Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37352e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e37352e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: aLgmj5bOjHl9pCOm8V2wTheCnhhVew67zHuPq7gvxdQ=
Subject key identifier: 1D:6D:A3:F1:2A:2E:FF:5B:E3:31:7D:47:31:2C:C3:4C:80:69:8A:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 68B7053CAED5B4F9AE0C1FE53C3C63EB5BE37AD4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37352e302f32342d3234203d3e203332303433.roa
Signing time: Wed 09 Jul 2025 10:50:25 +0000
ROA not before: Wed 09 Jul 2025 10:45:25 +0000
ROA not after: Wed 08 Jul 2026 10:50:25 +0000
asID: 32043
IP address blocks: 145.79.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b7:05:3c:ae:d5:b4:f9:ae:0c:1f:e5:3c:3c:63:eb:5b:e3:7a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 10:45:25 2025 GMT
Not After : Jul 8 10:50:25 2026 GMT
Subject: CN=1D6DA3F12A2EFF5BE3317D47312CC34C80698A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:25:0c:5b:83:75:db:df:4c:77:ea:e8:7e:
8b:3d:15:f1:3f:6d:80:7c:50:f0:97:58:63:1d:09:
44:ab:ac:d1:ee:e3:fc:9e:9b:a3:c2:3d:b0:90:48:
7b:4d:89:28:75:eb:b9:eb:7f:9c:bb:bb:81:83:d2:
d9:ac:79:a2:83:54:93:41:99:87:9d:6a:c2:16:36:
8c:c5:32:43:fb:82:0e:5a:4f:bb:db:be:35:0d:de:
09:f8:73:cc:b4:61:aa:d0:2d:84:4a:9b:81:13:e0:
0b:5b:32:04:ab:18:c5:b9:b2:9d:e1:40:69:b5:be:
14:40:0e:af:a0:91:5a:48:dd:ff:4a:42:86:42:26:
ea:cc:f0:34:c2:08:74:28:1a:31:49:be:1b:5f:c7:
ec:b1:cd:a5:5c:eb:0a:c3:be:cf:c9:5d:04:79:2b:
54:6b:1d:0b:b3:6f:95:f9:5e:01:cc:64:2f:fd:29:
50:31:7c:54:45:8b:99:33:ec:6e:1c:0c:53:af:3a:
eb:2c:60:a1:1e:7c:00:d3:57:6e:14:e3:e1:3d:30:
4c:90:38:77:d8:4b:a3:1f:bf:bd:eb:be:8f:90:25:
c9:97:25:cd:6e:3c:88:8b:03:74:36:b2:9e:f1:8d:
a0:b4:8e:96:23:b9:44:2a:c2:12:9a:86:13:00:00:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:A3:F1:2A:2E:FF:5B:E3:31:7D:47:31:2C:C3:4C:80:69:8A:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37352e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.75.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0e:b5:2b:e1:cd:4c:9e:78:41:7f:8d:23:be:f4:3c:ab:a8:
29:81:f7:74:13:bf:6d:26:f4:80:20:10:3f:22:a1:69:88:ad:
0a:d7:38:7b:44:4b:d8:7d:c5:25:12:23:23:cd:42:70:1c:62:
1d:c6:77:38:9e:78:93:9f:d4:13:c0:c1:51:4a:7c:67:ac:ec:
d3:b5:f2:a9:06:7a:45:5a:97:62:cb:50:25:de:15:67:dd:b8:
c6:43:79:44:28:dc:c5:84:cf:96:0d:95:84:9d:4e:19:b2:d8:
52:55:60:82:28:42:aa:c8:60:4b:b2:04:13:86:d7:92:4e:e0:
fa:d4:a8:e7:c2:83:4a:bc:c5:a9:b3:8f:b9:43:1d:af:27:a1:
1a:ab:4f:59:86:32:c6:2e:12:a6:40:22:3d:5e:8f:da:cf:0c:
c6:fa:ff:04:75:90:8a:86:21:b4:0f:5a:8d:b6:c2:3d:b3:ce:
03:1e:15:08:1c:08:4e:7e:41:75:a0:4f:96:b8:a5:99:4c:53:
3e:7a:e2:d8:b0:ea:0e:7a:ef:61:a8:4f:c5:6e:37:1e:66:d7:
93:d1:d3:a1:a5:b5:da:1b:5e:ed:13:d4:a4:8c:ef:25:70:d6:
2a:a3:31:73:9c:2b:a6:4b:47:6d:f0:13:de:51:7e:bb:bf:18:
1d:d7:fb:79
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaLcFPK7VtPmuDB/lPDxj61vjetQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MDkxMDQ1MjVaFw0yNjA3MDgxMDUwMjVaMDMxMTAvBgNV
BAMTKDFENkRBM0YxMkEyRUZGNUJFMzMxN0Q0NzMxMkNDMzRDODA2OThBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCyUMW4N1299Md+rofos9FfE/
bYB8UPCXWGMdCUSrrNHu4/yem6PCPbCQSHtNiSh167nrf5y7u4GD0tmseaKDVJNB
mYedasIWNozFMkP7gg5aT7vbvjUN3gn4c8y0YarQLYRKm4ET4AtbMgSrGMW5sp3h
QGm1vhRADq+gkVpI3f9KQoZCJurM8DTCCHQoGjFJvhtfx+yxzaVc6wrDvs/JXQR5
K1RrHQuzb5X5XgHMZC/9KVAxfFRFi5kz7G4cDFOvOussYKEefADTV24U4+E9MEyQ
OHfYS6Mfv73rvo+QJcmXJc1uPIiLA3Q2sp7xjaC0jpYjuUQqwhKahhMAAJv7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUHW2j8Sou/1vjMX1HMSzDTIBpipQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMjMwMzQzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
SzANBgkqhkiG9w0BAQsFAAOCAQEAJA61K+HNTJ54QX+NI770PKuoKYH3dBO/bSb0
gCAQPyKhaYitCtc4e0RL2H3FJRIjI81CcBxiHcZ3OJ54k5/UE8DBUUp8Z6zs07Xy
qQZ6RVqXYstQJd4VZ924xkN5RCjcxYTPlg2VhJ1OGbLYUlVggihCqshgS7IEE4bX
kk7g+tSo58KDSrzFqbOPuUMdryehGqtPWYYyxi4SpkAiPV6P2s8Mxvr/BHWQioYh
tA9ajbbCPbPOAx4VCBwITn5BdaBPlrilmUxTPnri2LDqDnrvYahPxW43HmbXk9HT
oaW12hte7RPUpIzvJXDWKqMxc5wrpktHbfAT3lF+u78YHdf7eQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:39 2025 by rpki-client