Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa
File: 3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: +fbEo5Sa5OPIIsMJMD4zzQtK7um3TPGcJh80MN7NN0M=
Subject key identifier: B8:22:AD:EC:4C:2E:E0:2A:22:98:40:5A:D1:2B:22:E5:D6:51:74:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 076F540FDE4E831E89D2788520BD6B9CF767CAF9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:31 +0000
ROA not before: Thu 09 Oct 2025 09:02:31 +0000
ROA not after: Thu 08 Oct 2026 09:07:31 +0000
asID: 212238
IP address blocks: 176.53.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6f:54:0f:de:4e:83:1e:89:d2:78:85:20:bd:6b:9c:f7:67:ca:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:31 2025 GMT
Not After : Oct 8 09:07:31 2026 GMT
Subject: CN=B822ADEC4C2EE02A2298405AD12B22E5D6517483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:f5:90:ea:25:b4:37:cb:37:1d:92:d7:d8:
9c:e5:f8:fb:ab:83:66:1b:ce:4d:95:dd:67:f6:12:
0a:01:6a:88:44:77:5e:04:65:b5:0c:2f:fd:9b:de:
61:5d:04:85:a1:81:e4:7b:6c:b7:b8:b5:65:94:11:
ea:9b:cd:11:85:48:f1:e1:87:83:f2:98:0d:e4:65:
90:88:94:8e:b7:44:37:e5:5c:c6:40:ed:04:0b:89:
d0:9a:14:6e:b6:49:71:14:ca:79:a4:f0:03:86:4b:
a4:82:9f:72:2a:3c:ad:cd:28:ef:f4:4c:59:b7:a7:
9f:b5:c1:af:ca:7d:10:98:4f:07:f6:65:70:a3:b0:
36:53:c3:9f:d8:b8:ef:49:d0:c1:eb:87:06:dd:d8:
8e:5c:d8:a5:25:05:c8:97:7c:d8:db:a7:61:6f:ce:
25:af:a7:d4:6b:d1:da:bc:cf:63:4d:27:4a:27:3f:
d1:fc:47:21:81:45:31:32:f1:46:8b:f9:07:49:06:
aa:51:10:f3:26:59:23:b5:6c:38:f1:da:7c:3b:b2:
bf:23:41:9c:cb:ec:7d:e9:cd:af:1d:ef:00:86:32:
54:a8:42:5a:88:15:fa:83:2e:69:27:ce:45:00:f8:
ff:a6:de:24:b5:e2:1b:fa:2f:6d:dd:cf:6f:40:84:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:AD:EC:4C:2E:E0:2A:22:98:40:5A:D1:2B:22:E5:D6:51:74:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.179.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e5:01:cf:45:72:5e:1f:e8:71:2b:b4:dc:d8:9b:0e:5d:23:
be:76:6a:bc:9b:d2:78:af:08:8f:cd:a0:39:b3:37:e2:38:fd:
a9:03:28:59:47:51:f6:49:fd:57:98:5c:18:31:39:d7:57:46:
13:5c:89:bf:6e:ff:5a:c6:29:69:ea:3c:a6:7c:3e:7a:62:e4:
11:55:c8:79:05:da:e6:d8:28:14:d0:ee:12:ea:98:cd:cf:06:
97:96:b7:d5:6f:cf:5e:a7:97:1c:c6:5e:1e:a5:cf:93:38:9d:
ba:d0:aa:46:ff:84:cf:65:e5:d0:d6:db:aa:0c:0e:3d:2d:bf:
25:a8:d5:a2:22:25:3d:bc:9b:78:1d:45:d8:ce:39:87:39:ac:
c2:26:b4:25:d2:07:0a:70:4b:0b:96:8c:8c:c8:d4:af:e8:63:
fb:08:9d:7f:db:91:2a:65:18:05:b1:cb:28:39:83:45:ee:9e:
f8:dd:31:70:cd:c0:9b:d7:08:84:6f:bb:f6:1c:79:59:f6:a4:
88:95:14:08:6f:6d:c3:cc:b0:57:91:e9:4c:74:22:53:c2:14:
81:b3:cd:47:ba:7c:e6:bf:2b:72:05:52:be:2a:2e:c2:60:98:
6c:74:c6:14:53:ef:43:52:25:78:15:95:d8:7a:e1:50:0e:00:
8b:99:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:45 2025 by rpki-client