Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38312e302f32342d3234203d3e20323132323338.roa
File: 38322e3134392e38312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 33exPHQ7aYSW6SoKvp36ne+DdIzvmlE5pUSmJBRybpA=
Subject key identifier: FD:9E:3E:60:A9:D6:A3:34:F2:E8:A7:A8:AE:D7:31:AD:1D:8D:67:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35E0C6C3B3A6806528CCB1FF02362AC6EC65C6E3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 28 Aug 2025 08:51:29 +0000
ROA not before: Thu 28 Aug 2025 08:46:29 +0000
ROA not after: Thu 27 Aug 2026 08:51:29 +0000
asID: 212238
IP address blocks: 82.149.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e0:c6:c3:b3:a6:80:65:28:cc:b1:ff:02:36:2a:c6:ec:65:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 08:46:29 2025 GMT
Not After : Aug 27 08:51:29 2026 GMT
Subject: CN=FD9E3E60A9D6A334F2E8A7A8AED731AD1D8D675E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:64:42:51:9f:77:47:0a:db:23:96:d0:79:
ff:cb:cc:2a:54:a1:1f:aa:d0:c0:d5:e1:b1:d5:3b:
62:00:38:4a:51:d0:da:4c:20:8e:74:dc:26:ff:32:
05:d9:aa:3e:55:f3:a7:95:b7:81:4e:3d:39:06:43:
d6:a0:4b:59:5c:22:f2:14:7d:2a:34:ef:fe:76:b1:
cf:cb:31:e1:24:06:c7:ee:01:c9:5f:0f:3d:4b:58:
82:a8:f1:54:2e:23:05:b8:48:86:94:d5:96:01:b9:
73:c5:ef:a9:89:26:72:76:fa:a0:d8:dd:19:b4:c1:
34:1f:3f:af:43:c9:8f:c8:ee:a9:3c:4e:a0:d4:1c:
3a:a2:65:e7:1d:1e:c8:db:e9:06:4a:2d:a4:ec:5f:
8c:ea:3d:04:e8:3c:da:bb:8f:48:ec:0b:bb:26:ad:
4b:fc:59:34:43:03:23:be:cb:64:6f:d7:56:cf:5a:
26:d6:6d:d7:62:72:d6:8b:00:92:ad:19:a2:1a:d4:
09:2f:22:2a:45:0c:16:9f:ab:92:5a:ed:d8:82:ac:
aa:13:f3:cb:25:63:a9:1a:a3:cd:7e:46:06:66:87:
c9:53:73:62:72:2e:dc:6a:fe:e9:6e:46:6c:eb:20:
fb:f7:0b:26:63:68:ef:c7:de:2e:db:7e:2e:87:8c:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:3E:60:A9:D6:A3:34:F2:E8:A7:A8:AE:D7:31:AD:1D:8D:67:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.81.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d3:a3:9b:83:14:da:8b:9a:c9:10:91:56:b7:df:e9:e5:34:
36:51:63:b0:d2:5f:c8:a3:b5:4d:87:4c:30:b2:12:ba:b1:d3:
76:aa:2e:f1:51:43:fa:94:99:05:ca:ea:c2:f8:0e:ad:de:01:
67:4e:94:42:3e:07:d8:1b:58:6f:dc:30:c5:6c:4e:86:c0:e7:
76:09:67:43:56:a9:24:34:60:0f:b3:7f:c6:ec:ab:87:03:ea:
fc:7f:52:83:88:19:49:d8:43:42:58:79:3c:c4:62:86:19:a8:
15:33:8d:38:73:a5:e6:27:01:dd:13:98:61:30:08:e4:ee:0e:
48:ac:5d:b4:fa:28:da:18:35:17:7b:de:c1:5a:a7:3f:8a:18:
6d:67:e2:0e:5f:ea:f2:04:fd:f3:79:71:79:69:3f:1f:95:5d:
ab:03:36:0a:7b:6d:75:a8:7d:dc:c6:1d:65:17:eb:3a:0f:ff:
4d:7a:3a:0e:15:c9:5a:19:50:9b:f2:85:60:f7:d7:0b:f2:b4:
d9:1e:71:17:e7:66:df:3e:1a:dc:42:33:d5:90:b7:ba:ff:73:
f3:82:4d:65:bb:89:ed:b9:22:da:f7:23:83:ac:7d:16:49:fa:
51:dd:81:cb:0d:c8:e3:dd:08:63:3a:74:81:78:9c:d6:a9:14:
20:11:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:55:31 2025 by rpki-client