Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233322e302f32312d3332203d3e203531313637.roa
File: 38352e3233392e3233322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: dFPyaBP/LVXiBi0ulTW7CSycKSQp9wpKc0wpoFpZ55s=
Subject key identifier: 34:76:64:0B:3F:1A:B2:4F:FC:83:AC:AB:D6:55:3F:54:93:B0:2E:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 147FB6EA0EF7D14C14B3243E28266BB8D5267ECD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233322e302f32312d3332203d3e203531313637.roa
Signing time: Fri 23 May 2025 08:46:27 +0000
ROA not before: Fri 23 May 2025 08:41:27 +0000
ROA not after: Fri 22 May 2026 08:46:27 +0000
asID: 51167
IP address blocks: 85.239.232.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 17:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7f:b6:ea:0e:f7:d1:4c:14:b3:24:3e:28:26:6b:b8:d5:26:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 23 08:41:27 2025 GMT
Not After : May 22 08:46:27 2026 GMT
Subject: CN=3476640B3F1AB24FFC83ACABD6553F5493B02E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:65:4c:e5:6e:26:88:e7:96:c5:61:57:d1:
79:d8:d7:ed:88:c2:05:ca:7c:0d:b5:f5:72:28:15:
a9:60:c3:2d:19:7d:a8:ca:9e:40:42:86:8b:c7:c7:
cd:c9:0d:cd:e7:a6:d1:89:da:e1:7e:d4:36:57:81:
5d:2d:bf:6c:ec:42:9f:5b:5e:51:75:9f:b1:ef:51:
1b:39:3a:bb:d9:53:8e:e4:80:1d:44:42:8e:53:e9:
44:ed:28:a5:87:fa:90:d5:38:cd:b9:69:2a:b4:cb:
f1:d2:98:3a:f2:d0:33:70:8c:7e:70:89:5a:1b:0b:
da:df:a4:be:eb:16:05:aa:02:df:2e:e3:72:0f:23:
c7:54:fc:92:51:5f:20:b5:d0:b1:51:e3:a1:64:3e:
10:b2:52:8f:72:2e:5c:65:5b:af:59:8d:48:31:9b:
38:64:4e:4c:36:bd:f9:ff:7c:a7:3e:43:09:65:5c:
5a:13:d6:ba:d4:ab:7f:76:0a:13:2d:72:87:ef:e0:
0f:4e:4a:cf:b5:43:c0:5e:30:58:92:54:f8:76:37:
26:4c:98:9d:45:a1:98:0c:b9:76:7e:27:4f:de:fa:
73:06:36:47:85:f5:29:a3:cf:fe:eb:4b:d8:73:ca:
6d:c2:0d:bc:9f:75:ff:ae:7e:59:8f:89:14:68:c2:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:64:0B:3F:1A:B2:4F:FC:83:AC:AB:D6:55:3F:54:93:B0:2E:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:cf:6a:00:76:bc:b7:a1:76:86:a8:f5:76:20:31:34:1a:c4:
1e:5a:91:8e:5f:cb:a4:70:66:3e:20:9c:c3:06:b5:d7:4b:b8:
46:d4:a5:59:8c:e0:67:b0:0b:4c:6e:55:d7:67:0e:15:22:2b:
ae:29:58:08:bd:e5:42:d6:a2:3e:7a:07:e2:d6:71:03:fa:29:
3f:3e:2f:17:b9:41:08:32:32:68:8b:de:94:3a:95:c4:77:16:
90:e0:be:a6:bf:e3:7d:15:58:de:85:36:d1:b4:21:5c:44:af:
25:a3:b3:b3:bb:ea:c7:5c:39:39:2d:2a:c9:58:f1:9f:de:96:
39:1a:9a:66:66:ef:b5:ff:03:7f:bc:34:ce:f3:73:97:f9:4e:
20:cb:51:fe:fa:39:64:82:79:39:2f:3b:c5:e4:4b:59:3b:18:
d3:22:29:4a:89:96:9d:d2:59:dd:99:f4:15:60:62:c4:b0:09:
80:23:8e:de:5f:bb:54:08:f8:e9:dc:a0:75:a8:7a:94:92:01:
cd:4b:3c:39:d1:f7:0c:a3:92:c4:2a:67:49:75:f5:cc:e9:19:
da:1f:bb:45:13:f8:aa:27:df:90:04:6c:ac:82:7e:00:6d:17:
bb:44:b6:f4:63:e4:15:f3:09:d0:4c:ee:26:8f:49:1b:c0:2d:
2e:cd:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:19:43 2025 by rpki-client