Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: w3FmSF3+cV52f5E4lsPA2xjw9LKtXFH6SltI6pkIrl4=
Subject key identifier: 93:17:4C:9E:54:A7:D2:65:67:BB:06:EB:E4:95:01:D6:29:B6:6C:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 256556CD0E9E374B4C8235DF5A7D29E766DFA3CF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 17 May 2025 07:46:23 +0000
ROA not before: Sat 17 May 2025 07:41:23 +0000
ROA not after: Sat 16 May 2026 07:46:23 +0000
asID: 136787
IP address blocks: 185.183.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 15:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:65:56:cd:0e:9e:37:4b:4c:82:35:df:5a:7d:29:e7:66:df:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 17 07:41:23 2025 GMT
Not After : May 16 07:46:23 2026 GMT
Subject: CN=93174C9E54A7D26567BB06EBE49501D629B66C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:54:68:e8:4b:e1:ff:69:a5:7b:9f:41:fb:
dc:9c:2c:0c:c1:a6:e4:92:49:6d:20:4e:42:74:d1:
8f:e5:21:99:b8:ff:a5:1e:de:83:49:33:3f:d6:cc:
a7:4f:b0:19:21:77:98:43:c7:70:6c:a7:1c:a7:43:
b7:a6:07:68:9f:c6:13:86:3a:a4:9c:df:f6:23:0e:
a8:c2:2c:35:b7:a8:40:a0:71:51:31:36:d2:79:e5:
b3:bd:ff:ef:58:22:47:07:13:31:ee:6a:3f:60:e6:
ad:59:da:58:f1:70:81:42:37:ef:07:15:bb:9f:29:
20:8a:f1:68:33:d5:9c:21:c0:87:ad:4c:41:e4:66:
a4:58:94:2a:fb:ad:8a:18:73:9a:d8:7a:48:cb:fe:
64:2c:47:1b:2c:1a:a8:84:6f:ee:b7:f7:30:e0:3b:
68:ea:fa:33:98:31:25:87:40:e2:b5:d4:a0:b1:27:
82:06:e6:12:6d:13:21:40:29:0d:d7:56:33:8c:cf:
d0:6b:b5:11:2c:0b:3a:df:cd:22:2f:9b:85:0b:eb:
a1:df:8e:f5:82:4a:3c:14:bb:b0:ac:ee:45:90:d8:
0d:2e:55:4c:35:ff:74:65:fe:d5:47:f9:51:d0:92:
27:62:8b:c3:65:23:90:72:03:ca:5c:c6:bb:9c:1f:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:17:4C:9E:54:A7:D2:65:67:BB:06:EB:E4:95:01:D6:29:B6:6C:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.55.0/24
Signature Algorithm: sha256WithRSAEncryption
40:43:d3:38:5d:6e:99:a8:e9:14:57:04:e2:f0:34:d3:9a:66:
66:34:b0:61:ec:78:38:37:f1:58:1e:c2:7b:9d:95:3b:b4:d5:
57:bd:23:d5:9c:b4:62:50:58:80:65:dc:ca:00:88:34:14:99:
4e:f1:b5:e6:52:8c:1f:be:9d:06:88:40:bd:d3:06:b9:24:6c:
38:04:55:c8:63:01:fd:10:3b:29:b2:b1:74:31:3c:31:89:be:
8e:81:97:cc:71:db:e3:8f:48:89:e6:72:cb:da:16:ce:e9:4c:
a8:c4:71:6b:7f:69:1d:1e:f2:cc:54:d2:0f:13:ac:0a:1d:c4:
e2:a9:e8:24:0a:3f:de:5f:f1:30:12:b3:13:8f:73:ec:0c:d6:
3f:d9:33:5a:e9:ee:bb:fb:0b:84:c3:ac:85:8a:13:3e:60:09:
b9:ac:eb:64:03:76:4a:69:4d:c0:9c:3e:f7:59:e5:59:ea:ee:
2b:12:27:dc:3f:c8:cf:c4:09:ad:32:43:f6:f1:a5:09:70:5a:
0d:32:0e:4a:0e:51:99:2a:37:dd:2d:09:cf:55:d2:12:cf:aa:
7d:22:91:a0:8e:37:76:4b:62:70:5c:0b:a2:f5:1e:4a:bf:f1:
09:d6:22:34:19:a2:a9:75:a4:55:c2:8d:3b:ef:72:d3:16:2b:
0f:c9:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:46:25 2025 by rpki-client