Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32302e302f32322d3232203d3e20323033303230.roa
File: 34352e38322e32302e302f32322d3232203d3e20323033303230.roa (raw, json)
Hash identifier: +uoYajJZ17yX/u5PCVAhmru2kyKu2eVjFjw6wSeGKds=
Subject key identifier: 1E:39:72:5A:58:A1:BF:3E:B3:85:98:50:FB:A4:24:B4:B7:44:41:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3785DF6F681D330F971FE0E29E509C9DD256BACE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32302e302f32322d3232203d3e20323033303230.roa
Signing time: Wed 16 Jul 2025 08:46:52 +0000
ROA not before: Wed 16 Jul 2025 08:41:52 +0000
ROA not after: Wed 15 Jul 2026 08:46:52 +0000
asID: 203020
IP address blocks: 45.82.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:85:df:6f:68:1d:33:0f:97:1f:e0:e2:9e:50:9c:9d:d2:56:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 16 08:41:52 2025 GMT
Not After : Jul 15 08:46:52 2026 GMT
Subject: CN=1E39725A58A1BF3EB3859850FBA424B4B7444169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:37:ed:8f:9d:d4:be:b2:5b:b2:8f:81:f5:
7f:a8:49:52:d3:5e:a0:49:1a:4b:c5:f4:26:94:83:
c0:39:fb:f2:4f:ac:da:d5:83:a4:4c:9d:25:f8:21:
62:3f:ad:8b:89:71:f8:ce:f4:5f:f6:3f:df:e7:de:
bf:79:02:c4:1d:b9:83:f0:1f:eb:a4:84:00:d6:53:
4e:d3:49:c2:6d:01:3e:e2:8a:0f:9d:4d:c1:66:58:
4c:7a:31:b9:f6:df:b6:b6:d5:55:17:af:10:5a:7c:
3b:9e:19:62:b8:b6:20:a0:a0:c5:ed:bb:93:9d:41:
aa:e9:75:23:5a:d3:97:ee:00:f8:5e:a4:53:8e:ba:
0f:60:4b:b6:f8:9b:80:24:75:09:64:c7:08:4f:8c:
bf:0b:c7:24:b3:3b:09:83:5d:ca:cd:7e:95:3e:a4:
f3:6b:a5:6f:a6:58:8f:ac:92:87:4c:af:c6:ff:60:
7f:8c:e9:b0:85:57:56:3b:cf:20:b0:f1:1d:28:e5:
e4:57:f9:b0:5e:48:03:07:f7:6f:e3:49:ca:05:0a:
63:05:ee:fc:6e:cf:32:a1:24:ee:72:45:a3:8a:11:
a0:af:d6:7c:ae:75:6a:e5:69:af:a5:8a:b7:bb:6d:
4e:22:8a:07:41:d3:18:13:33:73:4f:a1:42:33:ec:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:72:5A:58:A1:BF:3E:B3:85:98:50:FB:A4:24:B4:B7:44:41:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32302e302f32322d3232203d3e20323033303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:5f:61:65:2a:af:1f:3b:8d:22:f9:94:3e:f6:5b:cb:88:ec:
3e:2e:07:04:7f:ce:55:26:62:8e:35:23:94:9e:09:a4:38:f8:
1e:4e:16:48:92:a9:65:28:46:12:36:68:4c:f3:67:7b:b2:f5:
1a:2b:64:f9:9e:20:09:e1:cc:e5:e9:96:96:e3:56:2c:95:ff:
60:d2:7e:85:b3:64:1b:74:ca:65:02:18:86:8a:85:8d:a0:8d:
0f:14:29:e3:ce:cc:5c:e7:28:bd:f8:57:d7:b7:a5:15:d4:58:
d9:c4:c5:ac:9b:3d:05:9d:f0:d7:c8:91:3e:f7:11:67:76:8b:
7d:2c:d6:0b:87:bf:86:39:b5:a3:77:44:61:2e:e7:65:43:09:
4a:6f:ec:28:35:61:ea:89:09:67:c9:88:88:7d:bf:e2:ab:5b:
cf:11:b6:c4:ac:97:64:77:05:4c:84:fa:9b:7e:d9:0e:f2:29:
92:88:28:4d:44:2f:7b:6e:36:0e:21:77:47:1f:9e:b9:61:7e:
52:b6:9d:92:d9:89:28:50:83:f1:e2:c6:e4:f5:6e:3e:54:6f:
a0:ad:bc:5e:da:a0:78:65:9d:ee:96:b6:98:5f:ad:01:5a:b6:
0e:3a:38:3b:c2:b5:02:c8:35:3d:7e:6e:e6:b9:b0:37:35:08:
53:86:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:19:11 2025 by rpki-client