Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e31372e3132322e302f32342d3234203d3e20323132323338.roa
File: 38312e31372e3132322e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: omg4NBiL84BCtXkJtGijYbwmiA0NB+QHll9UL3WxK6M=
Subject key identifier: 30:C2:C3:EE:E8:F1:B4:BE:8C:0F:04:A0:8B:02:C5:B1:2C:21:4F:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 241E50BBC228FE4FE75E6917BEE6426DE3402FA1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e31372e3132322e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Jun 2025 21:29:40 +0000
ROA not before: Mon 30 Jun 2025 21:24:40 +0000
ROA not after: Mon 29 Jun 2026 21:29:40 +0000
asID: 212238
IP address blocks: 81.17.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1e:50:bb:c2:28:fe:4f:e7:5e:69:17:be:e6:42:6d:e3:40:2f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 21:24:40 2025 GMT
Not After : Jun 29 21:29:40 2026 GMT
Subject: CN=30C2C3EEE8F1B4BE8C0F04A08B02C5B12C214F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:37:17:dd:cd:76:cc:b7:44:0e:56:b3:f3:
2d:df:d1:52:ef:cf:47:20:f3:7d:f3:de:8a:fb:00:
b1:cd:7f:bd:b2:73:41:dd:2d:b2:ec:7d:85:6e:4d:
99:33:89:ed:7c:67:1c:39:6d:bf:77:78:87:89:3a:
75:f4:b4:43:49:55:dd:19:28:e0:e3:3d:f4:62:a8:
af:a5:33:7e:76:fe:16:1b:9e:33:43:70:15:77:8d:
34:f4:5e:ed:88:21:4d:f5:a1:b6:53:dd:ef:71:5d:
b7:36:13:33:9e:ab:ea:b3:5b:5f:61:72:20:06:84:
fc:1c:59:3d:95:e9:ca:75:de:b0:0f:39:c3:16:af:
19:d2:54:70:61:0b:d2:4b:c2:a1:79:9f:4e:d4:89:
19:cb:e9:08:3e:57:1c:ac:33:f5:68:d1:6f:de:07:
24:f5:c2:ef:0a:a2:6b:64:89:a7:30:0b:bf:f5:c9:
ae:a0:c1:85:b3:4b:7f:c0:ca:a9:78:39:fd:7a:38:
5e:36:d1:29:e9:16:af:b7:a3:1c:96:81:e1:3b:8b:
05:ff:bc:74:34:24:30:8c:0e:3d:26:e6:aa:e2:97:
c7:9f:3d:d1:4d:af:0b:ed:19:9e:a7:97:62:5d:44:
0c:41:4e:5c:9c:e3:7e:62:73:48:37:1d:f5:30:37:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C2:C3:EE:E8:F1:B4:BE:8C:0F:04:A0:8B:02:C5:B1:2C:21:4F:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e31372e3132322e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:be:f3:65:dd:bd:f2:74:74:3b:48:50:d1:74:1f:ce:14:74:
8a:e7:78:97:ef:f5:83:04:80:92:2b:6a:a3:00:df:1f:5f:fe:
e8:06:9b:94:a5:d4:d0:ff:d4:b9:25:f9:0a:24:4f:f9:71:9e:
8f:96:1f:32:86:14:35:bf:56:71:e8:3f:3d:1c:3f:b4:dc:f2:
96:0a:95:ba:12:00:5c:b1:a8:0a:e1:a1:7d:2b:7b:b1:aa:4d:
a6:19:58:18:f0:a8:7a:36:ea:a5:1b:6a:9a:eb:6b:b0:61:ba:
91:a7:66:a8:4c:84:82:82:c4:91:88:40:ed:58:d3:ab:e6:11:
cc:20:a5:13:c8:db:b2:59:10:1c:39:09:57:1d:98:7c:c4:98:
87:6e:e2:7c:e5:a2:dd:ff:32:2d:53:80:16:97:c3:01:50:83:
74:c6:32:cd:f9:4c:6c:d4:0f:de:28:ec:39:e6:84:d0:5f:db:
ba:05:9d:91:a3:6b:45:fc:0d:18:66:3c:46:56:24:f5:45:30:
6c:0b:a0:a9:d1:b3:99:dc:55:4b:e5:90:12:2d:84:0a:9e:e3:
8a:85:60:68:00:28:14:5d:53:e0:20:1b:78:67:09:a6:83:e8:
a0:65:e4:4a:8b:ec:b9:60:84:fc:e7:84:50:f5:97:c1:d8:0e:
db:96:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:18 2025 by rpki-client