Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e37322e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e37322e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: rr+klAQNoi9YY0tYtdhdQDB8wWR31mIdCF8r/AOUJDM=
Subject key identifier: 41:6C:A8:26:25:AF:3D:EB:03:72:AE:77:51:CA:0F:77:7D:E6:60:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63A9CD6A2538EE0295CD5FE9130AB9B61AC6806F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e37322e302f32312d3234203d3e2035363530.roa
Signing time: Fri 12 Sep 2025 12:31:13 +0000
ROA not before: Fri 12 Sep 2025 12:26:13 +0000
ROA not after: Fri 11 Sep 2026 12:31:13 +0000
asID: 5650
IP address blocks: 145.11.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a9:cd:6a:25:38:ee:02:95:cd:5f:e9:13:0a:b9:b6:1a:c6:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 12 12:26:13 2025 GMT
Not After : Sep 11 12:31:13 2026 GMT
Subject: CN=416CA82625AF3DEB0372AE7751CA0F777DE660E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:77:3e:ac:be:3a:19:0c:0d:cd:e6:be:da:
7a:27:a2:31:69:4f:c2:92:60:79:4d:10:cd:1d:d0:
08:2a:ce:c2:e6:fc:f2:26:5c:d7:30:3d:0e:d8:64:
cb:50:fb:34:a2:25:e0:b4:91:b5:c4:98:54:8e:0e:
34:d6:e7:9d:09:39:b6:0f:3a:4b:3a:92:41:6e:12:
31:c2:1d:64:b4:e7:e9:af:80:71:e6:74:d5:6f:a1:
19:71:98:94:9a:f0:88:ef:44:02:30:80:b0:6c:0c:
28:7d:c6:15:37:9d:fd:f8:7c:db:38:93:9b:c0:65:
0e:39:b7:bd:61:d8:f6:f5:f1:43:30:81:25:57:4c:
b8:79:d8:72:47:63:e7:a2:a2:2c:3f:8d:67:4c:57:
ea:74:7b:f0:17:f5:10:be:2e:5d:42:69:90:95:f9:
63:ce:3a:8c:16:4c:12:62:bd:4b:4d:b3:70:1b:1f:
ba:51:fe:c2:d8:f4:0c:ae:1d:b1:0e:0f:33:0b:66:
78:61:36:5b:b9:7a:06:a4:07:58:42:b9:65:4d:48:
28:a3:d8:d2:c1:90:51:3a:aa:07:e4:fc:85:9b:78:
00:a6:9c:fa:ec:ed:f8:95:ba:5e:d2:08:f3:bd:6c:
47:d2:62:a4:39:59:db:e5:1f:cf:88:ce:1f:45:61:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6C:A8:26:25:AF:3D:EB:03:72:AE:77:51:CA:0F:77:7D:E6:60:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e37322e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.72.0/21
Signature Algorithm: sha256WithRSAEncryption
18:62:92:9c:71:10:54:b3:ae:72:e4:df:e6:90:e0:b5:b5:0b:
f0:64:48:dc:01:2f:b3:e4:fc:06:83:c5:1f:e7:c1:5d:bc:26:
65:7e:50:01:59:40:da:d2:47:b9:52:e0:30:76:2c:b8:09:4d:
c6:77:7e:0b:36:76:e8:ca:26:4a:d8:62:64:5b:24:b2:f1:33:
a0:90:6b:e3:7b:61:32:8a:45:06:f0:26:05:fb:c8:9c:ef:a0:
25:73:79:ea:80:db:66:ba:5e:36:c3:16:2a:10:29:76:2f:56:
1e:82:6e:f8:49:94:e7:38:42:fb:0b:cd:ab:07:5c:f8:91:5a:
6e:bb:4b:1a:7d:a8:1f:11:82:35:d9:c7:07:6d:5d:f4:36:76:
f8:5a:fe:4b:f2:61:b9:62:27:71:50:b9:5e:e8:b1:05:e7:7f:
ea:d2:73:eb:8f:f1:af:a9:27:f6:68:ca:3c:b0:ef:22:fa:96:
f1:90:8e:a3:9a:ad:e3:b0:d9:49:cd:28:cd:45:88:73:ae:dd:
69:81:32:6d:83:2f:90:21:ed:6b:c8:0e:46:10:24:b3:f7:cb:
f3:e7:3b:3b:0c:54:eb:b4:8c:e7:52:a3:f2:38:78:3e:81:55:
e3:ac:d9:a7:1a:38:e9:91:ef:5c:eb:47:08:bf:4d:09:cb:88:
8f:c2:52:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:06 2025 by rpki-client