Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3234203d3e203239383032.roa
File: 3134352e37392e3138342e302f32322d3234203d3e203239383032.roa (raw, json)
Hash identifier: iDkNdywgfsKsCfecRsW2tB8yVjefrDn3J/ZcYSDOoxo=
Subject key identifier: 6A:C7:E2:94:97:D2:65:80:4C:72:A4:DE:82:3B:75:F4:67:B4:AD:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E6A66E342F02D8CD7CB8AE101026C05F53305FE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3234203d3e203239383032.roa
Signing time: Wed 02 Jul 2025 17:58:23 +0000
ROA not before: Wed 02 Jul 2025 17:53:23 +0000
ROA not after: Wed 01 Jul 2026 17:58:23 +0000
asID: 29802
IP address blocks: 145.79.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 11:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6a:66:e3:42:f0:2d:8c:d7:cb:8a:e1:01:02:6c:05:f5:33:05:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 2 17:53:23 2025 GMT
Not After : Jul 1 17:58:23 2026 GMT
Subject: CN=6AC7E29497D265804C72A4DE823B75F467B4AD44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:9b:75:4f:69:28:5d:48:4b:27:6f:3f:87:
31:8b:85:06:1a:4a:8b:b1:b4:a7:ba:4b:fa:8c:67:
4c:c9:e6:6e:13:cb:4e:98:f0:a4:ff:b9:d5:50:6f:
68:91:6a:6d:e3:11:ea:1f:50:f8:7b:17:07:41:de:
89:3d:13:b5:d8:b8:e2:57:e8:d5:64:af:9f:18:a0:
7e:53:98:81:5b:d6:84:ee:d9:dc:03:22:02:8b:3c:
f9:59:13:b5:53:ea:f6:3d:b6:8a:11:50:4a:e8:bc:
51:1f:ae:71:7e:8a:24:c0:65:4b:e5:88:f3:7c:00:
58:df:e0:53:df:d5:78:46:f3:15:3d:74:53:f6:07:
0f:2c:bd:10:b2:fa:56:6d:47:b3:da:15:c3:e3:2c:
c0:d4:1b:c5:3e:81:6e:25:d7:91:1d:69:6d:76:a4:
ec:37:db:4f:56:66:a1:07:64:ee:66:a2:d1:44:fe:
b4:97:b1:77:2f:c8:76:8b:f5:b0:c6:f6:52:80:23:
b9:99:2a:d1:36:34:24:8e:b0:f5:4a:68:5e:de:3d:
74:88:e1:18:24:ec:4e:41:45:28:ac:f7:0a:f0:ae:
85:a8:c8:91:53:b9:08:f8:47:e5:b3:ff:f1:e2:2e:
da:6b:11:c8:a9:12:ae:44:18:d6:c7:da:4f:2c:93:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C7:E2:94:97:D2:65:80:4C:72:A4:DE:82:3B:75:F4:67:B4:AD:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138342e302f32322d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.184.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:50:bf:1f:6e:66:f5:ca:c2:d3:af:ae:9c:14:a9:fc:d7:1f:
65:36:82:90:89:10:2a:e1:c1:b6:3b:aa:d6:60:fc:77:0f:c2:
46:e7:53:58:f4:45:03:56:cc:8e:3b:4f:2f:d3:cc:92:ba:b3:
c1:75:52:c6:a1:6e:cb:49:8b:44:f9:69:10:14:d2:ef:b0:ef:
c7:9f:5e:c6:fd:61:7f:9c:70:b9:04:63:47:8f:d7:93:76:f1:
f9:bf:dc:1d:44:07:cb:f9:d1:53:b2:39:b0:a4:e4:30:e6:b1:
0e:60:b6:f6:ac:6f:58:5a:20:b8:f5:e6:83:62:b6:5f:21:72:
33:ae:7a:12:c9:1f:38:37:f7:46:2c:48:25:fb:7c:e7:af:1a:
e4:1a:72:bb:fd:e1:c9:6b:0f:f9:4c:b4:a4:6a:0a:5b:a2:bc:
ed:d4:4b:e3:9b:88:04:5e:b7:b0:38:12:02:b3:75:c9:92:f8:
ae:a3:ad:2d:86:56:ea:fc:32:6f:b2:94:fa:f6:cb:f1:3d:16:
9c:9d:68:a5:90:86:53:f4:88:74:e9:b0:c9:f5:b1:35:a1:1d:
c8:bb:04:b0:2f:19:f2:10:92:9b:c4:f3:f6:5c:90:b0:d1:be:
7d:87:23:74:ca:9a:b8:f6:3b:df:a4:fa:f2:3e:97:d0:4d:fa:
be:3a:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 03:31:19 2025 by rpki-client