Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137362e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3137362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: +UI64bdu0Uz4wN5QQGuxoM41I4aKtOftG1ninacA8H8=
Subject key identifier: B5:19:4E:CB:9A:C4:6C:E3:65:49:6D:27:90:68:05:B3:55:45:AC:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 217555C8B71DDA4EA9CDB79B4A0CF146E4876DCF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137362e302f32322d3234203d3e203437353833.roa
Signing time: Mon 14 Jul 2025 17:46:51 +0000
ROA not before: Mon 14 Jul 2025 17:41:51 +0000
ROA not after: Mon 13 Jul 2026 17:46:51 +0000
asID: 47583
IP address blocks: 193.203.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:75:55:c8:b7:1d:da:4e:a9:cd:b7:9b:4a:0c:f1:46:e4:87:6d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 14 17:41:51 2025 GMT
Not After : Jul 13 17:46:51 2026 GMT
Subject: CN=B5194ECB9AC46CE365496D27906805B35545AC4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:57:fe:d4:5b:65:c4:5c:96:4d:96:86:b8:d4:
41:84:48:f0:2a:64:a9:b3:73:f3:e4:1d:4b:33:b5:
92:38:ee:5e:19:d7:57:d7:a0:7e:da:91:b2:0c:51:
de:34:be:e0:c0:df:f8:5f:b0:f1:b2:41:cf:25:08:
38:9e:b7:dc:20:8f:d9:fc:c1:db:59:25:ec:a0:f4:
e8:4d:68:4d:d9:3c:f0:79:27:f2:6f:ad:73:1e:88:
d0:bb:20:42:72:81:f2:b2:21:29:c2:66:a3:af:5a:
07:b3:bc:29:9b:bc:7b:12:95:b1:07:fb:b6:cf:af:
a0:b5:8f:49:f5:b3:b8:5a:c2:47:73:b0:c4:09:67:
5c:27:f3:93:ac:fe:2e:10:a8:10:18:be:ac:7d:08:
f4:c4:62:91:ca:98:d2:43:cc:2a:12:e6:aa:b8:95:
cf:48:d9:36:68:16:6c:6b:6a:e8:2e:1e:22:02:f9:
98:29:f2:3e:c9:1b:46:d9:15:85:c9:c2:cf:72:c9:
b6:1e:3e:a7:0a:5f:b8:16:7b:f3:cd:f3:7b:fb:45:
26:52:1f:65:4e:7e:ee:92:bc:e9:a0:aa:0a:85:03:
7a:fc:97:73:5d:0d:c5:de:b4:91:7a:9e:28:ac:02:
e8:dd:34:27:45:4e:59:3c:b3:37:72:97:0a:af:2c:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:19:4E:CB:9A:C4:6C:E3:65:49:6D:27:90:68:05:B3:55:45:AC:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3137362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:57:ee:39:fe:3c:43:65:78:e7:55:05:5c:d3:fa:ad:13:e9:
a6:4a:ef:f7:66:9b:88:66:61:d9:e1:82:a7:b8:36:16:ee:0c:
c2:91:79:1e:2f:9c:87:59:d4:a5:c8:d9:56:43:af:81:0d:fe:
e2:81:77:e0:f0:96:4e:2c:56:26:84:38:ef:c6:70:e9:b5:1f:
f2:16:94:47:18:6b:41:9a:97:12:41:53:86:82:ce:2a:06:f4:
54:70:74:49:06:af:cc:7c:c5:c8:28:95:4c:a2:8b:18:0d:b5:
57:87:9d:e1:2c:5d:ae:e6:83:8a:af:bb:df:21:0b:db:59:72:
c2:24:ce:d5:69:e6:d1:d5:72:0b:b4:65:37:95:49:18:a4:4f:
45:15:39:12:ad:13:3a:ac:f3:58:57:06:04:c9:0e:12:41:69:
6b:9a:e1:97:b2:87:bd:70:93:a5:2f:11:f0:b7:73:a8:1f:13:
5b:ee:db:3f:05:7a:d8:4d:27:9a:71:d3:62:ba:3b:db:07:e0:
af:d8:24:66:3e:66:58:2e:58:3a:bb:62:80:11:4a:65:91:2c:
3b:e7:56:4e:4d:f1:a1:e5:88:cf:b2:6c:cb:de:40:cf:32:4c:
00:c6:14:18:71:ac:53:fc:4d:16:80:bc:50:bd:4e:65:9c:47:
6f:9b:84:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:20:31 2025 by rpki-client