Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: UIVr1mXnsvoMcDI9Q7Su6i5wZ16ptvUvCB1ObEoBei0=
Subject key identifier: BB:C6:CB:E3:BE:07:42:7D:FB:4E:A9:85:FF:E8:47:FB:D7:3A:52:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 584A1B1E8A41506189796E03E13038C6129DF54F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 03 Jul 2025 20:19:31 +0000
ROA not before: Thu 03 Jul 2025 20:14:31 +0000
ROA not after: Thu 02 Jul 2026 20:19:31 +0000
asID: 214143
IP address blocks: 145.79.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4a:1b:1e:8a:41:50:61:89:79:6e:03:e1:30:38:c6:12:9d:f5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 20:14:31 2025 GMT
Not After : Jul 2 20:19:31 2026 GMT
Subject: CN=BBC6CBE3BE07427DFB4EA985FFE847FBD73A5243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:77:01:b7:b3:3a:a5:ee:54:25:99:ed:94:
a3:59:9f:b1:6b:65:ed:93:b1:d4:af:0f:02:1f:39:
8d:6b:c6:69:3a:7e:70:13:48:fe:99:f9:d6:e6:22:
a3:10:99:82:e0:d1:18:04:97:ac:7c:8c:ff:c3:05:
c4:66:a5:d3:df:21:7f:84:5a:0d:3b:da:60:8a:35:
62:98:88:a9:68:3d:13:f8:d8:9f:ee:66:d4:09:37:
1c:51:95:2b:bc:3e:33:2a:c1:bc:59:52:a6:67:94:
ac:9a:0d:22:c0:cb:ab:ba:92:62:a6:ce:fc:7d:91:
e1:6d:a9:09:13:7f:f4:83:78:0a:bb:3c:b2:ea:97:
c7:0a:57:9f:e7:2f:be:c9:c0:77:0b:ed:1d:28:f4:
d4:50:b0:4d:29:5a:14:5e:27:ca:5b:f7:fd:9f:79:
ea:cf:3f:ce:68:a8:0d:73:0d:5d:19:0a:89:5c:22:
09:59:c7:5e:f9:a9:6e:06:49:09:1f:7a:60:a6:e1:
77:d3:a3:b1:3e:02:57:ad:a8:0a:f4:be:5b:dd:f4:
80:4a:c1:24:8d:19:65:ac:8b:9e:52:60:dc:5b:71:
63:d7:c0:4f:1c:d9:bf:c7:30:00:83:8b:cf:89:fd:
c4:23:7e:58:25:26:0f:09:d1:52:a3:01:87:9f:09:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:CB:E3:BE:07:42:7D:FB:4E:A9:85:FF:E8:47:FB:D7:3A:52:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:05:69:a3:4f:44:12:cf:79:aa:e4:6f:79:2b:63:10:48:15:
02:5c:47:01:d0:ac:20:ec:e8:b9:78:8f:1f:94:e2:a8:a1:94:
11:db:09:b9:e4:c2:d5:7c:a3:bb:e0:7d:92:27:5a:ca:5e:cd:
7f:67:76:3a:e8:d0:46:af:f0:81:cb:dd:be:1d:4c:81:e8:b5:
b7:46:7e:89:44:f9:99:98:ad:16:70:26:26:7c:08:8d:70:c0:
16:93:2a:41:05:fa:2f:8a:52:08:19:b9:14:91:65:bd:e2:24:
69:ca:f8:85:60:13:96:fb:9f:33:83:4d:00:41:7d:03:6e:45:
bc:bb:0c:83:c7:2d:84:51:f8:37:c1:ed:3e:a7:4c:7b:aa:e8:
18:d8:16:e7:78:64:22:ee:15:50:92:41:cd:97:19:49:af:e2:
98:44:55:0b:86:72:6c:7f:1f:8a:df:41:53:1d:e1:04:a4:d4:
14:20:77:4e:b9:04:b3:69:21:29:0e:5b:fa:fe:c8:67:04:26:
cc:83:d6:5f:fc:dc:34:27:c1:c9:d5:eb:e6:9f:23:19:88:7c:
b3:85:88:27:ce:84:17:04:cb:3e:a5:f4:a6:d3:9b:79:6f:74:
d6:44:6b:6d:5e:a6:a7:16:44:92:c3:86:e9:ce:9f:cf:7c:60:
ac:e7:93:60
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUWEobHopBUGGJeW4D4TA4xhKd9U8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MDMyMDE0MzFaFw0yNjA3MDIyMDE5MzFaMDMxMTAvBgNV
BAMTKEJCQzZDQkUzQkUwNzQyN0RGQjRFQTk4NUZGRTg0N0ZCRDczQTUyNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+XcBt7M6pe5UJZntlKNZn7Fr
Ze2TsdSvDwIfOY1rxmk6fnATSP6Z+dbmIqMQmYLg0RgEl6x8jP/DBcRmpdPfIX+E
Wg072mCKNWKYiKloPRP42J/uZtQJNxxRlSu8PjMqwbxZUqZnlKyaDSLAy6u6kmKm
zvx9keFtqQkTf/SDeAq7PLLql8cKV5/nL77JwHcL7R0o9NRQsE0pWhReJ8pb9/2f
eerPP85oqA1zDV0ZColcIglZx175qW4GSQkfemCm4XfTo7E+AletqAr0vlvd9IBK
wSSNGWWsi55SYNxbcWPXwE8c2b/HMACDi8+J/cQjflglJg8J0VKjAYefCd41AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUu8bL474HQn37TqmF/+hH+9c6UkMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMTM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT38wDQYJKoZIhvcNAQELBQADggEBAD0FaaNPRBLPearkb3krYxBIFQJcRwHQ
rCDs6Ll4jx+U4qihlBHbCbnkwtV8o7vgfZInWspezX9ndjro0Eav8IHL3b4dTIHo
tbdGfolE+ZmYrRZwJiZ8CI1wwBaTKkEF+i+KUggZuRSRZb3iJGnK+IVgE5b7nzOD
TQBBfQNuRby7DIPHLYRR+DfB7T6nTHuq6BjYFud4ZCLuFVCSQc2XGUmv4phEVQuG
cmx/H4rfQVMd4QSk1BQgd065BLNpISkOW/r+yGcEJsyD1l/83DQnwcnV6+afIxmI
fLOFiCfOhBcEyz6l9KbTm3lvdNZEa21epqcWRJLDhunOn898YKznk2A=
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:45:06 2025 by rpki-client