Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133392e302f32342d3234203d3e20323132323338.roa
File: 3138352e3233302e3133392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: ucQYry0MKg9wheVwiqCi37sIAahHKj9Ohjt15Ir5wDg=
Subject key identifier: DE:C5:01:A1:F4:6D:BF:32:70:22:03:5A:98:C2:22:DD:28:BB:2C:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 388BCDF5DFA9B7B44E4980D4B15F259B8676B4DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133392e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 29 May 2025 16:46:34 +0000
ROA not before: Thu 29 May 2025 16:41:34 +0000
ROA not after: Thu 28 May 2026 16:46:34 +0000
asID: 212238
IP address blocks: 185.230.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:8b:cd:f5:df:a9:b7:b4:4e:49:80:d4:b1:5f:25:9b:86:76:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 16:41:34 2025 GMT
Not After : May 28 16:46:34 2026 GMT
Subject: CN=DEC501A1F46DBF327022035A98C222DD28BB2C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:02:77:e3:4e:f5:8d:8c:08:33:0b:aa:19:
2d:ad:33:f3:74:06:79:90:36:d3:22:d3:4a:48:b2:
b7:3d:aa:90:e8:68:69:7f:ae:9e:e4:01:94:a7:68:
3c:07:c5:86:66:e9:63:4a:e7:0a:e8:5d:cb:87:fb:
79:44:c9:fa:5b:33:18:f4:29:42:cb:c1:4d:d1:f5:
22:b4:db:f6:70:5e:38:2f:e8:ad:c7:93:ab:27:95:
83:8b:03:f0:37:5f:cd:89:71:3a:32:51:49:b4:90:
b8:6f:1c:b0:13:d4:6c:a7:1b:37:be:bd:a3:df:56:
49:90:71:63:31:bc:35:cf:1c:02:69:f7:61:2c:26:
c8:ea:35:59:a9:e5:71:48:93:8b:62:e5:34:90:ff:
18:ca:aa:9c:17:9d:81:2c:cc:01:80:09:11:05:8d:
c3:50:57:aa:da:9a:36:63:48:19:fc:9a:36:ac:d3:
71:72:63:69:82:3b:6d:4d:87:00:49:26:65:cf:63:
3a:87:08:62:ec:de:01:cd:58:f6:d1:88:43:a6:d6:
36:71:61:6b:45:cb:00:31:fd:09:e7:df:5f:00:30:
22:f9:5e:34:40:a6:17:80:ff:ad:61:9d:06:30:a2:
0c:7a:03:3e:a5:9d:c8:86:43:3e:80:2b:4b:8e:74:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C5:01:A1:F4:6D:BF:32:70:22:03:5A:98:C2:22:DD:28:BB:2C:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233302e3133392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.139.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cc:59:1f:24:82:e0:15:e9:f5:c3:38:0b:4e:42:0e:7b:73:
90:96:3f:1b:8c:76:9a:af:60:ec:19:29:d3:f5:05:ea:ec:59:
f8:bc:0b:fb:a7:6b:93:bd:75:f2:ef:70:95:58:2b:dc:8c:d3:
2a:14:dc:3f:e9:e3:fa:a6:55:a2:b5:d8:45:9b:f6:fc:76:e6:
b2:e2:92:26:68:3b:aa:06:12:ec:1b:6b:fa:de:b5:74:16:9c:
05:11:cb:be:25:a4:82:bb:fe:4b:82:8e:a6:0f:c2:cb:86:33:
eb:f2:f6:11:19:5c:4f:1e:0a:bb:c5:26:1b:38:d9:58:de:97:
7b:fd:08:33:a4:e6:4c:de:7e:a3:ab:e5:0a:bc:c1:65:0c:5e:
27:df:5b:72:e2:20:fd:1e:ea:11:c2:ce:3d:a7:22:51:a8:ae:
c5:38:aa:b9:ff:2f:04:54:57:1b:a6:9f:95:b6:0a:26:51:f5:
93:1c:7f:4d:de:76:14:66:80:d5:6b:24:ba:e5:6b:d3:9c:38:
69:41:07:39:bd:f7:c8:a3:aa:4d:02:a9:aa:b8:14:f3:04:9f:
1f:64:0a:fd:c0:ad:44:23:12:6d:5d:ea:65:a9:b1:16:54:9a:
56:ae:71:d3:11:ce:80:9d:a8:fc:8e:be:58:31:77:86:8b:98:
0c:f9:ac:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:43 2025 by rpki-client