Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39322e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e39322e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: N7TLtMT+pzenwYsxK7A7oQDMcBZQbXI8oB6aQ3wc6as=
Subject key identifier: EC:88:D7:A0:8D:14:F0:36:EE:47:F8:5E:86:47:12:59:CA:0A:F5:75
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 013AC930D9AF93F6A167C8442C4785897E6E09E7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39322e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 09 Jul 2025 10:49:44 +0000
ROA not before: Wed 09 Jul 2025 10:44:44 +0000
ROA not after: Wed 08 Jul 2026 10:49:44 +0000
asID: 395793
IP address blocks: 145.79.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3a:c9:30:d9:af:93:f6:a1:67:c8:44:2c:47:85:89:7e:6e:09:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 9 10:44:44 2025 GMT
Not After : Jul 8 10:49:44 2026 GMT
Subject: CN=EC88D7A08D14F036EE47F85E86471259CA0AF575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:bb:dc:c1:1b:35:50:21:2a:83:eb:9e:a8:
51:68:ba:62:4f:e6:8e:a2:0e:20:11:65:d0:0a:3d:
ab:ad:a1:56:9d:f1:29:73:ea:b6:bd:64:ec:42:6a:
3d:8f:fa:49:93:0b:3a:94:f6:82:a4:33:df:8f:67:
2b:41:46:b2:78:cf:88:57:23:c6:77:ed:d3:94:05:
a4:82:e7:3b:07:e8:25:d3:62:fc:a6:d6:64:14:ac:
7a:6e:4b:be:8c:c5:52:48:19:77:05:e1:42:8b:ed:
3a:5f:37:37:64:bc:3f:ec:88:14:1c:5c:a5:29:f1:
3a:ba:9b:4a:c7:e3:30:23:2e:f7:7a:0a:80:f7:32:
fc:04:9a:7d:0e:06:ab:70:4e:14:b3:ae:13:d8:01:
41:20:92:13:c0:65:6e:62:26:cd:7b:47:4f:2c:30:
15:70:f4:8c:19:f7:7b:4c:4f:7a:4d:a7:d5:9b:11:
57:9f:6b:ef:be:71:06:27:b7:7e:63:33:c4:d1:9d:
6e:cc:50:fe:36:f2:d7:4f:da:9f:da:6c:f3:49:30:
d5:69:76:4e:00:ad:ad:64:74:b6:27:ff:ec:04:e5:
4b:6c:19:98:d9:68:dd:7a:17:b9:2d:18:53:ff:cf:
6b:47:e2:75:ee:92:84:e2:70:bd:bc:10:ca:2b:4f:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:D7:A0:8D:14:F0:36:EE:47:F8:5E:86:47:12:59:CA:0A:F5:75
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39322e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.92.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c7:55:2e:24:6c:f6:b9:a9:45:b0:a4:a8:c1:cd:60:ec:0e:
f6:5c:29:65:f7:12:4c:86:92:69:2f:22:db:94:12:83:1f:1f:
6b:c0:8e:23:7c:8d:a9:6c:11:67:cb:71:b3:13:10:e4:77:a5:
d7:b6:f6:41:98:fc:5e:75:31:64:b2:75:d6:e4:24:9e:ce:90:
43:35:6e:69:ee:ad:e4:b5:3c:3b:76:36:be:72:7b:8d:7e:eb:
9d:06:bb:d5:eb:a8:9e:24:d7:88:69:b0:6b:a5:15:54:81:b9:
10:4e:23:99:af:29:ce:8f:cc:d1:4e:83:b7:f5:f8:27:39:ef:
df:a6:f7:14:a3:5a:0a:f1:8c:7a:d5:a8:b3:9d:0d:c6:fa:cc:
76:c5:70:2b:59:2d:4a:a4:d6:03:88:1f:c6:5d:13:f4:57:cf:
db:cc:1c:93:6b:0f:24:1c:b7:0c:36:11:9c:0f:79:61:df:15:
40:1c:0f:21:4b:17:39:1e:a7:70:4d:38:2a:58:b8:fd:8a:7f:
75:4a:6c:d4:2e:f5:3a:4f:17:c8:51:34:48:09:39:d4:1b:ab:
95:de:5b:b6:4e:d6:f0:0c:a7:41:f9:59:9b:be:c1:08:be:a5:
5e:21:a6:3e:f2:8a:fa:7b:d2:f7:3d:4b:63:b4:ab:f4:cf:bf:
77:d2:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:24 2025 by rpki-client