Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37332e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e37332e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: b2ocGYYLsL4eConjrTXsfXb/5isaimaI0WtIbr/OlOI=
Subject key identifier: 3B:94:57:D2:08:2A:EE:1A:86:E9:AB:59:EE:E5:11:0E:F3:8F:A7:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B5BDA138A85869AE1D3E1A949F96CE60BE8C058
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37332e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 03 Jul 2025 20:19:06 +0000
ROA not before: Thu 03 Jul 2025 20:14:06 +0000
ROA not after: Thu 02 Jul 2026 20:19:06 +0000
asID: 214143
IP address blocks: 145.79.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5b:da:13:8a:85:86:9a:e1:d3:e1:a9:49:f9:6c:e6:0b:e8:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 20:14:06 2025 GMT
Not After : Jul 2 20:19:06 2026 GMT
Subject: CN=3B9457D2082AEE1A86E9AB59EEE5110EF38FA7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:87:5c:c6:b6:93:d1:c6:86:2f:f8:a0:99:
06:bc:87:95:99:0b:cf:26:78:4c:4f:3d:5f:a6:21:
14:fc:88:f5:a9:29:2e:85:06:12:b0:65:4a:82:32:
87:f3:af:f2:56:b9:52:69:fd:6d:f3:36:7c:57:ca:
bc:3d:e7:58:f0:62:53:17:04:db:8d:09:21:d4:00:
7d:a5:34:a3:f9:ee:51:4c:10:b8:ce:1e:bc:70:ef:
a8:0f:f9:44:9f:f0:0c:89:f1:1b:41:83:b7:48:14:
01:13:6d:6a:3d:04:cd:af:13:9b:19:d4:39:f8:ac:
24:10:f1:0d:e0:46:0b:37:da:d4:f4:1a:cc:b8:d1:
ba:65:27:21:1c:4d:d0:40:83:16:13:86:c0:df:d6:
67:08:8f:3c:33:e6:61:62:d2:31:fd:b2:5a:78:09:
ef:a7:be:07:ac:b2:32:df:ac:4e:f1:0d:9f:1d:d9:
78:79:09:ef:ae:fb:77:30:14:b6:89:1d:1c:38:96:
f5:d0:96:fb:66:ae:c5:61:7c:2b:4f:f5:e6:06:14:
ad:2d:15:3f:30:09:ba:86:d5:59:9c:cd:6c:c5:f9:
2c:90:b6:07:e1:0d:0e:0b:97:4d:a3:59:c1:40:b7:
9d:3b:d0:3a:c3:bd:a4:bf:47:07:58:8b:49:a7:fa:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:57:D2:08:2A:EE:1A:86:E9:AB:59:EE:E5:11:0E:F3:8F:A7:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37332e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.73.0/24
Signature Algorithm: sha256WithRSAEncryption
35:45:8a:7d:b9:98:57:e6:11:6a:44:9a:ba:a6:6e:10:9b:a8:
f0:ed:e5:a3:e1:3d:c4:ef:9b:74:57:9c:e8:b9:2e:38:26:8d:
b3:26:fc:d1:d3:6e:88:bb:ef:08:35:d9:fa:b0:aa:74:dd:7b:
6b:84:0e:d0:b5:e1:15:4d:67:c5:81:ff:8b:4e:ad:05:a5:f3:
13:d3:49:0d:25:b5:f7:71:ef:b2:a7:53:70:6a:d0:2f:4b:58:
2f:b1:8e:c5:f0:aa:36:38:13:55:2b:50:aa:17:8d:e7:ab:c7:
00:d7:91:4b:98:f2:89:22:17:06:19:57:73:34:81:e2:01:34:
a4:bf:f8:8b:16:bf:4e:76:1d:ab:a9:59:4f:c4:6d:4e:39:ca:
9f:8f:77:b6:de:35:79:74:08:80:8e:3b:d4:77:4b:b4:2b:7e:
10:f4:10:bb:c1:59:72:21:f3:09:57:29:8c:6f:07:30:b2:59:
fb:0c:d7:ba:5d:2c:f6:a7:e6:d9:48:c8:be:99:f1:5d:17:c4:
b6:58:de:24:67:a7:12:0d:43:c6:a7:7a:65:c9:30:03:12:62:
2c:c1:f8:68:80:ff:89:be:06:16:01:8a:a0:64:00:3c:c1:83:
09:7e:cb:67:18:a0:af:78:fe:01:30:78:c4:d5:36:67:e8:10:
1e:a3:48:da
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUa1vaE4qFhprh0+GpSfls5gvowFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MDMyMDE0MDZaFw0yNjA3MDIyMDE5MDZaMDMxMTAvBgNV
BAMTKDNCOTQ1N0QyMDgyQUVFMUE4NkU5QUI1OUVFRTUxMTBFRjM4RkE3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/J4dcxraT0caGL/igmQa8h5WZ
C88meExPPV+mIRT8iPWpKS6FBhKwZUqCMofzr/JWuVJp/W3zNnxXyrw951jwYlMX
BNuNCSHUAH2lNKP57lFMELjOHrxw76gP+USf8AyJ8RtBg7dIFAETbWo9BM2vE5sZ
1Dn4rCQQ8Q3gRgs32tT0Gsy40bplJyEcTdBAgxYThsDf1mcIjzwz5mFi0jH9slp4
Ce+nvgessjLfrE7xDZ8d2Xh5Ce+u+3cwFLaJHRw4lvXQlvtmrsVhfCtP9eYGFK0t
FT8wCbqG1VmczWzF+SyQtgfhDQ4Ll02jWcFAt5070DrDvaS/RwdYi0mn+mXTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUO5RX0ggq7hqG6atZ7uURDvOPp/wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNzMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzEzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU9JMA0GCSqGSIb3DQEBCwUAA4IBAQA1RYp9uZhX5hFqRJq6pm4Qm6jw7eWj4T3E
75t0V5zouS44Jo2zJvzR026Iu+8INdn6sKp03XtrhA7QteEVTWfFgf+LTq0FpfMT
00kNJbX3ce+yp1NwatAvS1gvsY7F8Ko2OBNVK1CqF43nq8cA15FLmPKJIhcGGVdz
NIHiATSkv/iLFr9Odh2rqVlPxG1OOcqfj3e23jV5dAiAjjvUd0u0K34Q9BC7wVly
IfMJVymMbwcwsln7DNe6XSz2p+bZSMi+mfFdF8S2WN4kZ6cSDUPGp3plyTADEmIs
wfhogP+JvgYWAYqgZAA8wYMJfstnGKCveP4BMHjE1TZn6BAeo0ja
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:45:29 2025 by rpki-client