Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235302e302f32342d3332203d3e203531313637.roa
File: 34352e38352e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: vwVsFtWtx2GAERbpWx9H65YiEav7Y0ViQB3K2K4GlEk=
Subject key identifier: 38:13:1C:28:0C:13:D5:E9:E3:A9:6A:2F:16:BE:A1:07:15:86:AE:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 180B1D87463AA73248562B87F3A54CD1D2C2DC84
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235302e302f32342d3332203d3e203531313637.roa
Signing time: Wed 30 Jul 2025 14:47:01 +0000
ROA not before: Wed 30 Jul 2025 14:42:01 +0000
ROA not after: Wed 29 Jul 2026 14:47:01 +0000
asID: 51167
IP address blocks: 45.85.250.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0b:1d:87:46:3a:a7:32:48:56:2b:87:f3:a5:4c:d1:d2:c2:dc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:42:01 2025 GMT
Not After : Jul 29 14:47:01 2026 GMT
Subject: CN=38131C280C13D5E9E3A96A2F16BEA1071586AE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:32:0b:f1:5c:5d:29:0d:09:f3:ab:ab:d9:
8a:76:83:40:04:66:70:7c:c1:35:c7:86:77:ed:f1:
fb:bb:da:8d:aa:54:8d:31:25:e7:cd:90:a7:2f:05:
31:6a:04:b6:4b:c7:c5:93:b2:26:31:0c:55:63:e9:
e8:fc:b0:88:19:93:c9:5a:c6:d7:34:f8:d1:a6:2a:
50:c8:77:81:0d:2b:6d:b4:58:fe:ae:62:07:17:64:
83:da:dc:f3:bf:f6:22:cd:bc:0c:77:23:07:3a:67:
01:5f:4c:b5:20:05:f0:7f:ee:09:1b:39:b6:d8:69:
f0:5e:35:4e:51:b1:f1:c3:0c:42:d1:06:36:5d:e3:
d8:59:73:a8:e3:6c:35:f7:03:e3:53:e0:e1:cd:49:
b6:4e:fc:11:3b:da:c6:1b:49:74:96:bb:7f:f3:5f:
c8:29:f6:9c:4e:27:73:bb:0e:89:68:0e:60:d8:8b:
5d:a5:a3:6a:da:d2:f0:48:45:5a:6b:5e:df:7e:d5:
52:78:74:b7:19:6e:33:bc:9f:81:4b:bb:62:9d:7f:
11:eb:f7:e0:67:69:13:94:26:82:c8:0c:a4:ab:f4:
76:95:e6:83:dc:64:b1:1f:c6:39:43:73:9d:a4:07:
01:4f:91:93:9c:b2:d2:61:b1:14:4a:bd:e9:45:ae:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:1C:28:0C:13:D5:E9:E3:A9:6A:2F:16:BE:A1:07:15:86:AE:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:58:64:90:20:88:d6:e3:92:4f:53:17:d5:c4:e1:3e:10:68:
0d:08:82:cd:23:98:04:db:94:b2:99:87:2e:f6:4e:92:86:33:
82:d1:ba:dd:a5:8c:f1:2a:e2:1b:d8:18:1c:42:92:71:cb:8e:
6d:ad:e6:ea:2e:6d:bf:9f:36:7d:12:72:2c:a1:62:2c:b9:7d:
cd:b1:34:bd:a6:eb:99:c1:5b:ae:fc:b7:be:5c:c7:f0:7e:f6:
c5:b7:5d:09:87:44:4f:59:ae:03:41:be:60:e0:6a:64:b3:db:
26:e1:ad:41:fa:01:28:ce:ab:7d:79:bb:30:51:3e:bd:16:80:
7c:48:da:06:33:6b:0e:86:28:a0:ad:1a:70:24:41:00:ac:8e:
1f:76:3a:a8:33:ba:33:c3:db:b8:f4:ed:8b:26:d9:6f:2a:08:
90:37:12:ad:a6:f8:3a:7f:c5:21:3f:fc:09:5c:2a:da:cd:eb:
83:d1:c4:ee:ef:8f:55:1d:e6:2d:b3:ba:78:cc:7e:da:56:b8:
68:3a:39:03:ac:0d:2f:c2:16:e1:86:38:10:84:94:14:de:0e:
29:64:e9:dd:7e:a6:fa:04:26:99:11:d4:29:d1:d8:b7:05:d1:
89:92:27:d6:57:b4:f3:ed:10:aa:10:1c:62:73:62:8c:20:d6:
73:e1:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:49 2025 by rpki-client