Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135372e302f32342d3234203d3e20313431303339.roa
File: 322e35392e3135372e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: IXRh7bIKjY9mP9NmcFNw1dz5Lzw1Eu2zXhbmEJhsFfA=
Subject key identifier: F6:CA:8E:25:DE:AC:4F:2F:0F:49:D2:E9:18:7E:B3:12:B1:59:F8:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57BF2467928A26F888C85F884C47ADB833AF090D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135372e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 30 Jul 2025 14:47:01 +0000
ROA not before: Wed 30 Jul 2025 14:42:01 +0000
ROA not after: Wed 29 Jul 2026 14:47:01 +0000
asID: 141039
IP address blocks: 2.59.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bf:24:67:92:8a:26:f8:88:c8:5f:88:4c:47:ad:b8:33:af:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:42:01 2025 GMT
Not After : Jul 29 14:47:01 2026 GMT
Subject: CN=F6CA8E25DEAC4F2F0F49D2E9187EB312B159F857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:97:cf:99:8c:89:51:6b:02:4b:cb:87:b4:
b2:91:d5:ee:4a:54:5e:63:64:ad:04:0e:23:7f:89:
be:fb:69:09:93:87:db:7e:db:c2:3f:f0:43:5d:52:
4d:97:7d:69:51:46:71:11:04:30:85:db:07:dd:61:
25:c9:03:73:60:08:88:13:e5:c0:96:f6:4c:0c:2f:
50:ca:bb:34:14:33:26:2b:41:6b:56:b0:da:4b:43:
c4:62:aa:8b:02:8c:1d:2e:95:43:35:c2:76:6d:8c:
f6:09:94:69:b1:eb:51:64:0e:bd:74:b8:9a:00:d0:
c2:bc:3b:82:98:3c:e9:fa:24:6b:1f:18:2e:1e:79:
0f:43:c2:d9:7e:a2:60:08:b2:32:a1:b7:a5:e0:4f:
ac:d9:52:a4:13:d7:9d:e6:c6:25:47:a9:57:36:0d:
c0:ee:86:70:b6:28:85:4e:22:96:62:2a:4d:11:cd:
96:fa:5c:94:ae:cf:fd:64:e6:45:ff:f1:b5:bc:9a:
2b:76:83:c0:4e:ad:42:71:19:7f:43:53:fe:f9:14:
44:1b:70:02:bc:49:2e:2e:c9:96:1c:db:e1:ab:db:
40:21:aa:77:56:93:28:0e:c4:62:7d:a7:0c:c6:54:
87:51:e9:a8:d1:ae:4b:fb:55:98:78:54:77:8a:1f:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:8E:25:DE:AC:4F:2F:0F:49:D2:E9:18:7E:B3:12:B1:59:F8:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35392e3135372e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fc:26:2a:a2:4b:b2:bc:cb:8f:69:98:e6:e1:e7:03:3d:bf:
7c:2d:9e:99:19:4c:ff:f3:ab:d1:72:79:b3:57:60:cc:59:54:
88:f8:73:90:d4:e5:da:4c:3c:9a:8e:d8:44:e0:fd:f4:66:d4:
03:27:e2:41:6c:f8:81:84:a5:65:b0:67:71:07:ea:f9:99:37:
77:71:b8:22:d3:9b:99:af:77:0b:2e:ee:ca:7e:e2:d1:d9:84:
a1:22:b8:bd:79:8c:f3:d9:a7:b7:e9:d0:51:68:77:b2:f9:bd:
ff:8d:7e:ce:0b:13:26:e5:1f:88:1e:53:fa:d8:94:27:de:77:
09:da:3c:fe:4d:9b:24:50:f2:41:7e:2d:67:91:fd:63:de:85:
31:9b:79:2d:b1:d2:03:4f:fa:cb:cc:cf:1c:b2:e0:35:4c:29:
02:86:ab:bc:d0:f0:0f:24:02:c8:79:9e:09:15:51:fc:a9:16:
8f:1b:98:51:76:c8:df:25:7f:96:12:72:13:a8:1f:d2:60:da:
93:87:dd:a5:d0:a8:6a:a7:35:89:87:dc:41:71:bc:30:50:f1:
9b:08:b5:0d:70:72:02:a3:be:83:3a:a2:cc:07:f2:72:a2:98:
a8:e6:ad:4e:71:61:21:f8:57:bf:5c:5f:bc:db:b6:8a:6f:95:
7b:fb:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:14 2025 by rpki-client