Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233342e302f32342d3234203d3e20313336373837.roa
File: 38352e3139302e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ugUkXllLrbfLA1nlpZd93eAphE1nPw+isoMjUFMfjUE=
Subject key identifier: A1:FE:F6:05:90:B8:A9:31:98:7B:7D:EC:D0:55:5C:A5:67:FA:A6:EA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3C592759F8E4A94B11128C614D69F6F8771CF349
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 05 Mar 2025 19:45:50 +0000
ROA not before: Wed 05 Mar 2025 19:40:50 +0000
ROA not after: Wed 04 Mar 2026 19:45:50 +0000
asID: 136787
IP address blocks: 85.190.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 12:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:59:27:59:f8:e4:a9:4b:11:12:8c:61:4d:69:f6:f8:77:1c:f3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 5 19:40:50 2025 GMT
Not After : Mar 4 19:45:50 2026 GMT
Subject: CN=A1FEF60590B8A931987B7DECD0555CA567FAA6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:52:04:ba:f1:95:41:70:b7:ab:77:81:be:
08:da:be:55:c1:3b:14:a6:7e:eb:12:e0:8d:61:cb:
b4:b7:16:3c:ac:97:ca:5d:63:95:40:1f:b3:b4:6b:
71:18:4a:e9:63:17:cb:34:ec:8a:52:22:c5:7b:cc:
5f:4c:8a:31:18:48:4b:58:3b:ff:69:88:0d:8c:2d:
c4:56:85:ad:85:9e:2b:cb:e7:02:24:61:08:45:7d:
cf:fb:45:11:b4:09:63:11:7b:ea:23:ab:f3:1c:01:
bb:61:7e:c2:39:ee:f1:c8:a6:0a:7e:6d:6d:56:94:
82:7f:b6:07:c5:8c:56:69:9a:58:46:80:01:9b:9c:
ab:d2:1d:ca:df:e5:2a:0f:23:1c:7a:b4:65:27:35:
1a:a4:d5:83:60:e6:9f:dd:55:81:cf:f3:54:06:5f:
89:54:1b:b8:8a:9a:54:f4:35:ac:9a:b8:7e:d4:10:
71:8c:9b:67:68:e2:f5:ef:21:90:1d:8e:36:9d:2e:
e5:e3:03:64:bd:89:f8:f9:90:24:6a:97:fa:55:54:
de:79:cc:42:a3:86:95:d0:e3:bb:b7:09:d1:e4:ee:
42:55:98:d9:18:69:05:66:a3:74:9f:0c:32:2e:83:
e1:4f:63:07:12:38:40:1f:8e:6b:89:34:50:21:4c:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:F6:05:90:B8:A9:31:98:7B:7D:EC:D0:55:5C:A5:67:FA:A6:EA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.190.234.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fa:51:b8:f5:7d:21:ac:b2:37:83:79:70:9e:e5:82:d1:c1:
5b:e2:8a:6b:46:de:bd:8b:cf:41:11:e5:ad:c2:2e:dc:26:38:
c8:11:24:b6:e2:96:e4:50:1f:37:60:61:70:53:cf:d4:a9:d7:
ca:ba:4e:83:7c:33:0c:60:2b:b9:04:af:bc:8a:28:25:48:22:
37:f1:2c:f4:01:cb:85:ee:3f:46:ae:22:7a:59:7d:9d:e9:e5:
02:b5:14:3f:3b:dd:c9:bb:5d:f5:3b:60:3d:7c:40:9d:28:32:
85:7b:76:e2:22:bc:ac:55:47:f1:c6:98:66:3b:62:5b:13:db:
dc:5b:c6:40:61:15:e0:fa:2f:29:34:5a:1d:71:df:8e:4a:a6:
42:8f:5e:0f:72:07:d9:d5:41:0e:84:0a:1d:f7:7d:21:a0:47:
60:f5:5f:5c:f9:ca:dc:ae:95:e3:93:c1:e7:b4:2a:81:27:d7:
f2:d5:c8:20:51:0d:8c:f9:08:bb:ac:39:20:e2:34:d5:8c:b8:
1c:f7:a3:bf:8f:9f:80:9a:88:f2:ac:a6:40:5e:f2:4e:e1:86:
a8:c4:b6:c8:e5:4d:59:b9:67:ab:d6:bd:ce:f0:04:60:0a:bc:
8c:36:a4:1e:b0:39:a0:f1:05:03:4b:f0:d9:46:c8:2d:35:fc:
79:ae:8d:35
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUPFknWfjkqUsREoxhTWn2+Hcc80kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAzMDUxOTQwNTBaFw0yNjAzMDQxOTQ1NTBaMDMxMTAvBgNV
BAMTKEExRkVGNjA1OTBCOEE5MzE5ODdCN0RFQ0QwNTU1Q0E1NjdGQUE2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsVIEuvGVQXC3q3eBvgjavlXB
OxSmfusS4I1hy7S3Fjysl8pdY5VAH7O0a3EYSuljF8s07IpSIsV7zF9MijEYSEtY
O/9piA2MLcRWha2FnivL5wIkYQhFfc/7RRG0CWMRe+ojq/McAbthfsI57vHIpgp+
bW1WlIJ/tgfFjFZpmlhGgAGbnKvSHcrf5SoPIxx6tGUnNRqk1YNg5p/dVYHP81QG
X4lUG7iKmlT0NayauH7UEHGMm2do4vXvIZAdjjadLuXjA2S9ifj5kCRql/pVVN55
zEKjhpXQ47u3CdHk7kJVmNkYaQVmo3SfDDIug+FPYwcSOEAfjmuJNFAhTNKhAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUof72BZC4qTGYe33s0FVcpWf6puowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzEzOTMwMmUzMjMz
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABVvuowDQYJKoZIhvcNAQELBQADggEBAGX6Ubj1fSGssjeDeXCe5YLRwVviimtG
3r2Lz0ER5a3CLtwmOMgRJLbiluRQHzdgYXBTz9Sp18q6ToN8MwxgK7kEr7yKKCVI
IjfxLPQBy4XuP0auInpZfZ3p5QK1FD873cm7XfU7YD18QJ0oMoV7duIivKxVR/HG
mGY7YlsT29xbxkBhFeD6Lyk0Wh1x345KpkKPXg9yB9nVQQ6ECh33fSGgR2D1X1z5
ytyuleOTwee0KoEn1/LVyCBRDYz5CLusOSDiNNWMuBz3o7+Pn4CaiPKspkBe8k7h
hqjEtsjlTVm5Z6vWvc7wBGAKvIw2pB6wOaDxBQNL8NlGyC01/HmujTU=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:13 2025 by rpki-client