Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138382e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3138382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: FeO/FIAudE5Pcciu99+e3qITYxDDsbtOcOhUVKdvcWo=
Subject key identifier: 0C:A3:2E:9D:2A:AB:41:71:44:0E:13:4F:EE:2A:D8:82:6D:AA:FA:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6AD3162F4D7AC8A39C4C04264E7D6BAC8D4084B1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 18 Jul 2025 08:46:54 +0000
ROA not before: Fri 18 Jul 2025 08:41:54 +0000
ROA not after: Fri 17 Jul 2026 08:46:54 +0000
asID: 47583
IP address blocks: 193.203.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d3:16:2f:4d:7a:c8:a3:9c:4c:04:26:4e:7d:6b:ac:8d:40:84:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 18 08:41:54 2025 GMT
Not After : Jul 17 08:46:54 2026 GMT
Subject: CN=0CA32E9D2AAB4171440E134FEE2AD8826DAAFA29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:86:d6:60:20:f5:77:2d:13:39:1a:f7:e9:
f0:58:e0:9d:4f:56:3e:1e:c2:36:14:49:7f:99:b1:
6e:b2:fe:05:1e:8e:93:15:05:fb:95:bc:4a:3b:18:
61:8a:3d:66:b7:8c:33:ee:85:fd:ba:9b:45:95:03:
c3:d5:17:3a:d5:96:55:bb:cb:89:87:3f:b3:05:6c:
07:2c:f7:5b:61:00:d5:e4:50:56:be:6f:24:2c:6b:
ee:e7:4a:36:99:c2:8c:f5:84:9a:42:87:3a:5c:e7:
b2:f1:1f:24:6f:2e:3c:dd:70:94:fc:0f:d5:3d:d5:
85:be:89:a8:3f:cc:06:da:e9:cb:6b:ef:3c:66:e6:
ce:dc:cd:28:ca:c6:84:09:13:58:e9:2f:d6:0b:84:
f8:c3:ab:6a:54:5d:e5:89:da:4a:2b:e4:a3:c7:2d:
f4:12:a1:b0:16:ba:37:06:0e:2a:b3:51:b2:a5:2d:
da:06:bf:28:91:ba:3b:a6:41:af:f8:ae:bd:f4:b1:
ec:d5:50:c7:8f:00:98:d9:c7:d0:6e:9d:2e:e4:3b:
33:90:79:f2:33:c4:26:17:9b:79:ae:d6:12:95:f7:
07:75:31:68:d4:79:6e:ae:03:0e:d1:6f:7e:32:c4:
76:3b:a9:0b:45:3d:71:79:fc:c1:e7:9d:b0:24:53:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:2E:9D:2A:AB:41:71:44:0E:13:4F:EE:2A:D8:82:6D:AA:FA:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3138382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.188.0/22
Signature Algorithm: sha256WithRSAEncryption
61:75:6f:c0:28:e0:b8:d6:46:ec:1c:cb:98:17:c8:14:7f:91:
ab:90:18:c6:39:22:57:05:93:1b:b8:fb:7a:10:5f:76:5a:74:
65:3a:1d:4c:ef:5e:4c:40:33:e5:c7:f6:d5:07:3f:5b:0a:ee:
dd:64:af:67:48:1f:3d:7e:9b:00:e7:73:b1:13:e8:cd:a3:b3:
b9:c3:aa:c8:90:9e:21:c7:d6:ff:fd:21:85:9f:62:38:48:22:
40:3e:9d:ba:7a:65:09:ec:3c:68:88:94:15:c5:71:a5:17:ed:
d8:85:06:5e:2b:5f:ad:c6:fe:3d:57:5b:b6:87:2b:40:af:4c:
db:ca:4f:b9:0d:6c:65:f9:70:9f:12:55:6d:fc:e9:a0:05:40:
77:79:34:6e:0b:cf:15:75:b2:ea:a5:15:60:6a:c0:a3:a2:f6:
b9:4a:ef:d2:d6:f1:90:dc:e9:52:a4:f0:f3:34:4b:0d:57:f6:
18:24:23:35:49:1f:dd:3a:cd:ae:00:21:bc:a8:45:78:a4:6c:
76:3f:ec:c7:47:4e:a8:ff:45:74:c4:c9:09:e0:bb:ee:92:0c:
98:1b:b3:e6:b0:f5:b4:60:76:37:65:98:98:cb:d0:ca:52:59:
6a:0f:9a:d5:59:19:d7:3e:a2:dc:ef:b8:c5:37:f1:ca:6f:06:
63:48:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:22:15 2025 by rpki-client