Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa
File: 3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: VOS5SzprjBdz7GE+mdLFU+6yyBrJBjNw/aeMHb8vmEA=
Subject key identifier: 2B:33:1C:B4:BC:F1:EE:3E:BF:DB:08:84:60:E1:96:4C:32:EC:7C:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FDC1DF7060F1900895BEF9CCD5CB7F4025B0201
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:24 +0000
ROA not before: Thu 09 Oct 2025 09:02:24 +0000
ROA not after: Thu 08 Oct 2026 09:07:24 +0000
asID: 212238
IP address blocks: 195.242.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:dc:1d:f7:06:0f:19:00:89:5b:ef:9c:cd:5c:b7:f4:02:5b:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:24 2025 GMT
Not After : Oct 8 09:07:24 2026 GMT
Subject: CN=2B331CB4BCF1EE3EBFDB088460E1964C32EC7CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:91:32:fc:1e:05:58:5a:94:7f:34:9c:c1:
cc:72:5a:61:d0:fe:3d:bf:dc:b1:d4:9f:86:66:0d:
16:d0:32:06:46:08:ea:ea:d8:1f:d6:39:db:4e:78:
38:29:47:bf:d7:d7:7d:f8:21:17:75:6f:e3:d1:ae:
c4:6e:aa:7a:76:e3:8d:12:9e:55:e1:13:6f:9e:98:
a8:6b:44:5d:65:3a:ca:eb:0d:9d:6e:60:f9:4b:1b:
75:fd:10:94:4e:81:9b:b7:33:e9:d5:cb:a5:d7:99:
33:34:de:b3:03:c9:b7:9d:ab:78:01:85:cb:02:b2:
cd:d6:a6:2f:f8:0e:a5:13:79:82:ac:c8:1d:75:5b:
88:04:5b:d3:5c:39:6f:44:a7:e0:3c:2c:b2:ba:52:
e8:14:56:e9:f7:e0:32:61:e8:5a:c9:b7:fd:eb:0c:
2d:be:e4:8d:90:80:f0:b1:99:35:35:f8:de:ae:91:
e6:c8:00:2f:e2:96:e6:d0:c1:79:f2:3a:17:e2:aa:
06:6b:59:f1:4a:5e:ea:e3:56:2a:60:b7:31:fd:f4:
94:04:f1:09:13:ea:eb:ac:db:ad:f7:dd:79:a3:24:
b0:ca:9d:2b:f0:1f:a9:b3:43:e8:a0:33:ca:a6:8d:
c1:8e:8c:3e:99:ff:3c:76:fa:19:47:19:2e:af:84:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:1C:B4:BC:F1:EE:3E:BF:DB:08:84:60:E1:96:4C:32:EC:7C:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3234322e3234332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a0:be:80:64:90:5b:87:06:f3:ee:07:93:d0:78:95:e7:0e:
44:b4:1c:4b:18:0b:12:e1:37:c3:75:f6:e3:d5:6f:47:e7:f9:
02:4e:3b:46:c9:83:0c:40:54:23:dc:4f:cc:4a:35:59:3f:e3:
00:b1:19:91:c1:db:f5:1e:63:9d:2b:99:48:64:26:48:cd:66:
a2:7e:18:3b:0f:4b:86:6e:fd:10:51:d6:5c:08:25:b9:85:06:
a4:72:48:d8:4e:99:10:a8:7e:dc:4a:59:f6:38:f3:6e:1d:46:
d6:b9:16:69:ee:f7:82:a0:49:98:4e:9b:22:ee:d2:9c:18:18:
d3:58:c1:b7:7e:df:29:f6:25:67:b1:0b:21:16:dc:8b:1b:85:
90:a1:60:44:38:9c:6e:03:64:31:3f:2c:de:ca:68:40:9e:da:
83:37:07:44:04:1a:ed:3b:ba:e3:f4:13:72:e7:2f:20:43:0b:
0b:73:c6:e1:eb:f3:4d:db:af:ea:53:ef:41:19:6f:bd:93:cf:
43:4b:70:73:27:49:e0:e8:48:db:ac:ac:16:d2:82:23:7f:ba:
a1:d1:47:84:85:d2:49:4b:30:8e:ba:16:ee:f8:34:f8:7b:bc:
46:fc:7e:b4:0a:5a:c3:c1:90:c3:86:ae:26:c2:3e:cc:82:7a:
85:ea:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:29:09 2025 by rpki-client