Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3130302e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: T8/T1emwNavPimA1ahIPhfVNEaGkrYL/l8jq0NzTJaM=
Subject key identifier: C9:61:A6:5B:79:97:3B:31:15:E1:6A:6F:11:6F:43:C3:DB:56:80:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52E3DB51F2119759D6143C7A9F0E8040B28B4E0C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:07 +0000
ROA not before: Tue 02 Sep 2025 14:14:07 +0000
ROA not after: Tue 01 Sep 2026 14:19:07 +0000
asID: 395793
IP address blocks: 145.79.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e3:db:51:f2:11:97:59:d6:14:3c:7a:9f:0e:80:40:b2:8b:4e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:07 2025 GMT
Not After : Sep 1 14:19:07 2026 GMT
Subject: CN=C961A65B79973B3115E16A6F116F43C3DB56802D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:54:3a:1c:9a:bf:c2:0e:7e:17:2f:87:04:
19:8e:41:02:ec:3b:a0:98:d1:aa:a2:85:2a:da:1c:
e1:46:57:4d:03:63:b5:19:62:f2:42:90:39:e4:ed:
47:8d:22:f4:43:35:f9:8d:a6:8e:63:04:e8:4f:17:
08:05:06:56:b6:83:99:90:70:4f:6c:73:0a:e5:b3:
93:50:11:dc:6b:ba:4d:5f:6a:99:2a:98:f2:22:c0:
d6:0a:61:7a:f4:28:f8:be:00:23:6a:5e:97:27:1d:
6a:0b:b7:03:12:16:2d:8d:17:96:50:16:04:96:0f:
f3:15:8f:b8:09:80:1f:b3:ff:d9:f8:df:23:fb:e8:
b4:3c:55:6b:27:e3:9c:6d:80:62:56:9a:37:b5:03:
65:16:c1:d7:0b:c2:eb:f9:39:13:7d:2f:aa:d0:7c:
4c:05:31:d3:a8:32:0d:54:9d:77:49:ae:a8:e8:66:
75:bc:42:d3:a4:5f:ec:86:0f:47:66:29:0f:5f:6c:
82:a2:42:76:1b:9d:e1:fc:40:e8:e4:be:46:e6:f9:
33:fb:fe:36:c5:f8:ff:6b:34:a7:4c:61:ae:de:c2:
39:94:67:54:ff:e9:78:99:7a:b7:88:b6:7d:11:00:
8b:68:e3:38:8e:e0:75:7a:b9:03:83:25:fe:4a:44:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:61:A6:5B:79:97:3B:31:15:E1:6A:6F:11:6F:43:C3:DB:56:80:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.100.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d9:d7:97:80:3c:b4:11:ae:ba:00:19:ef:c7:a3:7b:63:c8:
f1:dd:42:88:b9:f2:54:c3:a0:a9:d4:09:80:6b:4f:f4:37:20:
61:a7:e5:7b:09:b7:76:f6:cf:f0:d9:ba:c6:7a:d1:7a:a1:49:
a1:15:8e:08:d4:da:88:23:1c:5c:b6:8c:0e:77:e0:30:85:46:
9b:79:92:c5:0c:1a:03:22:b9:2a:cd:4f:eb:d7:b4:53:31:07:
a0:c3:fb:e3:5b:de:8d:17:d1:11:54:02:40:aa:8a:2c:09:00:
cb:3c:bb:ef:a0:50:b0:24:39:7a:94:af:5a:e9:d9:7f:52:e1:
ed:d3:66:dc:9a:88:e8:1f:d7:0f:ec:b8:76:34:e5:8e:5c:cc:
e0:a6:5a:21:c6:c7:e9:cb:e4:ad:14:fa:7a:ae:f2:22:e5:a7:
88:b2:7e:ee:2f:24:54:01:00:e0:2b:60:dd:b4:9d:c6:f4:98:
e0:64:c4:f1:b1:3e:95:4d:ad:42:84:a1:5e:44:1e:ac:ac:39:
d2:91:10:c7:3a:a4:f5:93:c2:f3:a4:1c:e2:9e:6e:a9:79:0a:
6d:ad:ec:e8:18:5f:88:8f:44:00:8a:56:79:fb:bf:4a:9d:26:
46:e4:d3:3f:17:f3:97:ef:55:3f:a1:7c:d8:52:35:1e:bc:c1:
ca:92:84:c2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUUuPbUfIRl1nWFDx6nw6AQLKLTgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDIxNDE0MDdaFw0yNjA5MDExNDE5MDdaMDMxMTAvBgNV
BAMTKEM5NjFBNjVCNzk5NzNCMzExNUUxNkE2RjExNkY0M0MzREI1NjgwMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqVQ6HJq/wg5+Fy+HBBmOQQLs
O6CY0aqihSraHOFGV00DY7UZYvJCkDnk7UeNIvRDNfmNpo5jBOhPFwgFBla2g5mQ
cE9scwrls5NQEdxruk1fapkqmPIiwNYKYXr0KPi+ACNqXpcnHWoLtwMSFi2NF5ZQ
FgSWD/MVj7gJgB+z/9n43yP76LQ8VWsn45xtgGJWmje1A2UWwdcLwuv5ORN9L6rQ
fEwFMdOoMg1UnXdJrqjoZnW8QtOkX+yGD0dmKQ9fbIKiQnYbneH8QOjkvkbm+TP7
/jbF+P9rNKdMYa7ewjmUZ1T/6XiZereItn0RAIto4ziO4HV6uQODJf5KRKq7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUyWGmW3mXOzEV4WpvEW9Dw9tWgC0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzNzM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT2QwDQYJKoZIhvcNAQELBQADggEBAHDZ15eAPLQRrroAGe/Ho3tjyPHdQoi5
8lTDoKnUCYBrT/Q3IGGn5XsJt3b2z/DZusZ60XqhSaEVjgjU2ogjHFy2jA534DCF
Rpt5ksUMGgMiuSrNT+vXtFMxB6DD++Nb3o0X0RFUAkCqiiwJAMs8u++gULAkOXqU
r1rp2X9S4e3TZtyaiOgf1w/suHY05Y5czOCmWiHGx+nL5K0U+nqu8iLlp4iyfu4v
JFQBAOArYN20ncb0mOBkxPGxPpVNrUKEoV5EHqysOdKREMc6pPWTwvOkHOKebql5
Cm2t7OgYX4iPRACKVnn7v0qdJkbk0z8X85fvVT+hfNhSNR68wcqShMI=
-----END CERTIFICATE-----
Generated at Fri Sep 5 08:51:55 2025 by rpki-client