Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20323134343332.roa
File: 3138352e3136342e35332e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: qLynSsyBWr3sgwLqOlZdLlFHPON8Xn0WPAh+ELf6Htg=
Subject key identifier: 80:42:D8:86:DD:CC:AA:91:6A:11:36:BD:9A:D4:18:9D:D4:AA:BB:DD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15EE037EBC4A5F7E8201C9A8BAE30018E6C7EE3F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20323134343332.roa
Signing time: Tue 20 May 2025 06:41:51 +0000
ROA not before: Tue 20 May 2025 06:36:51 +0000
ROA not after: Tue 19 May 2026 06:41:51 +0000
asID: 214432
IP address blocks: 185.164.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ee:03:7e:bc:4a:5f:7e:82:01:c9:a8:ba:e3:00:18:e6:c7:ee:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 20 06:36:51 2025 GMT
Not After : May 19 06:41:51 2026 GMT
Subject: CN=8042D886DDCCAA916A1136BD9AD4189DD4AABBDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:5d:f5:c9:ad:21:7b:8b:03:6c:0c:e3:3c:
0d:36:11:92:82:4d:06:14:68:1a:b4:c7:04:25:15:
89:61:3e:f0:4c:3f:8f:48:c9:45:81:24:ae:c9:fd:
be:ce:dd:f5:de:63:bb:75:a3:85:b1:ae:20:47:8f:
7f:51:d7:c3:c4:00:49:9a:e7:44:e5:6f:fd:d7:2f:
88:0c:38:20:4d:15:ef:3b:71:5e:06:fa:f2:58:ed:
ad:57:78:73:ef:00:c6:17:52:ca:ee:a4:e5:fa:7e:
94:c8:fe:de:96:cf:2e:ab:a7:1e:2f:80:dd:8b:47:
37:57:c2:fd:9f:cc:f7:8d:18:bf:c7:db:ca:dc:ae:
f9:30:f1:41:5e:a0:4c:f5:d3:7d:5b:6f:01:5c:0c:
d1:cb:2e:5f:45:e4:e0:78:77:fc:90:f8:27:f6:59:
c8:4f:fc:4a:ed:ba:4c:dc:cd:a0:82:b5:4b:1c:5e:
fb:95:76:ba:0c:b8:2f:cc:9e:46:a5:f0:e3:80:36:
48:e2:98:e9:d0:1b:40:e4:28:e9:5d:53:4e:a5:a4:
08:74:2c:75:e3:7f:72:6e:48:d4:6a:28:e1:b0:c1:
44:33:e2:4d:3d:e0:99:c7:0f:28:37:e2:ef:aa:96:
ef:0f:8a:5f:99:cc:32:4e:fc:56:cd:32:1b:1f:26:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:D8:86:DD:CC:AA:91:6A:11:36:BD:9A:D4:18:9D:D4:AA:BB:DD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35332e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.53.0/24
Signature Algorithm: sha256WithRSAEncryption
00:67:d9:1e:97:ed:32:ce:8e:05:d4:c7:1e:e8:e9:c8:a9:a4:
0b:43:1f:1a:b5:eb:48:7a:2a:bd:60:dd:0d:40:14:ae:c0:12:
8e:40:1d:92:17:e3:d4:2d:5e:cb:c4:4b:7f:13:32:34:e1:dc:
65:75:26:3c:e3:05:99:99:df:e2:11:f7:a3:78:f5:6c:af:ae:
18:82:a2:2f:9f:b1:85:17:f3:bc:79:19:6c:4b:c1:d8:39:48:
10:33:b7:61:2f:db:2a:b9:78:fd:6e:86:f0:94:a3:f2:53:62:
59:28:31:59:41:4b:e4:3c:be:45:cb:b4:af:b9:01:35:29:63:
34:0b:65:a8:6a:9e:af:87:d8:db:df:94:25:5f:62:dd:7a:22:
f2:d7:23:66:e2:ae:b6:b4:44:60:b3:1f:e8:a0:32:a3:22:0b:
5c:6b:e1:a8:12:69:36:98:2a:14:8f:e1:13:31:ae:9c:6e:04:
82:f8:41:c5:53:d4:22:cf:0c:dc:1c:30:07:47:74:13:19:27:
49:cf:e3:69:e8:a3:22:d6:95:9a:41:b0:6c:a6:2b:09:48:f6:
56:92:fe:3d:d5:b2:6b:d5:01:ea:06:9b:2e:4c:66:83:3b:96:
00:54:c6:a2:34:dd:97:c0:a3:4f:c0:b6:ef:f7:65:a3:69:a7:
c9:ca:65:8e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFe4DfrxKX36CAcmouuMAGObH7j8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MjAwNjM2NTFaFw0yNjA1MTkwNjQxNTFaMDMxMTAvBgNV
BAMTKDgwNDJEODg2RERDQ0FBOTE2QTExMzZCRDlBRDQxODlERDRBQUJCREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCV31ya0he4sDbAzjPA02EZKC
TQYUaBq0xwQlFYlhPvBMP49IyUWBJK7J/b7O3fXeY7t1o4WxriBHj39R18PEAEma
50Tlb/3XL4gMOCBNFe87cV4G+vJY7a1XeHPvAMYXUsrupOX6fpTI/t6Wzy6rpx4v
gN2LRzdXwv2fzPeNGL/H28rcrvkw8UFeoEz1031bbwFcDNHLLl9F5OB4d/yQ+Cf2
WchP/ErtukzczaCCtUscXvuVdroMuC/Mnkal8OOANkjimOnQG0DkKOldU06lpAh0
LHXjf3JuSNRqKOGwwUQz4k094JnHDyg34u+qlu8Pil+ZzDJO/FbNMhsfJvPLAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUgELYht3MqpFqETa9mtQYndSqu90wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM2MzQyZTM1
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNDMzMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5pDUwDQYJKoZIhvcNAQELBQADggEBAABn2R6X7TLOjgXUxx7o6cippAtDHxq1
60h6Kr1g3Q1AFK7AEo5AHZIX49QtXsvES38TMjTh3GV1JjzjBZmZ3+IR96N49Wyv
rhiCoi+fsYUX87x5GWxLwdg5SBAzt2Ev2yq5eP1uhvCUo/JTYlkoMVlBS+Q8vkXL
tK+5ATUpYzQLZahqnq+H2NvflCVfYt16IvLXI2birra0RGCzH+igMqMiC1xr4agS
aTaYKhSP4RMxrpxuBIL4QcVT1CLPDNwcMAdHdBMZJ0nP42nooyLWlZpBsGymKwlI
9laS/j3VsmvVAeoGmy5MZoM7lgBUxqI03ZfAo0/Atu/3ZaNpp8nKZY4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:21:01 2025 by rpki-client