Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38312e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e38312e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: IMRO49a5v/lyVqVKxcHx+on7zRLozvczY+MiWpczHc4=
Subject key identifier: 52:8F:79:60:C4:6C:5C:9B:94:B2:D5:3E:6B:FA:88:8C:7D:15:82:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15E28F2C912184A8D4100515C1198E7A9C52234D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38312e302f32342d3234203d3e203332303433.roa
Signing time: Wed 09 Jul 2025 10:50:48 +0000
ROA not before: Wed 09 Jul 2025 10:45:48 +0000
ROA not after: Wed 08 Jul 2026 10:50:48 +0000
asID: 32043
IP address blocks: 145.79.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e2:8f:2c:91:21:84:a8:d4:10:05:15:c1:19:8e:7a:9c:52:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 10:45:48 2025 GMT
Not After : Jul 8 10:50:48 2026 GMT
Subject: CN=528F7960C46C5C9B94B2D53E6BFA888C7D15821D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:b1:04:c6:45:e3:f9:9d:ce:f4:ee:30:a2:
59:55:0d:ce:60:f1:ae:02:52:31:7e:1e:0f:1a:94:
2a:5b:58:8a:26:f8:62:20:5f:c8:24:fe:5d:1e:39:
73:7b:73:59:3c:94:bf:bd:b1:4b:1a:fc:8c:19:a4:
fa:52:ed:79:1d:2a:12:41:88:d1:09:b1:c4:2f:f3:
b5:91:b1:e0:7b:37:c1:fa:53:ca:83:96:6e:bc:26:
dc:3e:45:58:c4:c6:c0:1c:79:4c:10:82:70:2f:be:
ae:5e:13:97:2c:84:84:94:43:af:7d:8a:b1:32:3f:
84:eb:cd:9f:2e:2c:4a:ab:9f:50:fd:b6:5a:89:e2:
f5:e0:a1:27:5c:c8:98:d1:22:bf:4a:be:13:d7:73:
c4:31:21:df:34:04:4c:af:ac:fe:23:da:c1:17:c1:
dc:da:1d:e5:ff:58:b3:16:56:1d:79:b0:b4:e8:43:
db:89:a0:28:4a:1b:67:1b:0b:df:30:fe:0e:fd:50:
98:a8:3c:51:dd:b4:a2:70:e9:4d:31:1e:20:c3:76:
e0:c1:e8:19:1b:17:e1:b2:18:ad:58:9e:65:89:e7:
4d:4f:10:cd:bf:2b:60:85:fc:8f:bb:6d:db:56:09:
75:88:49:c2:1b:00:1f:54:14:b8:b8:9a:db:36:42:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8F:79:60:C4:6C:5C:9B:94:B2:D5:3E:6B:FA:88:8C:7D:15:82:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38312e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7e:f3:8a:ae:d0:d2:8a:3a:d6:0d:eb:00:c4:59:53:ce:1d:
ed:32:25:8c:a6:e2:14:57:2d:ad:10:5d:53:78:78:96:34:6f:
83:79:11:5c:f9:8f:d6:f9:23:fe:4d:63:07:1d:18:7f:82:59:
4f:13:32:7e:48:f5:cd:09:9c:ec:93:4a:4c:a2:fd:cc:63:d2:
9a:24:ac:3a:93:76:4c:e4:c5:8a:97:84:ed:45:56:33:32:40:
9a:31:5e:ef:5b:47:bb:f2:6b:93:ef:58:46:cd:f3:46:a5:03:
91:da:d8:1c:bd:85:21:ba:b6:97:1d:97:a0:1e:89:29:7c:50:
97:db:f6:64:4a:50:08:cf:c2:fc:6b:c5:29:8e:93:7a:47:6e:
3f:07:14:dd:50:c0:49:4b:10:5a:e2:26:70:ef:b8:52:c4:ea:
3e:e3:74:d8:70:70:a5:78:d8:99:27:60:a8:63:02:ac:a6:54:
16:f4:1d:af:58:e9:6c:a9:ce:f1:65:3c:a9:bb:da:13:8b:9d:
34:41:11:ae:e2:59:4a:f8:a3:20:21:11:23:c0:ed:ed:ee:7d:
6e:05:26:e4:dc:a0:98:cd:c7:9b:48:53:7d:a4:0e:0d:65:97:
75:54:c4:69:57:b6:2f:fe:a7:03:6b:54:34:d4:0b:4a:c0:44:
29:88:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:06:28 2025 by rpki-client