Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33322e302f32312d3234203d3e203437353833.roa
File: 3139352e33352e33322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: /onu1NZR22jt+3w3bbx0EuQysv8bq7u6FDWDLL0S1kc=
Subject key identifier: 7B:94:79:81:27:45:B7:0F:99:0A:B3:EF:7C:7A:F8:59:BE:62:5D:6E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A453697273C20EB8230C0E806F3C4C4253EFA33
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33322e302f32312d3234203d3e203437353833.roa
Signing time: Mon 21 Jul 2025 15:46:57 +0000
ROA not before: Mon 21 Jul 2025 15:41:57 +0000
ROA not after: Mon 20 Jul 2026 15:46:57 +0000
asID: 47583
IP address blocks: 195.35.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:45:36:97:27:3c:20:eb:82:30:c0:e8:06:f3:c4:c4:25:3e:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 15:41:57 2025 GMT
Not After : Jul 20 15:46:57 2026 GMT
Subject: CN=7B9479812745B70F990AB3EF7C7AF859BE625D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:f1:63:49:71:35:53:2b:04:24:ac:69:4b:
60:08:08:4f:9d:02:41:e8:e6:61:5b:ae:3a:30:4c:
95:7f:1b:8b:33:91:e6:f8:21:90:d9:30:dd:8e:bf:
cd:c3:5e:13:4e:6b:e2:54:6b:f5:94:4b:0e:fb:46:
50:2d:b2:17:fc:2d:46:cc:d6:6a:a3:fe:c4:68:c5:
50:de:6b:a5:6a:0f:43:b9:6b:41:fc:c8:d7:32:39:
46:49:fa:0e:0e:d2:28:67:d5:b3:7d:8e:83:91:0c:
77:ee:e7:8a:27:91:40:10:2b:4b:98:29:b4:b3:6b:
01:da:f5:33:0f:b7:c3:9f:26:c8:73:65:a4:ed:af:
aa:2f:87:18:bc:35:91:df:99:6a:2f:62:54:9b:bd:
79:4e:8e:57:8f:dc:ab:dc:0c:47:7a:95:74:7f:69:
a7:e1:96:38:53:f1:98:9d:9d:ea:7d:9b:ed:a9:b7:
76:05:04:c2:d9:25:4e:fd:63:54:a5:7f:c6:03:fd:
46:49:41:e4:2c:45:2d:5a:51:b9:b4:56:23:ee:48:
91:e5:9b:73:41:ad:9e:27:04:ac:57:49:6e:f7:66:
06:f0:8e:72:ec:03:94:9a:86:45:37:c4:d7:ba:86:
48:bb:7f:23:8f:82:2c:e2:d0:51:72:46:18:f6:04:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:94:79:81:27:45:B7:0F:99:0A:B3:EF:7C:7A:F8:59:BE:62:5D:6E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e33322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.32.0/21
Signature Algorithm: sha256WithRSAEncryption
28:47:54:17:ca:d2:7d:74:b1:7c:1e:ff:5c:59:f7:f7:ba:4a:
68:fb:69:39:38:83:bf:44:08:e1:74:43:67:59:b2:6a:2d:58:
2e:f2:1b:d0:6a:b8:53:f5:20:7f:77:35:74:4c:f1:6e:7a:b6:
3a:36:cf:2a:e2:ae:a2:0c:87:af:d4:9b:62:d4:3c:db:77:b4:
3f:4f:bc:9d:8a:2b:ae:ae:14:89:56:d9:78:38:64:81:13:41:
26:85:cd:70:fa:b7:8e:b5:58:e3:23:45:96:ba:71:25:0e:a3:
76:0f:d7:c3:3d:d7:4f:70:33:0e:7e:3d:4f:48:27:bc:d5:4a:
be:4c:2c:81:66:ac:d6:ac:df:33:a1:57:80:7e:d7:9a:74:7e:
a1:4b:ff:58:68:1e:50:6e:07:66:da:64:09:c4:86:4e:f4:10:
36:bb:ee:eb:93:f7:96:07:67:de:0a:0a:a4:9c:4d:1d:0c:cf:
d9:56:5a:8b:b5:f9:16:2f:0f:c5:2c:7c:19:a5:21:a9:6a:82:
50:f0:96:00:6a:53:55:0e:2b:4f:c4:18:46:44:01:47:d7:56:
cc:fc:c6:d1:85:64:8c:20:6f:cc:89:af:8a:4b:b0:fb:39:94:
f6:00:5a:2e:d8:6d:bb:46:63:d1:59:0c:71:67:c2:15:b3:24:
b5:57:76:63
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUCkU2lyc8IOuCMMDoBvPExCU++jMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MjExNTQxNTdaFw0yNjA3MjAxNTQ2NTdaMDMxMTAvBgNV
BAMTKDdCOTQ3OTgxMjc0NUI3MEY5OTBBQjNFRjdDN0FGODU5QkU2MjVENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0/FjSXE1UysEJKxpS2AICE+d
AkHo5mFbrjowTJV/G4szkeb4IZDZMN2Ov83DXhNOa+JUa/WUSw77RlAtshf8LUbM
1mqj/sRoxVDea6VqD0O5a0H8yNcyOUZJ+g4O0ihn1bN9joORDHfu54onkUAQK0uY
KbSzawHa9TMPt8OfJshzZaTtr6ovhxi8NZHfmWovYlSbvXlOjleP3KvcDEd6lXR/
aafhljhT8Zidnep9m+2pt3YFBMLZJU79Y1Slf8YD/UZJQeQsRS1aUbm0ViPuSJHl
m3NBrZ4nBKxXSW73ZgbwjnLsA5SahkU3xNe6hki7fyOPgizi0FFyRhj2BC5hAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUe5R5gSdFtw+ZCrPvfHr4Wb5iXW4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM1MmUzMzM1MmUzMzMy
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8Mj
IDANBgkqhkiG9w0BAQsFAAOCAQEAKEdUF8rSfXSxfB7/XFn397pKaPtpOTiDv0QI
4XRDZ1myai1YLvIb0Gq4U/Ugf3c1dEzxbnq2OjbPKuKuogyHr9SbYtQ823e0P0+8
nYorrq4UiVbZeDhkgRNBJoXNcPq3jrVY4yNFlrpxJQ6jdg/Xwz3XT3AzDn49T0gn
vNVKvkwsgWas1qzfM6FXgH7XmnR+oUv/WGgeUG4HZtpkCcSGTvQQNrvu65P3lgdn
3goKpJxNHQzP2VZai7X5Fi8PxSx8GaUhqWqCUPCWAGpTVQ4rT8QYRkQBR9dWzPzG
0YVkjCBvzImvikuw+zmU9gBaLthtu0Zj0VkMcWfCFbMktVd2Yw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 17:16:04 2025 by rpki-client