Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Z83luUAhkxJEHdUrCpJe5omTIOmZgrAV1u32yT43lv0=
Subject key identifier: AC:11:7F:D1:EE:71:6F:57:87:6F:9C:1E:05:32:C5:98:39:58:00:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A9DF29097C841C20EB14EEAC962512BB974191A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 04 Jul 2025 11:46:48 +0000
ROA not before: Fri 04 Jul 2025 11:41:48 +0000
ROA not after: Fri 03 Jul 2026 11:46:48 +0000
asID: 47583
IP address blocks: 193.203.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9d:f2:90:97:c8:41:c2:0e:b1:4e:ea:c9:62:51:2b:b9:74:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 4 11:41:48 2025 GMT
Not After : Jul 3 11:46:48 2026 GMT
Subject: CN=AC117FD1EE716F57876F9C1E0532C5983958007F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:25:43:53:5e:b5:85:74:c9:25:7d:46:43:
04:66:a7:fc:15:f7:64:86:ed:77:89:a1:b4:31:ec:
e9:f7:42:57:e9:b2:57:4f:ed:2d:86:3a:1c:42:00:
0f:64:3e:9c:86:66:b5:fe:a0:38:b7:ee:80:2f:e9:
c4:03:52:d1:68:60:29:b1:04:8d:a3:92:71:9a:2e:
57:00:58:53:7c:93:95:9b:66:a4:43:a5:94:85:30:
7c:c4:9b:e5:fd:81:74:6b:7e:2d:80:ce:c0:7e:15:
4e:c4:e0:1f:b9:24:2b:bf:64:64:32:54:ea:4a:d2:
8e:ed:a2:e5:c7:3f:a9:b7:c4:46:67:77:8b:17:18:
cb:b0:0a:13:27:d8:a7:c2:b4:fa:a6:13:db:fd:78:
90:4a:78:2f:06:da:55:55:5e:f5:80:c5:d0:79:bd:
9b:c7:1b:79:0a:35:aa:21:13:ba:d5:ff:17:b9:39:
50:fc:56:7c:93:1e:bc:83:9c:6d:f1:16:9f:11:9f:
ee:81:0c:4b:24:fc:78:48:58:72:8b:d2:50:32:de:
21:c9:7e:c7:5e:16:bf:ad:7f:9f:5b:d1:7b:1e:e5:
92:58:09:78:34:df:f9:97:7c:f4:6b:14:d2:96:d9:
3c:af:df:7c:10:7b:db:f3:a0:e1:02:ae:49:1e:10:
36:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:11:7F:D1:EE:71:6F:57:87:6F:9C:1E:05:32:C5:98:39:58:00:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:67:20:1f:9f:9f:69:00:3d:8b:12:71:17:ce:58:e7:03:c3:
1f:14:73:cf:48:44:8c:3e:25:ed:66:ab:d1:1c:79:9f:c5:a8:
df:b7:97:68:79:9d:8b:ec:9f:f5:0a:4a:2e:af:75:c8:61:b0:
8e:c6:af:e3:7f:ba:3b:7a:60:3d:88:4e:38:30:fb:e3:ae:38:
15:40:8e:b3:0d:1b:e9:d6:e7:73:4f:d5:f3:c2:33:c6:66:f5:
59:25:48:6a:ed:6c:79:f0:a3:a0:cd:d2:67:f7:9d:e7:d8:dc:
f3:7e:e2:4d:84:bb:5d:f2:2b:38:15:1e:e4:50:f4:27:10:8d:
9b:6a:4f:fa:6b:c1:1c:55:e9:59:c7:3a:a1:d5:a5:be:7a:76:
1b:18:45:a1:3d:66:27:93:18:fc:26:0b:32:3d:c1:f9:3d:ea:
6a:81:93:7f:ed:d0:7d:ea:0b:3f:f2:95:41:3a:29:e7:57:18:
54:1f:39:12:b7:f8:9c:fe:a9:a9:2d:c4:5d:0a:38:e9:eb:0e:
4e:61:de:c8:fd:dc:a5:16:96:58:bb:36:30:27:c4:d5:25:ad:
a6:07:0b:e2:74:7c:c5:9b:b9:9e:78:bc:11:c0:b4:3c:8d:83:
b0:cc:ac:29:6f:84:9e:38:71:84:bc:92:fe:4a:80:2b:3e:89:
b3:01:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:17:29 2025 by rpki-client