Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e2039333034.roa
File: 3139342e3139352e39342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: WLHNm79OpWvTY5i+Yipci0rg/IDws9eRW1nhacwgU5U=
Subject key identifier: 07:47:EF:DC:FF:AA:F4:19:24:A2:D0:22:81:A8:B8:CC:71:E9:40:75
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 587718B240F43B667418781FDBE86B349603BA8F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e2039333034.roa
Signing time: Thu 03 Jul 2025 20:20:44 +0000
ROA not before: Thu 03 Jul 2025 20:15:44 +0000
ROA not after: Thu 02 Jul 2026 20:20:44 +0000
asID: 9304
IP address blocks: 194.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:77:18:b2:40:f4:3b:66:74:18:78:1f:db:e8:6b:34:96:03:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 20:15:44 2025 GMT
Not After : Jul 2 20:20:44 2026 GMT
Subject: CN=0747EFDCFFAAF41924A2D02281A8B8CC71E94075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:6c:5c:6b:a9:b5:7e:d5:37:b1:cd:dc:f6:
b8:bc:31:08:06:dd:19:93:28:6b:fe:d5:68:7a:dc:
d8:94:b3:87:93:81:cf:81:00:44:b7:d9:43:c5:6f:
dc:50:0a:99:c7:88:dd:1c:fc:11:a7:21:3e:9c:94:
21:68:e5:59:51:5c:aa:28:6c:70:0c:d5:6a:da:68:
ba:3b:a7:8a:ef:d3:35:ad:10:2c:b0:02:0d:42:be:
32:41:24:f3:b3:95:77:7a:b8:8d:51:14:bf:34:2b:
e9:9c:fb:74:18:58:58:a9:d0:5d:10:58:04:22:c2:
55:31:f5:d9:21:68:ba:65:9f:03:3a:3d:39:b9:65:
2f:07:65:27:5b:70:64:95:98:95:96:cb:bb:71:ff:
55:85:c3:44:da:46:74:18:9c:59:6a:10:d6:99:e6:
09:92:62:2b:1f:23:b1:d1:c1:d2:16:4f:08:d4:c9:
28:5d:a3:e0:1c:d1:bd:b0:fc:13:cf:ab:c9:4c:aa:
f6:e3:c5:c8:b0:72:2d:3c:8e:cf:86:bb:0f:0a:1b:
5a:0b:7c:60:2e:48:2d:3b:e5:15:a0:5f:9b:c9:11:
e8:97:1c:2d:cc:85:4d:9a:25:c9:b0:5b:42:f7:e6:
08:16:ca:55:f4:7d:97:3a:89:ab:a9:b9:8c:0f:38:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:EF:DC:FF:AA:F4:19:24:A2:D0:22:81:A8:B8:CC:71:E9:40:75
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4a:65:d4:2f:80:42:aa:8d:1d:72:a1:06:c8:49:ac:ef:68:
f5:e7:5c:a6:a7:82:fc:45:2e:86:2b:43:6a:f1:05:c7:df:38:
d4:77:44:77:eb:a2:2c:c1:5e:b3:51:83:9c:20:17:86:75:e1:
a5:d8:09:ca:c0:37:10:10:ea:c7:4e:37:2a:8b:67:8a:af:d7:
35:71:9f:22:00:c4:6f:60:93:ce:c3:8e:3e:b8:a9:95:0b:c8:
52:39:97:84:ef:65:da:ed:6b:96:2d:7c:c7:0b:e2:09:ac:a2:
cd:57:92:d8:05:61:3b:2f:41:be:21:8f:9a:70:f5:80:8a:fd:
9e:70:6e:5c:0b:22:ca:62:a6:b8:93:b0:1c:ec:60:3e:80:1d:
4b:bb:0c:6e:05:e5:28:9a:de:58:49:00:4f:eb:95:2f:c7:0f:
b1:39:19:25:e0:74:d4:b8:a2:e7:3a:4c:38:11:bd:a9:be:18:
49:52:02:76:75:73:31:ca:f6:f6:bc:b3:46:a6:90:27:7b:35:
58:08:55:93:12:7a:3a:fc:b5:c2:2f:f1:27:62:6d:70:cf:6a:
1b:93:a4:33:4e:8e:74:6f:fc:c8:be:4c:4f:f9:7b:09:90:02:
13:9a:18:e6:20:a7:f2:b0:20:43:7e:9a:2f:46:dd:a3:bf:70:
ee:8b:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:09:56 2025 by rpki-client