Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa
File: 3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 11aqnzgLH8oL+NQXk83bSkxd5H30FBc2+m5cnXx9sS4=
Subject key identifier: 00:9B:99:AB:E9:B6:2A:1C:EA:11:62:73:AB:52:C5:6A:F0:69:ED:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 75AD78A429A19297BD01A7A12145DD4824FAEB6B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 21 Oct 2025 13:22:42 +0000
ROA not before: Tue 21 Oct 2025 13:17:42 +0000
ROA not after: Tue 20 Oct 2026 13:22:42 +0000
asID: 212238
IP address blocks: 185.187.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ad:78:a4:29:a1:92:97:bd:01:a7:a1:21:45:dd:48:24:fa:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 21 13:17:42 2025 GMT
Not After : Oct 20 13:22:42 2026 GMT
Subject: CN=009B99ABE9B62A1CEA116273AB52C56AF069ED33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:f4:d3:18:15:82:fc:6e:54:d9:ac:47:b8:
6f:7e:84:6d:43:04:75:a3:f7:10:70:6e:34:ed:dd:
31:c5:5a:0e:46:60:7b:65:bb:69:ac:07:44:97:42:
ef:eb:e9:0a:ff:6f:1f:46:59:06:d8:e4:5d:66:14:
25:6d:70:6f:07:9f:ed:0f:2a:7b:4c:c6:30:79:ad:
00:f6:4e:88:57:ee:e4:26:5a:40:ed:75:31:11:7f:
be:d3:13:57:23:68:89:a1:64:a8:67:37:47:0f:c0:
cc:26:df:06:43:dc:45:96:bc:1b:cb:13:d6:c9:45:
19:b4:a2:ca:fa:c7:e6:a2:22:8c:28:26:0e:13:19:
8c:ed:bc:f1:82:c7:f6:09:c8:4d:43:c0:bd:aa:b0:
2c:b8:f6:89:86:2b:d3:c1:5d:1a:f4:87:02:7e:d2:
aa:0b:ea:9d:bf:91:ff:94:91:05:c0:05:8d:93:67:
42:69:88:a4:0a:d6:b1:a5:ce:65:f3:ea:78:af:39:
f6:be:a0:44:22:50:3d:de:db:e6:16:f8:54:7e:8e:
04:0d:1f:aa:8e:59:41:d0:ba:e5:13:98:b4:93:46:
7c:ec:d1:14:30:12:74:91:41:4f:82:d4:b3:46:e4:
1b:96:75:a0:b4:5e:3d:9a:91:5c:66:f1:53:3a:51:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:99:AB:E9:B6:2A:1C:EA:11:62:73:AB:52:C5:6A:F0:69:ED:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3136382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.168.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2d:bc:3c:9b:54:41:ad:ea:ba:d0:7c:f5:80:39:a6:24:ea:
a5:6e:ec:92:dc:b8:d9:32:54:bf:49:36:6c:11:5c:04:2a:93:
1f:5a:b8:b0:87:e8:c8:7a:fc:26:be:16:df:f1:5c:c6:ad:c1:
32:8b:77:59:ff:10:a3:3a:fc:55:a9:54:0f:f6:fe:cd:ee:fa:
6b:d8:c5:f8:9a:9d:03:ab:8b:0c:4c:42:32:c9:b7:06:dd:b8:
83:64:60:5a:23:c2:3a:9f:18:0b:91:4e:2c:0d:71:93:e2:78:
99:38:93:e6:08:ec:32:6c:1b:0e:31:90:3b:a2:0a:01:85:b9:
7c:b6:d3:c5:c6:2f:6c:db:1d:b9:92:8b:30:3d:ae:f7:d6:d3:
24:ee:4a:81:ef:7c:da:bb:32:f8:e1:49:e0:a4:10:2c:bd:2b:
64:6a:3d:b5:70:12:cc:15:38:30:7d:b1:a8:0d:9e:50:4a:c9:
f2:e9:9c:8b:c8:b6:24:3e:65:c4:9e:57:af:f8:be:d1:86:b7:
24:c9:8d:71:ca:60:9e:1a:5e:f0:ea:76:dd:4a:ca:d1:95:d8:
3e:b3:26:6a:93:eb:fc:d8:d5:48:c3:64:ca:ff:62:1e:2e:73:
1d:d9:dc:76:01:75:d2:3c:d6:3f:28:5e:3c:1e:e6:4f:d6:b3:
3c:9d:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:48:30 2025 by rpki-client