Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32322e302f32342d3234203d3e20323038343238.roa
File: 38302e37352e32322e302f32342d3234203d3e20323038343238.roa (raw, json)
Hash identifier: aLiF80acH6Yh/w5L7TCt1SZxTiLDu4gIZ3hxbpvNkr4=
Subject key identifier: FF:CF:A2:30:0E:67:E1:72:A7:2C:04:3A:60:2F:4D:B1:48:2D:4E:C5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2204C58CD3E4913B93A861569A6C4970011761D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32322e302f32342d3234203d3e20323038343238.roa
Signing time: Tue 04 Mar 2025 09:45:47 +0000
ROA not before: Tue 04 Mar 2025 09:40:47 +0000
ROA not after: Tue 03 Mar 2026 09:45:47 +0000
asID: 208428
IP address blocks: 80.75.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:04:c5:8c:d3:e4:91:3b:93:a8:61:56:9a:6c:49:70:01:17:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:40:47 2025 GMT
Not After : Mar 3 09:45:47 2026 GMT
Subject: CN=FFCFA2300E67E172A72C043A602F4DB1482D4EC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:a9:2f:71:ba:b6:80:c7:c9:ef:5d:5b:e5:
e2:b3:d8:ac:9f:dd:62:65:bd:9b:b6:a8:7e:a3:a0:
6b:29:34:11:52:b3:9b:6c:e1:4e:e4:cb:ea:f5:92:
8d:7b:c4:07:95:c0:70:12:da:b7:62:e2:a8:ba:f5:
00:2f:40:b8:20:ad:9f:3a:e6:37:ec:7b:6f:18:c1:
e4:3a:32:86:ce:84:96:7a:6d:b8:ea:5e:0b:08:75:
d1:b4:5c:3d:a3:82:86:cb:4d:ec:03:d3:6d:e0:9f:
17:b2:55:8e:ba:40:87:b4:4e:44:42:b5:bd:1b:14:
e0:06:fc:4c:02:35:0a:33:fe:a1:c4:89:b9:03:19:
01:c4:43:7b:e5:7d:eb:35:fa:5c:d4:fc:a2:b0:d6:
42:28:b9:fc:2d:05:8f:72:43:93:37:f3:0a:9e:00:
54:28:3a:ca:07:46:d0:c2:b1:f6:b8:70:17:3d:a2:
93:51:91:65:54:7c:7d:bd:ca:8f:60:75:06:7a:e9:
d1:e8:de:6e:b3:cb:71:f2:a4:7e:f6:4d:8f:7b:4d:
49:97:c8:27:6d:aa:33:8b:4f:eb:23:02:cd:12:8b:
f2:3c:97:61:b5:40:b5:b5:e9:ce:b0:5c:d1:ee:e9:
17:c1:70:b6:0f:50:a5:be:e7:b0:b8:ce:03:73:bd:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CF:A2:30:0E:67:E1:72:A7:2C:04:3A:60:2F:4D:B1:48:2D:4E:C5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32322e302f32342d3234203d3e20323038343238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.22.0/24
Signature Algorithm: sha256WithRSAEncryption
93:01:35:76:fc:38:ad:02:09:2c:21:c2:53:88:33:49:3b:a0:
db:bb:c2:e2:5d:ea:9a:ca:5c:b3:f9:7a:e1:a4:3d:e9:a1:dd:
5b:f2:c9:b8:eb:09:34:89:59:f4:e9:39:71:14:cd:91:d8:4c:
2c:d2:41:57:25:4e:7c:1b:39:98:88:f5:99:db:a8:b5:45:b7:
7f:15:33:df:8a:25:23:2d:2b:44:4b:a0:8d:3e:48:cb:1e:b5:
67:58:61:78:a9:68:49:66:a5:3e:06:be:46:41:97:e2:cb:5d:
6e:fb:85:e7:5b:9e:67:5a:9a:f6:27:93:a0:32:5c:7f:45:26:
35:e0:67:f0:0f:96:a5:ab:06:ff:7a:ef:cf:15:f3:d2:9a:29:
65:6f:fd:d0:f6:3a:ff:0c:fd:88:25:66:ed:70:b7:86:67:1c:
7b:6d:f4:41:a0:ec:ef:0f:a6:ce:be:31:4d:9d:fb:cc:0a:87:
2c:d6:f0:e0:02:c0:94:3f:69:fb:20:40:c5:0e:f7:76:1e:58:
e8:48:62:79:b5:8d:5a:bc:fb:74:96:7c:20:7e:47:db:f3:60:
7e:39:c9:3a:53:8b:17:73:44:1c:c6:50:5d:91:b7:6b:89:43:
8e:80:eb:c1:fc:91:72:b2:72:ed:f6:a4:fc:d6:a1:e2:5c:30:
80:20:94:dc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIgTFjNPkkTuTqGFWmmxJcAEXYdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAzMDQwOTQwNDdaFw0yNjAzMDMwOTQ1NDdaMDMxMTAvBgNV
BAMTKEZGQ0ZBMjMwMEU2N0UxNzJBNzJDMDQzQTYwMkY0REIxNDgyRDRFQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6qkvcbq2gMfJ711b5eKz2Kyf
3WJlvZu2qH6joGspNBFSs5ts4U7ky+r1ko17xAeVwHAS2rdi4qi69QAvQLggrZ86
5jfse28YweQ6MobOhJZ6bbjqXgsIddG0XD2jgobLTewD023gnxeyVY66QIe0TkRC
tb0bFOAG/EwCNQoz/qHEibkDGQHEQ3vlfes1+lzU/KKw1kIoufwtBY9yQ5M38wqe
AFQoOsoHRtDCsfa4cBc9opNRkWVUfH29yo9gdQZ66dHo3m6zy3HypH72TY97TUmX
yCdtqjOLT+sjAs0Si/I8l2G1QLW16c6wXNHu6RfBcLYPUKW+57C4zgNzvVcDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/8+iMA5n4XKnLAQ6YC9NsUgtTsUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMDJlMzczNTJlMzIzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODM0MzIzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBL
FjANBgkqhkiG9w0BAQsFAAOCAQEAkwE1dvw4rQIJLCHCU4gzSTug27vC4l3qmspc
s/l64aQ96aHdW/LJuOsJNIlZ9Ok5cRTNkdhMLNJBVyVOfBs5mIj1mduotUW3fxUz
34olIy0rREugjT5Iyx61Z1hheKloSWalPga+RkGX4stdbvuF51ueZ1qa9ieToDJc
f0UmNeBn8A+WpasG/3rvzxXz0popZW/90PY6/wz9iCVm7XC3hmcce230QaDs7w+m
zr4xTZ37zAqHLNbw4ALAlD9p+yBAxQ73dh5Y6EhiebWNWrz7dJZ8IH5H2/NgfjnJ
OlOLF3NEHMZQXZG3a4lDjoDrwfyRcrJy7fak/Nah4lwwgCCU3A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:58 2025 by rpki-client