Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38372e382e302f32322d3234203d3e20323031333431.roa
File: 34352e38372e382e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: RAKZRjQahsb4EevtmmRES6fg8oFe2X+Z+Q8Ar0YWEXQ=
Subject key identifier: 88:A6:0F:29:0E:38:36:FB:12:F0:01:84:59:9F:20:20:6A:79:6D:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61207EAF70FCBD3DEF6B755F661B698B49514F5D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38372e382e302f32322d3234203d3e20323031333431.roa
Signing time: Thu 03 Jul 2025 15:46:47 +0000
ROA not before: Thu 03 Jul 2025 15:41:47 +0000
ROA not after: Thu 02 Jul 2026 15:46:47 +0000
asID: 201341
IP address blocks: 45.87.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:20:7e:af:70:fc:bd:3d:ef:6b:75:5f:66:1b:69:8b:49:51:4f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 15:41:47 2025 GMT
Not After : Jul 2 15:46:47 2026 GMT
Subject: CN=88A60F290E3836FB12F00184599F20206A796D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:fb:1b:d9:29:e1:03:61:98:de:36:b1:71:
81:c5:72:83:87:c6:cb:da:df:37:88:ee:6e:dc:ba:
ea:f8:6b:fe:94:5a:95:d3:d1:63:ff:14:ec:6c:7f:
09:c6:52:1e:32:81:01:59:61:b1:7c:82:56:45:16:
13:e9:c4:02:41:00:34:ab:6a:22:eb:92:21:85:1e:
1c:83:d1:e9:12:d5:8f:9d:eb:ce:32:15:41:ab:21:
f8:d8:4b:cb:1d:53:30:3b:e1:d4:01:f0:98:a0:17:
e1:98:e3:f7:0a:24:dc:dd:ba:53:9d:bb:f3:c7:90:
2e:30:54:4b:35:40:24:7c:e1:77:b3:b0:84:67:eb:
a3:87:60:10:98:43:f1:4c:a4:15:69:5f:bc:e0:3c:
34:86:4d:95:07:8d:a6:ca:9c:ba:fb:4e:b6:a6:1b:
d3:86:61:69:23:c1:8f:51:1f:22:6a:fe:e5:5c:f3:
bf:d7:ad:63:2d:ed:e4:cf:dc:17:c7:bd:aa:9c:5a:
a1:a9:ff:64:8d:b3:12:13:65:61:44:15:a9:ce:3c:
4c:78:ca:22:7b:1c:c0:4a:e1:a2:56:3d:8c:59:a5:
c7:7c:0f:82:8d:1c:52:37:1f:b3:84:84:9c:41:e6:
00:e6:7b:b1:25:86:b6:be:43:8c:b5:3c:53:d2:e3:
31:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:0F:29:0E:38:36:FB:12:F0:01:84:59:9F:20:20:6A:79:6D:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38372e382e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:d5:11:3b:5d:70:85:0a:cb:c2:d9:2a:af:32:1f:31:94:3b:
3b:2b:6e:ca:fb:27:cf:9b:a8:f5:d9:41:12:47:5f:0b:7c:7a:
34:30:b0:72:92:86:7e:42:1b:c5:d4:90:df:f0:49:0b:45:47:
c5:77:52:c1:ac:ef:9e:21:e5:92:20:03:2d:12:76:e9:2b:cd:
df:6d:e3:e5:ad:85:41:c9:a7:64:39:5a:5d:6a:65:c2:19:30:
da:c4:2e:fc:df:af:89:d9:b3:71:ca:47:cc:92:14:78:52:77:
b0:44:91:2b:57:e4:f6:3c:62:59:c4:47:c2:c8:f9:14:83:4c:
4f:eb:33:79:e9:e2:86:4d:b5:a4:1e:71:0f:e7:28:69:81:9d:
2e:26:78:bf:1c:8d:ba:10:3c:08:33:a3:11:b9:3a:86:fe:e7:
94:83:83:57:df:65:ce:ba:ae:fd:0f:a4:ec:fc:bb:74:5f:a6:
85:ee:6f:bf:2b:3c:79:b6:50:ea:ea:e9:2b:86:6b:2b:37:cb:
bb:d7:e0:39:86:cb:3f:1c:db:fc:6a:7c:04:76:3a:15:0d:b3:
1a:ce:52:ba:e2:f0:39:50:a5:b8:5c:d3:c0:00:74:72:d1:69:
07:34:cf:a1:9d:1e:f9:69:5f:ad:ba:f2:00:62:d7:49:86:7d:
f0:06:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:20:31 2025 by rpki-client