Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3234203d3e203437353833.roa
File: 3139352e3230302e302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 4thMkiOWY8uaGTleHdx/ITvGk71c/ykDHvXWE+dwdUE=
Subject key identifier: 2A:CD:07:B3:82:39:2C:E7:87:32:EF:80:2D:11:39:BF:09:12:23:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3FF3F08CE3CC18B01EF7D49FC55CD07D07A1CDB7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3234203d3e203437353833.roa
Signing time: Thu 15 May 2025 10:46:19 +0000
ROA not before: Thu 15 May 2025 10:41:19 +0000
ROA not after: Thu 14 May 2026 10:46:19 +0000
asID: 47583
IP address blocks: 195.200.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f3:f0:8c:e3:cc:18:b0:1e:f7:d4:9f:c5:5c:d0:7d:07:a1:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 10:41:19 2025 GMT
Not After : May 14 10:46:19 2026 GMT
Subject: CN=2ACD07B382392CE78732EF802D1139BF09122329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:f4:24:0d:5b:f9:f3:c7:a2:ba:d8:b7:23:
ab:27:82:03:92:3b:63:9d:f7:96:11:18:6c:ea:7d:
65:2a:6b:a4:14:8d:c3:ab:a6:d8:0a:d1:b9:69:55:
46:ef:e4:6c:a8:ff:9e:3c:31:83:99:85:21:80:f9:
a3:5b:0a:c2:c8:74:47:0a:9a:34:f9:82:c3:a0:21:
c3:dd:14:c7:d0:c2:d9:4f:d5:74:a5:f6:94:8f:92:
99:7b:cd:37:a9:ad:e3:f4:c3:34:77:44:05:e9:8a:
fd:69:fb:60:89:1c:27:64:03:5c:a3:b2:8a:d2:c7:
93:9d:d4:33:7b:ac:19:48:07:cc:e3:ad:dc:06:84:
f6:aa:b1:04:49:ac:24:fc:ec:82:9e:26:66:00:8c:
db:97:07:55:53:55:35:1b:28:45:e4:85:d9:c3:1b:
ed:47:7a:54:b8:5b:8e:78:1e:49:22:3c:93:ac:b2:
5f:10:83:76:2d:fb:2c:ec:06:54:fa:2e:85:87:52:
1c:99:16:61:92:e3:58:0c:f4:63:21:5f:04:a3:05:
d3:29:6c:d9:6e:92:16:d9:a6:e4:cb:9c:f2:45:76:
bb:fa:14:31:9d:31:58:68:d5:91:51:ef:34:e1:12:
15:b6:13:ec:d3:98:3f:bf:4d:a6:86:8c:eb:d2:2a:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:07:B3:82:39:2C:E7:87:32:EF:80:2D:11:39:BF:09:12:23:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3230302e302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.0.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:bd:8d:f7:b0:7b:12:0a:82:68:85:fd:24:07:b8:f4:f6:97:
04:cc:b7:74:1c:55:9d:85:d9:bc:8f:82:cc:a7:55:f9:31:84:
2b:07:6a:23:45:68:59:82:f7:da:07:2c:14:58:14:d0:11:da:
4e:1c:7f:b8:ce:57:5e:ff:59:cf:e1:7f:95:38:f6:9f:97:fe:
65:0c:06:da:92:a2:86:4d:ca:15:d3:05:ba:47:52:a4:1a:ca:
5e:85:82:08:04:2d:15:45:15:66:89:d4:9b:35:dd:00:ce:be:
ed:9d:f5:ef:fe:f4:a4:f2:c3:fe:61:dc:ca:3b:c9:7c:fd:a0:
87:fb:f3:8d:e1:4b:97:76:f0:70:91:e1:a4:de:e4:d9:e9:14:
95:3f:7e:1d:1d:11:c0:1a:4b:1b:77:df:5a:05:12:fa:10:5c:
a8:c9:6b:10:67:b5:32:70:20:22:cf:e0:c0:0d:f4:3d:f4:6e:
64:a9:91:92:9e:0d:5e:1c:e4:5f:33:fd:08:25:b0:89:61:31:
22:cb:4b:a3:20:e5:6d:08:6a:df:cb:20:17:e4:ee:23:a7:98:
20:ad:c4:27:a8:9d:6c:5f:03:68:d4:d2:f9:2f:d4:3e:41:db:
b0:ff:2e:e9:a3:be:96:67:ab:2c:af:b6:e0:c3:b3:26:c2:a0:
89:8b:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:22:54 2025 by rpki-client