Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e36322e302f32332d3234203d3e203437353833.roa
File: 3139352e33352e36322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: CzpBhbYsaGtw+tT3Ggk9tLZa2puBFch3/zlZ7iKPRrA=
Subject key identifier: D8:E9:6E:A1:31:D0:15:10:35:E9:50:9D:F0:4D:B2:A1:20:DA:E2:3D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 499194E29607C0DD662C1916F2118E693FC81AFA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e36322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 18 Jul 2025 08:46:54 +0000
ROA not before: Fri 18 Jul 2025 08:41:54 +0000
ROA not after: Fri 17 Jul 2026 08:46:54 +0000
asID: 47583
IP address blocks: 195.35.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:91:94:e2:96:07:c0:dd:66:2c:19:16:f2:11:8e:69:3f:c8:1a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 18 08:41:54 2025 GMT
Not After : Jul 17 08:46:54 2026 GMT
Subject: CN=D8E96EA131D0151035E9509DF04DB2A120DAE23D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:3c:ea:c2:0c:dc:cb:f4:3f:36:ad:1a:f6:
e0:0e:23:ab:83:89:c3:c6:8b:08:85:ed:0f:77:4f:
4c:9e:8e:ba:ce:e3:d1:d7:cb:27:3d:48:b6:53:50:
cc:50:ed:89:8c:f7:25:64:14:d7:b1:52:b6:91:2b:
a5:05:02:0c:e7:cb:a5:d7:3e:2e:3e:f3:83:45:78:
5b:4c:c2:45:d4:5c:3d:fb:7f:d6:7b:f6:e6:c6:64:
88:57:dd:92:36:59:e1:3b:6a:f8:e6:f4:bf:6f:12:
6f:cd:b6:f3:4d:d0:66:98:25:79:71:8c:1b:85:70:
5f:de:76:39:e7:4f:cb:04:3f:02:64:39:5f:9d:1f:
28:1a:05:7c:a4:34:92:bb:56:d7:33:dd:00:bc:5e:
ee:eb:71:54:97:51:3b:94:36:38:60:34:2e:a3:21:
b0:f1:67:98:f8:a1:1b:7b:3f:88:da:d8:ec:06:a5:
0d:2b:0e:ca:ff:d5:25:b7:a4:01:c0:e0:18:b5:0d:
f5:e1:71:1e:18:67:a0:22:4b:00:ea:87:36:07:95:
1e:93:40:e7:fe:c8:90:c9:b0:dd:1e:bd:e1:ef:7c:
78:ff:8c:95:55:db:f3:ff:54:e9:ae:9e:f4:e0:51:
ec:fe:0c:8c:bf:34:db:49:e8:57:ee:ce:c7:64:7c:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:6E:A1:31:D0:15:10:35:E9:50:9D:F0:4D:B2:A1:20:DA:E2:3D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e36322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.62.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:af:56:da:4c:41:b4:2a:21:25:91:91:2d:57:da:f7:60:22:
f3:34:df:b6:ee:d5:15:5e:13:fc:28:46:3c:db:45:e9:74:8e:
5e:0f:c4:a4:d6:4a:52:5a:f9:8b:b8:5c:5d:ba:16:b9:f1:82:
88:70:a9:1e:c5:b3:a6:20:0d:41:0c:7b:8f:07:b3:bc:5a:69:
89:2d:f2:26:d0:2b:54:64:8b:d9:06:db:bc:90:d1:44:21:f8:
d8:b5:cb:f2:5a:4c:d5:0f:d4:c3:6d:71:bf:76:51:c4:c4:66:
6c:d5:e2:5d:d7:0b:fe:5f:30:bc:ef:0e:a2:f7:8f:65:aa:a9:
52:32:7a:50:27:42:fb:3e:87:eb:70:f7:f5:03:8c:a4:62:43:
72:8b:96:64:35:8d:9f:d8:df:15:63:8e:aa:57:85:46:80:1a:
1f:b6:90:95:7d:e7:3b:4a:af:36:df:1a:2a:0b:36:5a:dc:9e:
f4:28:5c:cb:e2:c6:33:47:02:ea:e4:80:f2:1a:88:d9:db:a8:
77:76:93:56:39:ef:9f:44:b8:3c:b6:e5:75:dd:f0:63:5f:c9:
4c:1d:16:18:67:ca:64:09:81:cf:b6:71:4e:bb:e3:6c:4c:cc:
0e:b7:04:4f:51:dc:b5:e1:a4:9f:19:c9:56:e9:39:9b:ab:6f:
33:b1:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:17:28 2025 by rpki-client