Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35362e302f32322d3234203d3e203437353833.roa
File: 3139352e33352e35362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: wIVpwouuizIACBuBrogWia8cTZvVvYAn1GojM7EcmPM=
Subject key identifier: 9A:D4:88:1B:C4:E5:01:8A:8C:5F:A6:BB:86:2B:32:B5:DF:A1:FF:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 01B3AFCBF9B7D850DA17177BCA58718C51CC22F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35362e302f32322d3234203d3e203437353833.roa
Signing time: Fri 18 Jul 2025 08:46:54 +0000
ROA not before: Fri 18 Jul 2025 08:41:54 +0000
ROA not after: Fri 17 Jul 2026 08:46:54 +0000
asID: 47583
IP address blocks: 195.35.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b3:af:cb:f9:b7:d8:50:da:17:17:7b:ca:58:71:8c:51:cc:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 18 08:41:54 2025 GMT
Not After : Jul 17 08:46:54 2026 GMT
Subject: CN=9AD4881BC4E5018A8C5FA6BB862B32B5DFA1FF18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:59:ee:35:a5:76:31:f6:c6:ec:8f:aa:ae:
2e:38:f0:83:53:d5:94:5a:6c:7e:41:6d:b6:37:26:
47:58:d9:69:2d:57:4a:b4:8c:23:30:64:45:7a:38:
ff:5d:57:1d:01:6b:69:cd:85:23:11:93:6f:10:ec:
c3:b6:76:05:56:57:e0:a1:5d:5b:c1:70:d6:fb:16:
45:06:59:16:f9:2b:73:a2:b3:f8:3e:45:a5:d9:e0:
b6:3b:27:6b:32:1f:84:4b:33:b2:21:f7:29:20:dc:
27:8e:93:fe:98:70:55:d0:d5:70:08:a1:23:f8:6c:
f1:cc:bd:47:8b:77:3d:66:83:68:e2:67:e8:a7:4c:
38:f7:6d:e9:41:dd:3e:03:94:5f:72:19:11:03:0d:
65:27:78:8d:4d:06:74:36:ff:1b:00:50:14:95:dc:
ba:34:64:00:9f:42:9c:ed:8a:b9:6d:25:47:1a:b1:
17:2c:4c:70:4b:d6:6b:d1:40:fd:0e:6b:09:4f:25:
8a:dd:7c:72:a0:17:3f:16:40:cb:65:e2:cc:24:2a:
33:3d:aa:71:22:5a:99:6f:f4:38:35:86:a6:f8:1d:
c3:3b:40:9b:84:ca:3b:1b:f0:13:ba:f2:fa:79:be:
02:e4:0d:26:e5:19:b7:37:96:17:7e:0f:a3:c8:56:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D4:88:1B:C4:E5:01:8A:8C:5F:A6:BB:86:2B:32:B5:DF:A1:FF:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
12:24:ef:8d:60:55:48:38:cf:b4:5d:c1:d6:8c:bb:45:ed:57:
8c:67:f2:ad:01:1f:14:e7:a5:c4:4f:81:37:15:3d:e2:70:64:
5e:16:37:1b:fa:15:6f:e8:61:3b:5f:89:59:ce:d2:08:15:d2:
36:84:35:25:cb:5f:77:35:ca:9d:9e:07:fe:b3:1f:f4:29:a9:
a3:50:e7:4e:f3:cf:de:a7:2b:cf:3a:a5:65:69:22:94:ef:e0:
3a:21:4f:5d:c7:78:b2:6d:d8:87:41:da:84:9e:97:6a:34:46:
da:43:39:98:a9:e9:a4:1d:8e:57:31:b9:a3:86:06:7e:8e:78:
ae:dd:75:55:f9:d3:31:76:8e:21:85:c6:7c:10:e8:de:a3:c7:
2a:3b:d3:2d:99:3f:bd:c6:0a:6f:49:d4:b0:0d:4c:22:99:d9:
9c:8f:a9:8a:8b:1a:36:0a:a0:b1:b3:eb:13:ac:34:98:f3:07:
84:45:74:33:9d:c7:38:fa:f0:51:bc:c3:05:27:be:dd:1c:81:
cf:f8:37:b4:a5:83:ea:5b:67:47:f5:a7:11:1a:d3:dc:09:26:
5f:8a:37:d0:ad:bc:56:45:bf:d6:74:73:f8:90:26:e7:28:3f:
11:0a:c2:aa:00:d3:ff:33:63:f9:4a:e7:39:d7:b7:8b:1b:e7:
58:d2:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:59:39 2025 by rpki-client