Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3132302e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e3132302e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: OKlH5aZj/Emoz56zdulEMd4qhGh3rYH7VT3hHMu5uWc=
Subject key identifier: 4F:FB:FE:0F:5C:DC:8E:45:F5:12:A8:C1:E9:B1:0D:C2:75:34:02:58
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18E9ABBF8DACD094EF8158C728A05F5C45B1F823
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3132302e302f32312d3234203d3e2035363530.roa
Signing time: Fri 12 Sep 2025 12:31:19 +0000
ROA not before: Fri 12 Sep 2025 12:26:19 +0000
ROA not after: Fri 11 Sep 2026 12:31:19 +0000
asID: 5650
IP address blocks: 145.11.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e9:ab:bf:8d:ac:d0:94:ef:81:58:c7:28:a0:5f:5c:45:b1:f8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 12 12:26:19 2025 GMT
Not After : Sep 11 12:31:19 2026 GMT
Subject: CN=4FFBFE0F5CDC8E45F512A8C1E9B10DC275340258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:7b:85:4f:ef:77:0c:12:b0:0c:eb:5e:f1:
39:63:14:86:f8:fb:61:6a:20:a0:6e:b1:07:a6:b9:
e2:be:01:e6:7f:19:b9:77:ba:cb:98:1c:5b:93:09:
c6:b6:22:c2:f5:46:6d:97:9a:4c:84:90:c2:b9:18:
1f:75:fa:d4:75:48:fc:54:bb:51:93:b6:43:29:d9:
69:00:ef:ed:a5:df:20:0a:29:dc:b0:47:db:05:56:
36:76:39:ae:0c:c6:f9:ab:28:27:ba:f6:9e:44:59:
d6:aa:88:f9:4a:09:2a:72:80:d5:e4:50:10:5b:43:
91:e8:f4:4d:a6:9a:5c:29:ab:e4:18:10:96:47:7d:
ca:6c:8a:09:fb:e5:f1:86:d6:36:30:d2:31:7d:0c:
f5:0a:ea:b1:c4:23:cb:46:03:31:9f:5c:30:23:b3:
53:24:1b:18:1a:67:bf:63:34:3a:c3:60:57:5e:cd:
3f:8e:5b:f1:32:39:12:ef:a7:0f:a7:54:fa:23:12:
7f:1b:ab:9f:d6:5f:31:1e:d2:1c:d0:61:35:82:42:
06:f3:0e:1b:8c:2c:98:bf:47:77:60:cc:5c:00:b1:
a6:af:70:e8:35:f5:11:58:a0:de:03:2d:0c:1f:8c:
b7:9d:ed:b4:71:2b:aa:a8:da:7d:7a:33:a6:a1:ab:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:FE:0F:5C:DC:8E:45:F5:12:A8:C1:E9:B1:0D:C2:75:34:02:58
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3132302e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.120.0/21
Signature Algorithm: sha256WithRSAEncryption
89:b4:3d:c6:74:f8:1a:6a:d3:42:ec:c5:22:b7:21:42:cc:f8:
89:54:df:f7:78:9c:12:a4:08:d7:82:0c:60:8e:b7:17:28:ff:
e6:29:df:97:38:dc:16:d8:29:29:d2:66:ef:7a:3c:16:51:0f:
f6:98:3e:2e:8f:13:86:89:05:a3:1a:b6:0a:d3:2e:01:eb:31:
15:51:19:97:dc:20:ff:52:6e:ed:72:a3:37:72:a8:35:a4:bb:
ca:4c:f5:4a:59:b2:cc:86:a8:d6:23:60:b1:49:67:0d:09:d4:
81:20:03:a0:34:56:ed:83:d4:48:6b:aa:14:59:56:04:97:c2:
a5:ed:b2:04:18:ea:66:3d:4f:c5:d4:58:af:2e:4a:98:1a:69:
a8:c7:37:0f:6f:d9:d1:91:63:29:52:62:94:e3:0a:19:b1:24:
4a:1d:33:69:71:f3:a8:69:40:9f:18:c6:e8:67:b5:ea:22:7d:
2d:5e:10:1c:36:d8:04:97:cb:db:34:05:ab:b5:d3:65:bf:b0:
52:86:24:ee:b2:02:4a:77:03:4d:79:14:c6:79:ad:3b:59:fa:
80:55:a2:48:95:47:48:a9:a9:aa:24:76:82:32:23:5f:f6:49:
04:b4:ef:a3:79:f6:3e:b5:fd:9d:67:f8:6a:19:92:09:60:26:
9e:20:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:07 2025 by rpki-client