Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e36342e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e36342e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: 79GJA9p8LdVFcZ4XV1JfJEYFKO0gX7dhC0BzJzE55co=
Subject key identifier: 28:77:62:89:C9:F1:31:7F:60:7C:E2:C6:DF:A1:61:81:DB:14:BA:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67E2BC2C7E96AD4C60C09D44860624E444150975
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e36342e302f32312d3234203d3e2035363530.roa
Signing time: Fri 12 Sep 2025 12:31:12 +0000
ROA not before: Fri 12 Sep 2025 12:26:12 +0000
ROA not after: Fri 11 Sep 2026 12:31:12 +0000
asID: 5650
IP address blocks: 145.11.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e2:bc:2c:7e:96:ad:4c:60:c0:9d:44:86:06:24:e4:44:15:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 12 12:26:12 2025 GMT
Not After : Sep 11 12:31:12 2026 GMT
Subject: CN=28776289C9F1317F607CE2C6DFA16181DB14BA02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:3e:20:75:80:a6:45:0d:01:4d:fe:07:b3:
b9:92:db:8e:cb:35:89:85:89:14:6e:d2:a6:02:64:
4b:09:72:c6:f6:77:a4:3a:a6:1e:9e:84:4d:9e:da:
80:36:f7:5a:00:b0:04:5d:de:47:7e:bc:45:e6:82:
af:2c:c8:df:10:1e:8a:1b:a4:0c:af:6c:5a:dc:0f:
11:7c:68:5b:c4:af:ff:95:a9:ce:72:2a:9a:ed:dd:
a6:39:a1:8e:41:eb:e7:a4:06:d9:95:4a:00:6a:68:
23:96:de:44:85:0a:22:6b:e6:83:e8:7c:e2:6c:a6:
d5:83:4c:82:df:52:0f:77:6e:5f:d9:c5:7d:aa:9c:
a4:57:15:97:e4:12:f5:b4:ee:0a:12:7b:ed:81:49:
64:38:b6:3f:d9:e3:c5:5a:ec:25:05:73:58:2b:aa:
32:7c:63:97:56:4b:30:cd:fa:9d:a6:40:24:76:b7:
09:f4:e7:bf:42:fb:c2:a4:22:9e:fe:b8:51:df:8b:
ef:10:f6:05:0e:06:e7:85:1b:12:aa:9d:c7:e0:15:
bd:07:c1:c0:fe:1f:e6:53:d1:06:2d:44:c5:7a:17:
37:ec:da:e7:93:89:6c:99:1d:8f:11:7f:24:05:6e:
18:54:a0:39:f6:f9:c7:f2:78:a2:5f:14:f6:ac:04:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:62:89:C9:F1:31:7F:60:7C:E2:C6:DF:A1:61:81:DB:14:BA:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e36342e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.64.0/21
Signature Algorithm: sha256WithRSAEncryption
14:5d:59:60:46:ee:56:ba:8d:50:75:a3:68:d4:3f:b8:09:c5:
9d:2c:3f:0c:3f:64:61:87:74:01:d6:ab:f5:27:b4:3d:27:d7:
91:9d:f4:7b:f8:4b:34:b2:f0:75:09:5d:d2:21:4e:50:57:69:
e8:26:3f:df:85:c4:6d:56:de:7a:66:77:fe:1e:be:17:9f:0f:
62:ab:f9:7a:b9:ce:7c:ad:50:95:0c:82:bf:22:ea:64:17:cf:
aa:3f:7f:1d:7f:91:6c:3a:a4:41:eb:80:73:d8:5e:78:48:ae:
3d:67:18:b6:8b:5c:a0:0b:c2:a7:5c:3e:ad:8f:cf:00:cf:76:
14:5a:cc:a5:21:59:f1:7f:35:92:44:d2:a5:79:c2:08:3a:a8:
b4:5c:75:52:a8:7a:55:91:07:73:78:c7:4f:ef:72:48:d5:d5:
fb:db:58:e6:f2:c0:cf:f8:25:f8:08:ff:16:ac:e6:68:17:a5:
bf:69:88:09:d5:b0:eb:dc:47:0e:76:fe:63:64:1a:50:27:30:
a7:60:dd:02:8a:a3:3d:a8:7f:81:5c:10:a5:0d:19:15:35:f2:
78:68:d8:4b:0e:e1:12:56:e6:fe:1c:8c:22:ae:5d:3c:35:6f:
cc:1a:ff:08:bb:e8:3f:70:31:51:86:52:b4:0a:99:44:83:3e:
3d:81:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:08 2025 by rpki-client