Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa
File: 3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: tvKaAiKysG9zESb8mtWtWQNAuwD+C2+sJSseXx5QAuY=
Subject key identifier: 4F:D4:BA:31:CF:C0:67:08:D0:4C:FD:66:D5:F3:BF:FB:5D:22:E0:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7DD58E76D0D0E172654D815FCB4151D871ABDCBA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa
Signing time: Thu 01 May 2025 20:46:11 +0000
ROA not before: Thu 01 May 2025 20:41:11 +0000
ROA not after: Thu 30 Apr 2026 20:46:11 +0000
asID: 51167
IP address blocks: 185.222.240.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d5:8e:76:d0:d0:e1:72:65:4d:81:5f:cb:41:51:d8:71:ab:dc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 20:41:11 2025 GMT
Not After : Apr 30 20:46:11 2026 GMT
Subject: CN=4FD4BA31CFC06708D04CFD66D5F3BFFB5D22E07F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:b3:44:14:9b:df:8b:92:4c:48:6e:e5:73:
29:db:b2:52:a4:50:4d:3f:4a:ad:f8:6e:ca:2f:1e:
b5:79:bc:fb:d9:f0:f7:e1:ed:43:d7:84:64:bd:81:
73:fb:2c:4a:88:4f:34:5e:7f:4a:1b:b0:a5:07:a1:
cb:fb:be:b0:e8:f9:42:87:fc:17:10:c5:2e:fe:7b:
6d:12:88:bf:3d:52:fa:5e:9a:ef:d1:09:08:13:cb:
23:69:f8:d6:f6:3d:1f:8a:a7:f8:2c:e1:49:fa:d7:
51:42:96:f4:ca:e9:b6:78:05:2d:36:15:29:b5:88:
72:09:43:bc:00:5e:93:37:ca:f0:7b:58:34:5f:6e:
67:19:4f:e9:a6:5a:b8:49:cf:e2:83:8d:e2:2b:fc:
13:d1:ac:e3:56:c5:e0:9f:5d:21:38:c8:f6:a3:6c:
83:74:df:c9:6f:63:1a:13:4d:2b:59:42:76:6d:7a:
08:8e:64:95:15:a3:c8:9f:d0:cc:eb:90:64:29:bd:
6b:2d:9c:c4:a0:b3:1a:99:ed:b5:48:cb:72:c1:dd:
d3:47:ae:22:6e:52:0b:57:0e:f6:fa:f7:eb:2d:eb:
f3:70:30:7f:4a:02:21:f2:ad:c4:4d:64:66:11:a8:
53:70:29:67:23:ba:20:f9:ed:5e:03:da:bd:fe:54:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D4:BA:31:CF:C0:67:08:D0:4C:FD:66:D5:F3:BF:FB:5D:22:E0:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232322e3234302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.240.0/23
Signature Algorithm: sha256WithRSAEncryption
83:04:92:25:d7:ba:04:14:12:69:96:e8:74:11:50:8d:02:1c:
66:8a:b7:69:1b:3d:90:d8:46:88:be:84:22:7f:e1:93:3a:ea:
52:7b:38:ee:28:b9:c4:cd:cd:c5:e4:85:71:d5:b5:79:9f:7c:
42:9f:3e:2f:00:5b:42:22:10:4c:0e:29:52:82:62:e2:69:d6:
8b:38:96:ff:31:33:2c:9b:1a:75:4c:ea:db:31:35:1f:e2:15:
ec:55:88:de:0d:63:2b:37:5e:d0:16:f3:a4:f2:b3:1a:87:9f:
76:3e:24:fa:e4:e1:9e:0d:32:92:53:11:e4:f0:58:58:d8:ed:
e7:c9:64:aa:50:e9:e2:47:a6:ed:0e:3b:37:e3:ff:c9:63:c1:
3a:99:bd:ee:7a:51:8d:f8:cf:57:02:dc:72:8a:6b:a7:01:88:
84:17:3a:15:44:16:2e:21:18:c7:38:e2:96:40:92:2e:db:37:
ea:96:54:99:10:04:cd:e7:7d:00:f6:99:e0:37:7e:73:a3:be:
71:63:92:66:f6:c4:5b:75:a1:2e:d9:73:48:60:26:df:50:b4:
66:90:19:10:11:3f:02:12:73:5e:84:f5:83:e5:71:cc:64:ed:
84:06:3e:20:b5:b7:15:6b:63:2c:02:24:5e:bf:0f:ea:d8:a3:
b0:1b:c5:67
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfdWOdtDQ4XJlTYFfy0FR2HGr3LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MDEyMDQxMTFaFw0yNjA0MzAyMDQ2MTFaMDMxMTAvBgNV
BAMTKDRGRDRCQTMxQ0ZDMDY3MDhEMDRDRkQ2NkQ1RjNCRkZCNUQyMkUwN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ3rNEFJvfi5JMSG7lcynbslKk
UE0/Sq34bsovHrV5vPvZ8Pfh7UPXhGS9gXP7LEqITzRef0obsKUHocv7vrDo+UKH
/BcQxS7+e20SiL89Uvpemu/RCQgTyyNp+Nb2PR+Kp/gs4Un611FClvTK6bZ4BS02
FSm1iHIJQ7wAXpM3yvB7WDRfbmcZT+mmWrhJz+KDjeIr/BPRrONWxeCfXSE4yPaj
bIN038lvYxoTTStZQnZtegiOZJUVo8if0MzrkGQpvWstnMSgsxqZ7bVIy3LB3dNH
riJuUgtXDvb69+st6/NwMH9KAiHyrcRNZGYRqFNwKWcjuiD57V4D2r3+VB+5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUT9S6Mc/AZwjQTP1m1fO/+10i4H8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMyMzIyZTMy
MzQzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG53vAwDQYJKoZIhvcNAQELBQADggEBAIMEkiXXugQUEmmW6HQRUI0CHGaKt2kb
PZDYRoi+hCJ/4ZM66lJ7OO4oucTNzcXkhXHVtXmffEKfPi8AW0IiEEwOKVKCYuJp
1os4lv8xMyybGnVM6tsxNR/iFexViN4NYys3XtAW86TysxqHn3Y+JPrk4Z4NMpJT
EeTwWFjY7efJZKpQ6eJHpu0OOzfj/8ljwTqZve56UY34z1cC3HKKa6cBiIQXOhVE
Fi4hGMc44pZAki7bN+qWVJkQBM3nfQD2meA3fnOjvnFjkmb2xFt1oS7Zc0hgJt9Q
tGaQGRARPwISc16E9YPlccxk7YQGPiC1txVrYywCJF6/D+rYo7AbxWc=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:25:09 2025 by rpki-client