Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20323034313730.roa
File: 3138352e3234352e3138312e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: FvMt0rSSCk01YAd3TM8CqDDlBPxhlU75MeRjUwxuS+A=
Subject key identifier: 12:9B:82:C2:5A:89:BF:FA:99:A7:8B:3B:B2:61:A1:29:0C:E2:F4:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B7F787801501957F9EB12B0B82C3F750B37B008
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 27 May 2025 22:46:29 +0000
ROA not before: Tue 27 May 2025 22:41:29 +0000
ROA not after: Tue 26 May 2026 22:46:29 +0000
asID: 204170
IP address blocks: 185.245.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7f:78:78:01:50:19:57:f9:eb:12:b0:b8:2c:3f:75:0b:37:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 27 22:41:29 2025 GMT
Not After : May 26 22:46:29 2026 GMT
Subject: CN=129B82C25A89BFFA99A78B3BB261A1290CE2F4D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:3c:15:de:66:30:7c:04:1f:4a:6b:5b:9b:
aa:76:10:df:43:5f:dc:0a:65:58:4f:7d:f4:f9:a5:
95:d4:64:5d:2f:19:81:54:84:cb:1d:27:3e:67:46:
e2:51:6d:cc:98:eb:6a:07:7e:55:33:85:b8:5a:63:
84:52:29:9b:f8:fb:28:10:69:4b:22:ea:cb:a2:b0:
39:a7:c0:11:6a:98:f1:bb:08:6f:1d:40:df:dc:05:
47:38:af:db:5f:b6:e0:a8:8d:49:a2:32:01:a4:38:
e6:e6:ea:8d:4c:5f:c1:2c:ba:ee:46:c1:ae:7b:89:
a0:24:c4:25:5c:f0:c9:1a:b4:6f:be:20:90:04:fd:
c1:c0:26:e1:f3:8a:b2:c9:12:01:15:4a:41:68:83:
15:5b:b4:ed:f5:63:17:9b:a5:e1:e2:44:85:5b:01:
07:d2:45:52:f4:d0:c5:a2:84:64:ae:26:dc:5b:0f:
e6:72:85:8a:72:77:53:66:7b:0f:54:ee:67:65:30:
98:1f:c4:7b:80:b4:f0:0a:28:39:d4:d9:e0:77:33:
c4:f1:2a:a5:f6:9c:4f:7a:00:5f:a5:a0:04:ec:24:
f1:ce:14:0f:61:59:6e:e5:26:17:13:78:bd:0c:21:
79:39:35:9d:1b:f0:31:a6:2d:0d:19:02:e2:06:22:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9B:82:C2:5A:89:BF:FA:99:A7:8B:3B:B2:61:A1:29:0C:E2:F4:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234352e3138312e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:8e:5b:ee:b7:78:2a:50:32:50:f6:e0:32:6c:9c:97:26:8b:
58:46:c1:eb:07:41:17:07:20:64:20:e1:b3:4f:fd:2d:85:bd:
17:51:ed:90:93:d5:8b:40:42:c6:e3:48:23:80:e5:54:2e:92:
5e:96:c7:40:63:4b:f7:e8:37:9c:e3:ab:f1:00:0f:51:6a:5a:
92:27:50:64:b9:df:67:b9:59:ab:b8:2d:9b:5c:1f:df:e0:f5:
6e:29:cd:4a:50:3e:18:b0:fd:c0:d1:6c:3b:89:12:4b:ad:3e:
d2:07:38:66:3b:38:cc:f5:fe:9a:03:52:52:b9:45:70:fc:ae:
ed:2e:46:f8:6a:d7:6f:5b:03:db:53:56:24:c4:35:f6:15:dc:
36:9a:60:49:04:18:85:bb:a3:e5:ca:e7:6d:9e:a6:1b:74:88:
1e:58:e1:26:01:66:ef:c9:23:1a:87:76:a4:83:1b:47:e3:53:
b2:3d:f9:89:c4:33:0f:6e:e9:da:da:03:7e:0c:fd:51:5f:1a:
60:45:a1:a4:83:e7:7d:7f:9c:94:53:4f:b2:7f:f2:e3:ec:f2:
b1:46:ad:81:61:24:1a:c9:4e:16:79:63:66:af:4f:c1:6d:5e:
8b:5b:b6:f4:2e:fd:97:57:a1:4e:f9:2b:f0:4b:ab:99:47:ce:
3d:d9:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:30:34 2025 by rpki-client