Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39302e302f32342d3234203d3e20343031373833.roa
File: 3134352e37392e39302e302f32342d3234203d3e20343031373833.roa (raw, json)
Hash identifier: Agwh4M4Guiuw5/Ok/V20srdvbiQp48TJIRrceO4IGfo=
Subject key identifier: D2:52:2B:A3:1B:78:A1:F8:D8:5E:BA:8C:22:D3:93:DE:B5:59:1A:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 240F3C1C3DD8297448CF5B674B80AD9691B2B20B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39302e302f32342d3234203d3e20343031373833.roa
Signing time: Thu 03 Jul 2025 20:18:38 +0000
ROA not before: Thu 03 Jul 2025 20:13:38 +0000
ROA not after: Thu 02 Jul 2026 20:18:38 +0000
asID: 401783
IP address blocks: 145.79.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0f:3c:1c:3d:d8:29:74:48:cf:5b:67:4b:80:ad:96:91:b2:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 20:13:38 2025 GMT
Not After : Jul 2 20:18:38 2026 GMT
Subject: CN=D2522BA31B78A1F8D85EBA8C22D393DEB5591AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:19:20:de:c9:b8:b8:1a:f0:d3:bc:55:30:
71:7e:ad:7d:ba:5c:75:ec:ef:04:9d:b2:4d:5d:b2:
b5:f0:62:d8:aa:e4:08:21:1f:ef:ef:fd:73:6c:11:
46:24:05:95:79:f8:19:b0:ea:d5:e8:99:bc:16:83:
63:18:1c:4b:56:78:63:a1:24:db:6e:c3:23:d6:42:
30:3f:08:4e:72:26:f7:bb:6e:d8:46:15:e9:95:2e:
43:09:e4:62:54:bd:31:9f:d6:38:b6:51:cb:e2:5f:
b7:54:87:65:b0:bf:cf:22:01:1f:1d:aa:fe:06:73:
ea:28:b3:f4:0a:35:d1:ec:82:3f:0a:ba:59:75:e1:
87:60:55:70:8e:09:6f:5b:03:b6:fc:41:e2:79:f7:
b2:98:12:c5:50:db:ce:7c:25:b1:46:55:1c:0d:04:
42:2a:57:fa:67:d4:86:e0:82:db:e5:48:79:ec:a8:
dd:b4:12:3e:0f:58:82:9d:db:2a:20:ab:08:40:23:
39:dc:94:7c:d2:d0:ef:ef:8a:f1:64:ec:47:e6:22:
d8:c1:49:c5:ca:d5:8d:d7:b2:fd:19:a2:65:59:45:
80:72:11:56:60:d9:f4:3d:44:2f:f4:8c:a8:2d:3c:
08:46:7b:13:ba:de:06:46:e1:08:9e:7d:aa:46:6b:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:2B:A3:1B:78:A1:F8:D8:5E:BA:8C:22:D3:93:DE:B5:59:1A:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39302e302f32342d3234203d3e20343031373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.90.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:da:59:9d:98:99:51:c2:ef:a2:3c:63:74:eb:7e:f1:78:20:
bc:41:f3:89:49:8b:a5:00:53:f4:5f:4d:1e:07:9d:84:1b:dc:
c0:c8:d4:b4:50:64:dc:41:0e:15:e2:99:5c:9a:2f:2f:5a:7d:
9b:47:bc:4e:36:10:ee:0e:22:f2:ad:d4:c0:48:72:86:f5:dd:
2d:67:67:32:75:e8:cf:ee:e1:74:13:64:aa:0d:e5:bc:02:63:
dd:54:87:9f:9d:0d:c4:f8:be:2b:c3:79:fd:ed:51:ba:f3:8c:
2c:19:7c:a7:82:8b:fa:0b:79:5d:24:c1:f4:b0:c4:51:de:99:
a6:b7:d2:74:66:fb:87:1a:5b:d3:05:e0:f8:be:34:95:e2:4b:
fd:b1:99:e3:82:0d:5d:ac:f8:51:ed:72:fc:91:75:ab:de:25:
00:a2:2a:58:19:6b:c3:a5:4e:95:6d:21:7e:89:c6:f5:ed:8c:
ab:42:7c:8b:a9:4f:01:0a:07:b9:b3:8b:83:82:b7:bb:17:3e:
3b:3f:ab:33:6e:26:99:f1:3c:c4:fe:b5:57:23:b0:90:cd:4e:
41:2b:19:2f:d9:23:94:c0:6e:7b:4f:ed:33:69:54:e3:64:1b:
39:7a:8d:7b:9e:d2:86:1b:77:ee:c9:58:0f:8e:3a:1e:1b:54:
7b:22:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:45:10 2025 by rpki-client