Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3130312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: oDDiqbJjFMS1a6YUX/i9wIQFalY10kZ/XLdg0hQhhd0=
Subject key identifier: A2:80:93:23:1B:AB:55:8B:71:7C:16:43:E7:EC:EE:E7:9F:75:A2:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6495EB9D89B7E071D1270C5CA1BB60D1A0E0794E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:12 +0000
ROA not before: Tue 02 Sep 2025 14:14:12 +0000
ROA not after: Tue 01 Sep 2026 14:19:12 +0000
asID: 395793
IP address blocks: 145.79.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:95:eb:9d:89:b7:e0:71:d1:27:0c:5c:a1:bb:60:d1:a0:e0:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:12 2025 GMT
Not After : Sep 1 14:19:12 2026 GMT
Subject: CN=A28093231BAB558B717C1643E7ECEEE79F75A28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:e3:ee:03:ff:ef:ad:8c:68:58:fe:fc:77:
76:ee:a8:37:38:5b:fb:4f:3e:d9:ee:76:ef:53:c5:
8c:90:f8:37:65:31:b4:2d:f4:d9:d3:62:10:d3:38:
57:6d:9d:01:b1:69:90:0e:27:0e:fd:4c:3f:5a:f3:
39:13:b3:83:7d:ea:48:2c:ca:16:12:da:ba:9f:55:
d2:fe:0b:b9:bb:f6:5e:e6:8c:d6:fa:39:1a:45:cb:
6e:a9:f1:95:13:9d:8d:e7:3c:7d:87:16:bd:f1:cc:
41:c6:55:59:29:95:c9:12:31:35:11:c5:f6:9b:05:
75:60:77:d9:88:cf:98:f4:3b:06:c3:ee:9a:c5:b0:
42:20:a5:53:0d:c5:79:e5:cb:f1:62:02:9f:e2:4a:
44:5a:d2:4d:40:a8:26:ee:ff:c7:b3:a6:22:3b:ff:
4f:70:84:78:08:c4:f7:b0:f8:f0:55:1d:66:ef:32:
1c:f4:eb:81:b1:fd:f6:eb:07:ec:6a:2c:50:53:59:
ad:f5:19:9d:f9:4b:54:16:a0:ad:a7:d8:f1:0a:89:
53:4b:04:90:51:fd:03:7d:f3:44:03:18:9d:41:60:
ad:29:75:af:4c:53:e5:63:5d:ee:3f:db:bd:48:a7:
c6:7b:2f:0b:fe:0a:2f:db:03:0a:e5:6e:ab:92:95:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:93:23:1B:AB:55:8B:71:7C:16:43:E7:EC:EE:E7:9F:75:A2:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.101.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9b:7a:58:95:24:26:b3:9a:69:ff:c0:34:4a:f2:de:25:f7:
42:12:2b:35:b1:d3:98:f4:be:e5:45:fc:c4:61:3e:2d:90:1b:
8b:c6:cf:db:24:94:a8:b5:8e:3a:21:f8:64:57:25:3b:2b:87:
a4:61:72:50:a0:b6:db:18:a0:3f:1a:92:6a:b4:84:b4:c5:0e:
93:a4:f3:24:6a:a7:3b:7f:b5:da:b7:c9:ee:d7:2b:0f:c3:ec:
43:94:c1:97:fb:1a:b4:27:ba:01:eb:24:4a:09:cf:e3:5e:1c:
f0:1e:b8:91:b4:96:65:cb:8e:aa:57:c9:6f:85:d6:a2:cb:57:
59:4b:cf:73:b9:88:4d:67:e2:de:65:31:56:40:b4:69:a2:02:
21:15:dd:00:58:47:c8:22:30:81:12:0a:80:75:14:fc:13:27:
c7:25:b4:52:83:66:cd:44:be:a3:d8:3f:f5:7e:fb:b4:db:7a:
9f:e3:45:73:bc:fa:3f:e0:0c:55:fa:fb:f5:2a:f6:da:da:69:
42:c0:6e:b5:0f:8d:33:ba:d2:d1:f6:40:18:93:89:99:ab:26:
c2:61:29:2f:ad:ac:4e:49:4d:00:5e:8b:bc:5b:36:6e:58:e2:
fb:dd:eb:49:69:c2:85:0a:02:50:c1:e6:ea:8f:f0:c5:5e:bc:
ff:85:f7:70
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZJXrnYm34HHRJwxcobtg0aDgeU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDIxNDE0MTJaFw0yNjA5MDExNDE5MTJaMDMxMTAvBgNV
BAMTKEEyODA5MzIzMUJBQjU1OEI3MTdDMTY0M0U3RUNFRUU3OUY3NUEyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfuPuA//vrYxoWP78d3buqDc4
W/tPPtnudu9TxYyQ+DdlMbQt9NnTYhDTOFdtnQGxaZAOJw79TD9a8zkTs4N96kgs
yhYS2rqfVdL+C7m79l7mjNb6ORpFy26p8ZUTnY3nPH2HFr3xzEHGVVkplckSMTUR
xfabBXVgd9mIz5j0OwbD7prFsEIgpVMNxXnly/FiAp/iSkRa0k1AqCbu/8ezpiI7
/09whHgIxPew+PBVHWbvMhz064Gx/fbrB+xqLFBTWa31GZ35S1QWoK2n2PEKiVNL
BJBR/QN980QDGJ1BYK0pda9MU+VjXe4/271Ip8Z7Lwv+Ci/bAwrlbquSldxfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUooCTIxurVYtxfBZD5+zu5591oo8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzNzM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT2UwDQYJKoZIhvcNAQELBQADggEBAAebeliVJCazmmn/wDRK8t4l90ISKzWx
05j0vuVF/MRhPi2QG4vGz9sklKi1jjoh+GRXJTsrh6RhclCgttsYoD8akmq0hLTF
DpOk8yRqpzt/tdq3ye7XKw/D7EOUwZf7GrQnugHrJEoJz+NeHPAeuJG0lmXLjqpX
yW+F1qLLV1lLz3O5iE1n4t5lMVZAtGmiAiEV3QBYR8giMIESCoB1FPwTJ8cltFKD
Zs1EvqPYP/V++7Tbep/jRXO8+j/gDFX6+/Uq9traaULAbrUPjTO60tH2QBiTiZmr
JsJhKS+trE5JTQBei7xbNm5Y4vvd60lpwoUKAlDB5uqP8MVevP+F93A=
-----END CERTIFICATE-----
Generated at Fri Sep 5 08:51:53 2025 by rpki-client