Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31362e302f32302d3332203d3e203531313637.roa
File: 38362e34382e31362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: oYD63nU0juWF0UdumQh7B8L5fHz7v0/j9Il7FZAXaO0=
Subject key identifier: CF:28:C7:33:EE:60:98:58:60:8A:EB:DB:0A:E0:27:7A:76:7B:A8:99
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 562872E5ED262C44CD33151F9EF639040B12E3B0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31362e302f32302d3332203d3e203531313637.roa
Signing time: Fri 23 May 2025 08:46:26 +0000
ROA not before: Fri 23 May 2025 08:41:26 +0000
ROA not after: Fri 22 May 2026 08:46:26 +0000
asID: 51167
IP address blocks: 86.48.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 12:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:28:72:e5:ed:26:2c:44:cd:33:15:1f:9e:f6:39:04:0b:12:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 23 08:41:26 2025 GMT
Not After : May 22 08:46:26 2026 GMT
Subject: CN=CF28C733EE609858608AEBDB0AE0277A767BA899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:13:8f:3c:fa:c2:93:67:63:29:85:de:99:
26:1c:78:83:5f:4d:13:0f:03:18:c7:6f:9c:4f:2b:
64:b0:82:31:48:17:a0:bc:a5:52:0a:b7:4a:76:e1:
ba:93:b7:4a:a0:3b:26:2b:4b:df:17:4a:b5:58:96:
d1:b2:f1:45:5b:cb:80:ad:91:54:f3:b8:59:36:0a:
a8:64:28:57:19:fe:d5:1e:79:d0:e6:33:b3:0e:ff:
72:30:f0:11:fe:a2:0b:cf:41:60:0e:5f:c4:2d:3c:
d4:01:22:30:9e:82:81:1e:41:1f:ba:f9:e0:bc:0f:
9b:f6:ad:7b:29:89:c0:14:72:64:80:34:8e:ad:b4:
c8:f7:9c:a6:74:9c:46:21:24:27:53:b1:b6:8d:b6:
f5:bc:39:00:1d:dd:45:32:14:96:65:14:19:45:86:
40:ac:1e:bd:62:76:0d:92:cb:24:34:b9:06:4a:30:
ed:32:42:d4:c3:c1:b9:67:c9:bc:fa:0a:de:21:b2:
12:86:80:01:5a:37:f4:99:3e:1a:d1:b8:71:17:a7:
67:25:30:e2:d6:06:67:a6:f6:a7:d5:e6:77:eb:85:
85:34:8b:3b:25:01:ad:dc:d0:87:99:95:67:ac:15:
d1:6c:36:db:a6:05:01:70:a3:b5:9c:8a:af:db:67:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:C7:33:EE:60:98:58:60:8A:EB:DB:0A:E0:27:7A:76:7B:A8:99
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31362e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.16.0/20
Signature Algorithm: sha256WithRSAEncryption
83:19:82:38:ee:00:eb:03:a5:85:8e:88:da:49:f1:46:a4:08:
fe:96:0b:9f:94:65:d2:09:5c:80:24:dc:fb:69:4c:a6:64:7b:
ce:0a:6e:1e:0e:54:e9:38:df:f6:67:ca:b3:b8:48:dc:c1:e9:
0e:c2:d1:b7:af:37:61:f3:db:60:ba:6c:bb:88:5d:75:c5:02:
d2:ba:22:c1:70:4c:05:19:ec:c9:a2:7f:99:93:6b:3d:0d:61:
05:b5:7e:f5:89:62:9d:26:54:fb:05:a8:02:ad:59:b7:b0:a7:
a5:c1:7e:b5:de:e2:71:e6:8f:6f:98:4d:8b:82:f5:c7:87:4d:
57:9a:d1:ff:e0:8b:18:f3:72:24:f7:98:da:69:53:72:e5:76:
b1:21:5f:b0:da:2f:16:82:fb:ea:dd:b6:32:df:41:86:7c:c2:
2d:52:81:77:d5:2d:dd:92:4d:f8:30:c0:22:8e:df:94:90:c3:
47:43:cb:e9:52:dc:ad:78:a4:8e:dc:e9:69:20:81:06:97:98:
97:74:7c:2f:c2:a3:31:7e:f2:4e:54:e5:fa:8c:ad:31:7a:c6:
38:7f:0f:71:fc:91:e1:a1:fb:86:27:2f:57:62:51:1e:2e:5a:
55:d6:8f:50:15:8c:e6:cf:4e:8e:a9:48:c9:9c:ad:7a:a9:d8:
89:f5:10:21
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUVihy5e0mLETNMxUfnvY5BAsS47AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MjMwODQxMjZaFw0yNjA1MjIwODQ2MjZaMDMxMTAvBgNV
BAMTKENGMjhDNzMzRUU2MDk4NTg2MDhBRUJEQjBBRTAyNzdBNzY3QkE4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69hOPPPrCk2djKYXemSYceINf
TRMPAxjHb5xPK2SwgjFIF6C8pVIKt0p24bqTt0qgOyYrS98XSrVYltGy8UVby4Ct
kVTzuFk2CqhkKFcZ/tUeedDmM7MO/3Iw8BH+ogvPQWAOX8QtPNQBIjCegoEeQR+6
+eC8D5v2rXspicAUcmSANI6ttMj3nKZ0nEYhJCdTsbaNtvW8OQAd3UUyFJZlFBlF
hkCsHr1idg2SyyQ0uQZKMO0yQtTDwblnybz6Ct4hshKGgAFaN/SZPhrRuHEXp2cl
MOLWBmem9qfV5nfrhYU0izslAa3c0IeZlWesFdFsNtumBQFwo7Wciq/bZ4PJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUzyjHM+5gmFhgiuvbCuAnenZ7qJkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzEzNjJl
MzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARWMBAw
DQYJKoZIhvcNAQELBQADggEBAIMZgjjuAOsDpYWOiNpJ8UakCP6WC5+UZdIJXIAk
3PtpTKZke84Kbh4OVOk43/ZnyrO4SNzB6Q7C0bevN2Hz22C6bLuIXXXFAtK6IsFw
TAUZ7Mmif5mTaz0NYQW1fvWJYp0mVPsFqAKtWbewp6XBfrXe4nHmj2+YTYuC9ceH
TVea0f/gixjzciT3mNppU3LldrEhX7DaLxaC++rdtjLfQYZ8wi1SgXfVLd2STfgw
wCKO35SQw0dDy+lS3K14pI7c6WkggQaXmJd0fC/CozF+8k5U5fqMrTF6xjh/D3H8
keGh+4YnL1diUR4uWlXWj1AVjObPTo6pSMmcrXqp2In1ECE=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:40 2025 by rpki-client