjHukAjKpSqVlkS5hVu3HDLhz8=
Subject key identifier: BC:DB:99:F9:47:17:85:43:2D:9E:94:DE:42:99:72:ED:05:65:96:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69E14C43F50B511A1BA0106EE10B434EC1125278
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132342e302f32342d3332203d3e203531313637.roa
Signing time: Thu 10 Jul 2025 04:46:50 +0000
ROA not before: Thu 10 Jul 2025 04:41:50 +0000
ROA not after: Thu 09 Jul 2026 04:46:50 +0000
asID: 51167
IP address blocks: 193.176.124.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e1:4c:43:f5:0b:51:1a:1b:a0:10:6e:e1:0b:43:4e:c1:12:52:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 04:41:50 2025 GMT
Not After : Jul 9 04:46:50 2026 GMT
Subject: CN=BCDB99F9471785432D9E94DE429972ED056596FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:55:73:e0:0e:75:13:a1:87:c8:a3:1d:ca:
03:ed:24:b3:b2:d6:6d:25:03:85:bf:54:df:e0:1c:
aa:6d:bf:47:e2:5e:85:c5:f4:85:ea:f4:ef:3a:b2:
da:ab:75:5a:4f:5d:3c:de:7c:80:bd:64:b0:c0:aa:
7b:d5:d1:62:ff:7e:a1:3f:7e:f9:84:7a:c6:c5:c1:
e9:c9:14:09:ca:35:0a:eb:1d:d8:e8:fb:97:43:3f:
59:b0:72:23:4a:43:20:01:6e:6e:2a:cd:75:d1:a4:
3e:c4:50:fe:2a:1d:db:c2:f0:fd:f1:9f:47:f0:15:
4d:81:5e:41:0f:c2:a8:d4:87:55:e7:72:42:2e:45:
f7:26:5c:04:9f:d1:d3:12:2e:0e:cf:35:58:75:3f:
8f:ae:2f:0f:77:13:78:8d:77:9b:f8:b7:a5:c3:a4:
54:29:8a:93:b9:1b:5f:ab:f0:f5:5b:6d:f6:7b:29:
69:3a:3a:b1:d3:0f:fb:58:58:d8:fa:bd:c7:87:ca:
dd:14:4a:0e:da:5e:4a:90:75:50:f0:ad:eb:68:b0:
1a:f9:08:d8:a0:b1:92:41:1e:db:87:a2:0c:91:e2:
88:2f:ec:39:f0:f9:39:70:ef:60:37:24:5e:b8:31:
4f:97:a4:40:44:17:fd:a8:ec:58:de:67:9d:ed:1c:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DB:99:F9:47:17:85:43:2D:9E:94:DE:42:99:72:ED:05:65:96:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3137362e3132342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ba:e3:74:d6:72:09:f0:fe:ee:50:cc:c5:31:64:87:bc:d8:
33:be:c4:0d:c3:02:bd:b7:c2:dd:57:f1:2a:8b:e1:98:c1:59:
b3:b5:b6:1f:41:bd:ae:96:3a:ea:44:a0:83:23:45:59:c8:a5:
ec:13:80:08:75:8d:fb:3b:a1:df:7e:4e:70:02:3d:4c:d1:e0:
f3:81:63:f5:3f:74:8f:f8:34:2e:d4:86:e1:82:ec:ca:f4:06:
18:ae:d2:ef:52:26:67:49:1e:ee:89:6b:ae:fc:5a:3b:73:39:
74:e6:ae:89:ea:3e:a9:2b:1f:5d:54:63:c4:df:ba:64:c6:c7:
40:5e:85:83:82:8d:ea:ee:51:f9:74:ce:0d:14:60:0d:89:37:
00:8f:25:7c:ff:d8:9a:da:a0:68:8d:a6:a7:b5:85:06:89:85:
76:43:7a:4b:5a:af:8f:2d:53:a5:96:f5:01:38:5e:5b:eb:e0:
c7:a8:c8:39:e4:c4:4a:0d:4b:e2:5f:24:27:d6:7c:5b:a0:2e:
cf:35:b2:4e:ec:17:75:7b:69:d6:ad:e5:98:35:ae:bb:4a:5c:
a3:85:df:fe:4d:6a:06:fe:1e:9e:0e:2b:34:db:04:07:29:9f:
d0:68:11:8c:1b:c6:2b:d2:54:c8:33:40:48:9d:cf:6a:aa:64:
8d:0d:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:15:58 2025 by rpki-client