Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa
File: 3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: Ku3n4mArEtcpKd+3J53houoM1WPdSwkm7QIsH81yMIs=
Subject key identifier: 0A:72:55:4F:C1:28:D1:DD:B7:E0:5D:40:C4:FD:98:4A:00:97:23:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0318DF6DB1E8F7919BCD8DE9A302EF75009B1F54
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa
Signing time: Fri 24 Oct 2025 13:48:46 +0000
ROA not before: Fri 24 Oct 2025 13:43:46 +0000
ROA not after: Fri 23 Oct 2026 13:48:46 +0000
asID: 203380
IP address blocks: 194.107.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:18:df:6d:b1:e8:f7:91:9b:cd:8d:e9:a3:02:ef:75:00:9b:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 24 13:43:46 2025 GMT
Not After : Oct 23 13:48:46 2026 GMT
Subject: CN=0A72554FC128D1DDB7E05D40C4FD984A00972346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:e1:05:0b:04:ca:d7:9c:6b:89:cb:83:26:
da:83:1a:42:1a:1e:30:b4:02:31:a6:31:d1:67:90:
c6:7d:bf:80:4c:cb:47:88:d3:8a:40:df:20:00:ce:
5a:27:34:68:10:1a:7e:7e:d7:01:85:1e:0b:15:1a:
ef:ff:a4:5c:28:80:66:85:34:a2:87:8e:fc:39:d7:
f3:b3:69:d8:21:d3:e2:42:d9:9e:21:1f:52:45:0b:
11:6f:c7:b5:c3:2d:32:68:dd:7c:3b:37:63:0c:a6:
7e:50:5e:c0:37:e3:74:94:65:8e:03:bf:91:ac:d1:
d8:bf:df:b1:c5:bb:ef:ce:df:88:24:9f:ed:b6:d3:
55:64:79:8e:47:8e:e5:62:71:72:ce:8d:c1:58:95:
28:85:3e:1d:af:c2:71:0a:13:89:be:95:83:68:e2:
b0:9f:f1:d1:4e:68:d2:be:9b:8e:96:38:c0:2a:c0:
59:b5:d5:5a:a4:da:9e:ba:ef:dd:32:4b:41:2b:a5:
bc:cd:1f:b6:72:79:31:2c:45:33:e3:d9:77:21:3a:
8d:00:80:b5:34:4d:4f:19:85:41:f3:1f:e8:97:7d:
c3:df:7a:c4:c8:91:58:d3:64:3c:62:72:1b:e0:18:
ee:88:99:80:13:dd:94:5a:98:f9:bd:11:bd:9f:7d:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:55:4F:C1:28:D1:DD:B7:E0:5D:40:C4:FD:98:4A:00:97:23:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3130372e3136332e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:70:45:73:eb:e6:70:04:60:72:2a:cc:71:b3:18:51:10:83:
c9:ef:68:2b:7a:03:07:d8:85:97:b7:fc:a1:00:96:6b:a8:17:
7e:88:5e:8e:35:6d:4a:70:00:be:57:51:b6:26:c1:28:83:fc:
fb:d7:0c:61:e7:fb:9e:11:d3:ab:09:4d:1d:b3:bc:14:b8:38:
8e:f6:36:3b:a8:5f:f8:3b:50:2d:cf:6a:78:ac:8d:5f:02:99:
df:dd:ef:c0:6e:36:00:6d:50:1a:04:cc:f7:1e:af:fb:56:0e:
bc:00:84:f4:d4:cb:29:e2:c2:76:b4:da:68:3a:4c:56:1a:d2:
fe:1b:19:7b:74:4b:34:87:76:3f:8d:56:c6:9d:bd:57:4d:53:
1e:77:da:95:63:2e:6d:94:dd:e7:cc:7c:6a:c8:10:16:78:3f:
a3:51:ea:9d:40:2a:2a:4f:e3:90:93:ba:9c:24:e6:ef:b8:c3:
13:c0:9e:6d:3c:05:e1:1e:7b:66:5d:25:c8:a9:71:ce:8e:a6:
71:d6:31:83:7e:c6:9f:b4:57:1d:51:5f:da:3c:b5:a1:28:55:
7d:c9:e4:a1:12:a9:7d:7b:4b:94:92:a4:b8:4a:bd:d2:8a:b7:
f8:50:74:15:1e:60:89:25:ea:c5:68:be:a8:41:67:3d:15:fc:
ea:6b:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:58:40 2025 by rpki-client