Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: L8zfbdI9rF6ujmGCrtAdApNovaW6+BwQeqmI4WoXIw8=
Subject key identifier: 53:46:E5:9E:18:11:7F:38:13:FA:94:70:6F:9B:21:7C:69:07:EB:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 315EAEAA91CEE49A24BB2AA1882F3B91CA2BC34B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 09 Jul 2025 10:49:53 +0000
ROA not before: Wed 09 Jul 2025 10:44:53 +0000
ROA not after: Wed 08 Jul 2026 10:49:53 +0000
asID: 395793
IP address blocks: 145.79.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5e:ae:aa:91:ce:e4:9a:24:bb:2a:a1:88:2f:3b:91:ca:2b:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 10:44:53 2025 GMT
Not After : Jul 8 10:49:53 2026 GMT
Subject: CN=5346E59E18117F3813FA94706F9B217C6907EB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:4b:b8:79:3d:97:2f:39:7f:1b:99:13:30:
84:0c:fd:85:90:2c:ac:e3:b3:e5:30:e5:0c:c1:de:
b4:28:31:fa:6f:f4:30:bd:9c:f9:0d:cf:ce:9a:1b:
6e:40:1c:9d:34:0e:01:7d:c0:9b:29:63:9e:ba:9d:
d0:22:64:50:82:08:ef:b7:c5:56:6d:09:76:7a:9b:
b5:ac:c5:94:5e:38:11:ba:92:d3:1b:c5:12:12:05:
39:73:e2:4e:66:2d:30:fe:11:7f:79:3d:7d:cd:c7:
66:35:3e:69:a7:bc:af:d2:98:96:d1:d5:ae:e5:09:
ab:8d:b0:3f:07:7a:cc:b8:9a:ce:d1:1d:77:8e:8e:
bc:e3:23:0b:f8:e1:25:94:de:61:20:a3:0e:13:92:
57:36:4f:3c:2b:14:15:13:1a:3e:19:b4:fb:89:0b:
70:7d:82:ce:62:9f:e0:69:d7:81:0d:51:d2:d4:18:
d3:f9:f7:ce:b6:ed:12:15:58:df:c8:54:2a:78:97:
7d:b8:b2:f6:11:68:96:3b:c9:11:e5:26:ec:d5:78:
81:36:ea:9e:7f:f3:4c:61:89:22:6f:24:de:be:a9:
45:6b:09:72:16:af:6a:ce:93:ae:39:3e:74:90:e4:
e6:e8:27:22:8c:d0:b2:60:07:f9:4b:1c:7e:3b:99:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:46:E5:9E:18:11:7F:38:13:FA:94:70:6F:9B:21:7C:69:07:EB:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:41:17:d0:14:37:d7:ee:2d:8f:2f:54:10:ac:02:5b:9f:e1:
42:09:da:a2:e0:b3:bb:6a:a9:cc:69:ec:0f:6a:61:c5:91:63:
22:87:76:e1:a7:4e:62:ab:2a:83:f7:ed:44:ae:7e:de:13:80:
a7:87:80:94:67:af:03:53:eb:de:21:3a:05:bf:0c:c2:39:1b:
a9:b8:b9:b7:ad:99:a9:fa:c8:ec:3c:6c:3c:3c:1a:ca:ae:a8:
0f:2f:3e:2b:78:b7:0b:fc:89:fb:51:3b:ad:02:4b:2f:6e:fe:
42:f9:73:09:06:70:dc:8d:67:8e:b1:d2:3f:99:e3:ef:7e:d1:
cb:7a:c3:03:e1:e7:1c:1a:65:94:79:3f:c1:1a:ea:5f:06:e9:
d9:f7:fc:64:ff:64:dc:fb:a0:4b:00:20:ed:2d:35:17:12:bd:
98:d6:24:43:af:1b:a1:07:2d:cd:8e:12:d0:14:ae:64:67:aa:
01:25:76:4b:ad:5c:47:65:8c:76:fa:24:03:d0:47:d5:88:14:
06:f4:77:cf:99:46:6b:99:c7:fe:95:d7:67:f2:47:ae:b9:4c:
d4:54:15:2c:bd:d3:93:f9:c7:60:8c:f3:25:82:25:3c:ce:53:
68:36:b8:6d:f3:6f:8e:d3:ad:05:74:7a:74:71:5a:c9:f8:47:
e7:e7:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:29 2025 by rpki-client