Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35382e302f32342d3332203d3e203531313637.roa
File: 34352e39342e35382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 0Fyoed+sikKEtsFfXMi7XwLSzZ/HCFDStEbV9nl3zyU=
Subject key identifier: DF:36:F7:70:C3:83:A2:8C:0E:C3:EB:1E:6F:9A:C8:CE:99:78:4D:88
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 380D93CF097EB945B001883E10D7E61B95AF91A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35382e302f32342d3332203d3e203531313637.roa
Signing time: Thu 03 Jul 2025 15:46:47 +0000
ROA not before: Thu 03 Jul 2025 15:41:47 +0000
ROA not after: Thu 02 Jul 2026 15:46:47 +0000
asID: 51167
IP address blocks: 45.94.58.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:0d:93:cf:09:7e:b9:45:b0:01:88:3e:10:d7:e6:1b:95:af:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 15:41:47 2025 GMT
Not After : Jul 2 15:46:47 2026 GMT
Subject: CN=DF36F770C383A28C0EC3EB1E6F9AC8CE99784D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:ed:32:cf:49:c0:d0:24:3d:d7:5a:08:ea:
e5:1a:99:72:54:c7:c2:8e:e4:8c:85:63:33:8c:9a:
76:c9:3f:89:a0:ce:0c:89:76:f9:ba:bd:41:09:a1:
1d:97:90:74:bc:b8:7d:ef:40:5b:6c:71:d5:3f:96:
e3:43:47:e5:27:a4:d7:6d:88:5d:ad:80:ad:bf:fa:
11:c0:0c:72:31:bf:f1:0f:fd:40:6a:d7:54:6a:29:
ce:96:4f:fd:71:2a:9c:56:24:02:3c:3e:3f:53:8c:
81:b9:5f:4a:60:24:cf:44:75:4a:16:15:d5:9c:13:
bd:9c:ea:7a:03:89:a2:bf:b2:75:29:8a:9d:bb:69:
db:f8:4a:e3:af:6a:6e:04:44:58:96:d9:c9:a2:85:
f8:54:b6:18:45:9e:87:8a:49:72:20:90:c5:76:73:
1a:e4:aa:d2:36:b1:b6:45:35:ef:b8:c6:d5:e0:12:
57:39:7a:a5:ac:9f:77:1f:bc:bd:4d:59:36:8a:cb:
d9:74:00:90:a7:89:f6:9a:5b:b1:9e:56:19:66:4a:
08:6c:18:4a:31:38:80:15:9a:27:49:3d:17:94:da:
18:2f:69:e9:5a:b1:02:90:ee:50:70:79:85:13:1b:
30:c9:6e:85:ec:6e:bb:3d:c0:02:2a:04:76:52:d3:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:F7:70:C3:83:A2:8C:0E:C3:EB:1E:6F:9A:C8:CE:99:78:4D:88
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
77:63:5c:c9:42:05:b9:da:ef:fd:2f:fb:49:57:86:f8:cb:40:
ba:9f:2d:25:57:96:06:65:b9:7c:10:ab:06:8b:49:7e:08:e5:
97:08:b5:8f:2b:f5:64:f1:e0:c6:07:90:9a:06:0f:18:90:35:
0b:15:3f:d9:34:98:75:d8:3d:9f:80:aa:15:d4:fb:67:e2:a7:
c5:85:88:79:ab:56:77:11:63:0d:ad:15:24:36:43:64:53:bf:
d0:a5:22:5f:0f:24:a6:08:09:0e:af:66:87:9c:e9:c9:72:92:
7a:e6:1e:0c:e7:3c:41:df:84:ee:04:b2:cb:0b:3e:60:90:bd:
67:96:dd:0c:d7:af:c6:f8:67:c7:bd:04:bb:25:43:ce:d9:48:
02:76:d4:27:94:8d:f2:1e:8c:34:64:76:76:70:ed:5d:ec:5d:
cd:e4:72:0d:16:1d:3e:69:2d:44:67:c7:45:72:8a:83:1f:42:
3c:6f:e0:62:e5:2e:b9:5d:f7:df:d5:6a:62:c3:c5:8c:03:d6:
78:00:c6:bd:0f:ca:6d:17:39:5f:98:7d:23:a6:8c:76:18:5b:
89:2b:cb:57:6a:d7:f2:38:33:f9:a0:9f:7a:e1:1c:ea:a4:56:
c5:fc:2e:dd:c1:01:58:f0:9c:89:c0:28:e8:e5:d7:83:f9:c1:
c5:0d:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:14:12 2025 by rpki-client