Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e3130342e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: EZx5GO37o7Cxc5paMo2HlF5nBYR1+HrA4LbxpIw8U+c=
Subject key identifier: 54:86:C1:DD:7D:C1:7D:31:5C:B7:78:CB:06:2B:47:E6:98:90:0E:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6D68C546E77B6975EED0B0ABC13D2561D25C83D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2035363530.roa
Signing time: Fri 12 Sep 2025 12:31:16 +0000
ROA not before: Fri 12 Sep 2025 12:26:16 +0000
ROA not after: Fri 11 Sep 2026 12:31:16 +0000
asID: 5650
IP address blocks: 145.11.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:68:c5:46:e7:7b:69:75:ee:d0:b0:ab:c1:3d:25:61:d2:5c:83:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 12 12:26:16 2025 GMT
Not After : Sep 11 12:31:16 2026 GMT
Subject: CN=5486C1DD7DC17D315CB778CB062B47E698900E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:1c:e3:54:e8:d6:e4:1a:a0:8b:e7:ed:1f:
d2:d1:fa:1a:da:13:b5:ed:50:3b:12:1a:d4:b0:43:
d2:94:66:51:3b:3a:59:98:03:d6:70:25:a6:0b:7a:
78:cc:f8:9f:ec:2b:02:2e:14:b6:11:d3:36:fa:24:
70:7a:75:e5:5e:eb:a4:91:26:f2:d8:34:b9:d2:43:
09:40:1a:98:eb:83:15:33:e2:f5:4a:e8:65:a6:f4:
5f:3a:15:3c:37:f4:18:72:52:bd:0c:55:31:72:93:
e0:ed:15:a1:4f:9b:08:54:74:4d:4f:6d:6a:82:ef:
7b:a9:14:35:43:86:06:b5:0d:b5:81:12:bf:dc:47:
86:ca:55:61:ff:dd:ec:ba:9b:3b:9c:0a:d7:ad:80:
de:70:0a:b3:4c:9c:9f:61:5e:27:bf:55:37:29:49:
fd:0a:53:51:64:1c:33:f7:37:72:5b:6a:18:ff:eb:
cb:d7:af:c0:39:7f:41:34:f8:c9:a5:20:e7:aa:c8:
13:fc:58:4e:af:09:1c:a2:53:2f:89:81:29:9a:22:
27:ac:51:b5:ed:44:4b:e0:cf:b8:fe:5b:6c:79:f8:
d5:7c:13:28:4b:5e:72:69:8e:9b:d4:48:94:55:54:
46:cf:53:2d:a6:94:f5:7c:11:10:2e:79:95:81:0f:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:86:C1:DD:7D:C1:7D:31:5C:B7:78:CB:06:2B:47:E6:98:90:0E:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.104.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:21:92:e1:28:72:4c:03:db:a8:d5:b1:67:90:8c:02:a3:55:
30:2a:c1:bf:72:03:e9:57:bb:2c:72:02:41:72:5c:64:af:c9:
0c:1a:e2:f4:4d:e0:f6:4c:eb:92:bf:99:85:f4:b0:40:39:f7:
fe:c7:de:ce:30:d3:f8:73:86:b6:4a:2e:a5:1c:de:5a:20:00:
75:e2:53:08:46:83:2c:8f:8a:94:2b:af:36:01:11:f5:6d:8a:
c7:7e:78:be:cb:99:57:50:88:ce:4e:1a:73:a2:bf:eb:18:da:
b4:7b:21:2a:bb:ce:d3:00:98:02:bf:27:9f:6a:fc:44:ae:07:
75:ee:61:ea:35:09:7e:7a:df:e3:cd:0f:94:f7:36:b6:df:e5:
51:93:39:b7:bd:65:68:02:b6:71:41:41:5a:b5:46:40:d4:34:
5a:1e:93:6d:ec:10:a4:dc:a5:c0:d3:f5:52:58:ca:88:e5:07:
cb:3c:26:f5:6c:b9:0c:ab:43:4e:1c:e5:3b:6c:bc:72:8c:8a:
15:a1:0c:67:41:be:0d:d5:df:4b:6d:32:11:42:03:74:72:fb:
11:9d:17:6b:88:cf:f1:d4:a6:73:18:61:c5:71:90:0d:b7:bd:
b3:c8:34:d4:93:1c:75:98:97:6e:0b:f1:e3:aa:b3:34:63:79:
95:64:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:07 2025 by rpki-client