Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e31362e302f32312d3234203d3e203437353833.roa
File: 3139342e3233382e31362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: CV6w+sv7qpJYFA3EKunlmaeZkqHuri/xryyKebVPxAg=
Subject key identifier: 59:19:4D:A1:4C:A5:1C:5B:2B:44:C7:E6:F4:57:37:7F:C3:13:71:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A67E991A56E3B37E5C798C131160DB09D0905E6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e31362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:18 +0000
ROA not before: Thu 15 May 2025 10:41:18 +0000
ROA not after: Thu 14 May 2026 10:46:18 +0000
asID: 47583
IP address blocks: 194.238.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:67:e9:91:a5:6e:3b:37:e5:c7:98:c1:31:16:0d:b0:9d:09:05:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:18 2025 GMT
Not After : May 14 10:46:18 2026 GMT
Subject: CN=59194DA14CA51C5B2B44C7E6F457377FC31371AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:ae:5f:39:31:2d:ae:6e:d5:7c:65:c0:37:
d1:a5:81:b8:60:e9:bf:7f:34:01:16:e8:ec:97:6f:
ae:0e:3f:e3:cd:75:cc:19:70:c7:c3:32:0e:27:d6:
6e:c9:40:e9:b6:e1:c0:2e:fe:6c:ff:9c:05:5a:97:
6d:bc:20:80:3c:13:7e:2f:c0:67:ba:ad:06:97:ab:
df:b3:11:8b:63:3e:26:dd:e4:d9:26:42:25:62:c1:
51:a9:4c:cf:20:f1:33:ac:80:33:da:64:d5:76:01:
de:f3:01:a6:6f:d8:14:46:aa:0a:f3:fa:21:81:a9:
67:84:00:c4:8c:87:b7:34:89:f2:0e:b2:6d:00:e9:
b7:e5:75:fb:2b:38:3c:88:95:b9:ab:25:fe:9d:b0:
46:a3:5d:b4:3e:a9:d5:10:04:06:ad:99:89:87:68:
82:02:ed:19:94:8c:5a:7b:58:e6:2e:2b:32:de:b0:
a1:fd:52:69:bb:f1:ab:22:6e:88:53:89:d2:07:db:
f4:10:c9:8b:62:af:fb:a9:db:3b:c3:0b:62:69:1c:
79:06:f1:84:c8:1c:71:e5:d4:c3:90:b7:a6:8f:21:
76:4e:7f:0c:95:85:1b:03:74:cb:44:54:1d:52:99:
93:34:0d:33:5e:93:4a:2a:86:da:95:f0:c7:7e:d4:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:19:4D:A1:4C:A5:1C:5B:2B:44:C7:E6:F4:57:37:7F:C3:13:71:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233382e31362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.16.0/21
Signature Algorithm: sha256WithRSAEncryption
43:6a:d8:36:05:b2:07:13:e8:6b:4a:88:25:80:ee:e6:31:14:
5c:98:2f:b2:3e:73:ea:34:b8:c5:8b:15:82:2f:2c:9c:1e:d0:
5c:04:57:22:34:50:55:55:91:69:f0:a5:0e:0f:48:ef:3d:f6:
82:93:59:e4:5b:2d:f9:b9:19:87:59:6b:bf:c6:ef:4b:5a:9f:
ef:cb:1e:fd:1f:52:3c:4f:30:e8:93:2c:a4:72:77:52:a2:d9:
6e:81:22:26:8e:cf:79:4d:d1:a8:0e:b7:f9:92:22:e3:ac:4e:
29:c5:1d:73:ec:a2:d6:9c:d8:54:b3:76:d1:33:94:f6:e4:2b:
d3:b3:df:42:29:77:eb:0b:14:7b:6a:b0:50:3f:25:fd:55:8e:
c8:ac:1e:3d:12:e0:1d:3a:cf:ab:ea:30:a7:7f:19:48:0f:4e:
86:4f:d7:04:98:56:1c:56:48:b8:7d:a1:61:54:67:5c:37:61:
9d:7e:ad:c5:a8:0a:2d:95:9d:41:d8:4f:39:51:a6:f2:e5:07:
1e:dd:af:5d:00:93:13:ce:3f:02:80:f3:16:42:0a:ce:cf:9d:
50:61:cb:aa:02:66:c3:93:36:75:80:95:59:18:7d:c6:b0:57:
16:b1:94:55:28:78:de:5f:94:53:40:f7:26:dd:02:bb:00:ec:
50:a3:e6:95
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOmfpkaVuOzflx5jBMRYNsJ0JBeYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MTUxMDQxMThaFw0yNjA1MTQxMDQ2MThaMDMxMTAvBgNV
BAMTKDU5MTk0REExNENBNTFDNUIyQjQ0QzdFNkY0NTczNzdGQzMxMzcxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY565fOTEtrm7VfGXAN9Glgbhg
6b9/NAEW6OyXb64OP+PNdcwZcMfDMg4n1m7JQOm24cAu/mz/nAVal228IIA8E34v
wGe6rQaXq9+zEYtjPibd5NkmQiViwVGpTM8g8TOsgDPaZNV2Ad7zAaZv2BRGqgrz
+iGBqWeEAMSMh7c0ifIOsm0A6bfldfsrODyIlbmrJf6dsEajXbQ+qdUQBAatmYmH
aIIC7RmUjFp7WOYuKzLesKH9Umm78asibohTidIH2/QQyYtir/up2zvDC2JpHHkG
8YTIHHHl1MOQt6aPIXZOfwyVhRsDdMtEVB1SmZM0DTNek0oqhtqV8Md+1HcZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUWRlNoUylHFsrRMfm9Fc3f8MTcawwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTM0MmUzMjMzMzgyZTMx
MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
wu4QMA0GCSqGSIb3DQEBCwUAA4IBAQBDatg2BbIHE+hrSoglgO7mMRRcmC+yPnPq
NLjFixWCLyycHtBcBFciNFBVVZFp8KUOD0jvPfaCk1nkWy35uRmHWWu/xu9LWp/v
yx79H1I8TzDokyykcndSotlugSImjs95TdGoDrf5kiLjrE4pxR1z7KLWnNhUs3bR
M5T25CvTs99CKXfrCxR7arBQPyX9VY7IrB49EuAdOs+r6jCnfxlID06GT9cEmFYc
Vki4faFhVGdcN2Gdfq3FqAotlZ1B2E85Uaby5Qce3a9dAJMTzj8CgPMWQgrOz51Q
YcuqAmbDkzZ1gJVZGH3GsFcWsZRVKHjeX5RTQPcm3QK7AOxQo+aV
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:22:03 2025 by rpki-client