Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa
File: 3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa (raw, json)
Hash identifier: kqCvYy9N55hYrT5qopqjhWb7eEYAOeAYDrjIZ94AGlc=
Subject key identifier: 00:44:62:4A:C1:50:3C:C4:7C:F6:DC:95:CC:24:C8:8F:09:5B:1F:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D65D01D6005AED2B480ED1AFC935D908E00DCA5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa
Signing time: Fri 16 May 2025 10:59:40 +0000
ROA not before: Fri 16 May 2025 10:54:40 +0000
ROA not after: Fri 15 May 2026 10:59:40 +0000
asID: 262287
IP address blocks: 185.187.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 15:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:65:d0:1d:60:05:ae:d2:b4:80:ed:1a:fc:93:5d:90:8e:00:dc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 16 10:54:40 2025 GMT
Not After : May 15 10:59:40 2026 GMT
Subject: CN=0044624AC1503CC47CF6DC95CC24C88F095B1FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:b3:09:36:b5:be:73:17:37:43:fa:81:c8:
e9:dc:b5:ff:5e:ee:fa:b3:61:3d:4d:21:a0:70:5b:
80:20:40:0e:47:83:d9:31:37:6a:48:3b:00:e9:28:
95:43:92:29:8e:0d:d2:d3:b7:83:05:c1:e3:ea:71:
b2:a4:5c:bb:51:8b:38:90:da:20:43:ef:34:58:77:
1b:9d:a2:b4:7b:6f:51:42:db:f2:e3:f7:f6:a5:0e:
28:f5:27:40:a6:8b:2b:f2:4a:36:39:a9:8c:80:8a:
d4:28:d0:f9:f2:d4:3a:a4:7c:15:f5:cc:9c:90:a2:
cb:e8:4c:bd:11:d4:ff:05:bf:bb:05:11:18:8c:4d:
44:0c:43:d7:bd:6a:57:2c:99:8b:2a:55:82:34:42:
5c:49:50:8a:05:01:c4:a3:ca:b3:d5:b9:d2:9e:10:
ab:1a:16:26:17:60:72:44:d4:01:a7:a3:83:15:10:
4f:44:59:ff:21:62:c7:ed:74:ea:ee:68:e1:79:0e:
e7:17:b3:fa:62:73:93:d7:60:54:ec:ee:39:78:6d:
07:0c:86:26:22:67:cb:ed:ad:7c:70:04:af:23:4b:
9b:4f:8c:58:2f:1d:52:63:9a:af:44:31:5a:b0:b3:
3c:ed:a2:09:d2:7b:fc:b9:62:21:f2:53:93:72:70:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:62:4A:C1:50:3C:C4:7C:F6:DC:95:CC:24:C8:8F:09:5B:1F:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233332e302f32342d3234203d3e20323632323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.233.0/24
Signature Algorithm: sha256WithRSAEncryption
09:aa:f1:87:61:c1:99:04:65:88:e4:e5:71:83:51:b0:c6:d4:
2c:4f:19:e8:62:15:4e:0a:15:b0:ce:db:46:ea:2a:3c:84:d6:
08:38:57:1f:09:c7:1e:f4:ac:47:14:6b:bf:4c:1e:79:cf:46:
10:5c:07:51:03:4d:43:dc:e5:c1:46:39:68:f9:72:17:62:63:
27:12:a4:89:1a:1a:74:8c:10:19:33:69:6a:7e:df:3e:3f:90:
6d:d9:cc:31:c4:8b:1f:85:aa:2b:81:3a:58:a7:83:e9:4e:94:
58:4c:55:6f:5d:75:69:b7:ab:31:bb:e4:fa:1c:db:cc:cf:ba:
1a:94:e7:2a:8f:83:dc:fa:92:b1:bb:00:dc:fc:9d:55:75:21:
29:2f:c6:1f:d3:1d:f5:a6:cb:a5:c4:c2:ec:71:ee:14:f5:18:
51:46:0b:aa:0b:1c:1e:3f:e8:66:23:3c:50:f9:2b:ed:e7:86:
d0:b4:68:6a:26:b9:d2:e1:bd:73:2c:9d:cc:1d:71:1d:92:b9:
c6:0e:0e:c8:60:b8:98:80:fc:8a:5f:c3:d6:d3:04:a8:11:b0:
bb:8c:fd:2a:8e:56:8f:ce:02:e1:de:3a:9e:48:11:34:96:82:
55:da:06:6a:7a:ab:78:d6:c5:ab:c9:8c:a1:b5:c2:18:b8:da:
26:c5:d7:48
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUHWXQHWAFrtK0gO0a/JNdkI4A3KUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MTYxMDU0NDBaFw0yNjA1MTUxMDU5NDBaMDMxMTAvBgNV
BAMTKDAwNDQ2MjRBQzE1MDNDQzQ3Q0Y2REM5NUNDMjRDODhGMDk1QjFGRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDek7MJNrW+cxc3Q/qByOnctf9e
7vqzYT1NIaBwW4AgQA5Hg9kxN2pIOwDpKJVDkimODdLTt4MFwePqcbKkXLtRiziQ
2iBD7zRYdxudorR7b1FC2/Lj9/alDij1J0CmiyvySjY5qYyAitQo0Pny1DqkfBX1
zJyQosvoTL0R1P8Fv7sFERiMTUQMQ9e9alcsmYsqVYI0QlxJUIoFAcSjyrPVudKe
EKsaFiYXYHJE1AGno4MVEE9EWf8hYsftdOruaOF5DucXs/pic5PXYFTs7jl4bQcM
hiYiZ8vtrXxwBK8jS5tPjFgvHVJjmq9EMVqwszztognSe/y5YiHyU5NycA9NAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUAERiSsFQPMR89tyVzCTIjwlbH9YwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzcyZTMy
MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMyMzgzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALm76TANBgkqhkiG9w0BAQsFAAOCAQEACarxh2HBmQRliOTlcYNRsMbULE8Z
6GIVTgoVsM7bRuoqPITWCDhXHwnHHvSsRxRrv0weec9GEFwHUQNNQ9zlwUY5aPly
F2JjJxKkiRoadIwQGTNpan7fPj+QbdnMMcSLH4WqK4E6WKeD6U6UWExVb111aber
Mbvk+hzbzM+6GpTnKo+D3PqSsbsA3PydVXUhKS/GH9Md9abLpcTC7HHuFPUYUUYL
qgscHj/oZiM8UPkr7eeG0LRoaia50uG9cyydzB1xHZK5xg4OyGC4mID8il/D1tME
qBGwu4z9Ko5Wj84C4d46nkgRNJaCVdoGanqreNbFq8mMobXCGLjaJsXXSA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:41:16 2025 by rpki-client