Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: P19pF1V/RFqaXJSTeUO01cPaeRnvBUpzilFD8/Jtzwk=
Subject key identifier: DA:DB:17:95:7D:D1:B6:AB:91:AB:FC:14:6D:AF:88:B6:4E:20:00:7F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24EB053E3083B8A739C0F973094E2139A987CB26
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:08 +0000
ROA not before: Tue 02 Sep 2025 14:14:08 +0000
ROA not after: Tue 01 Sep 2026 14:19:08 +0000
asID: 395793
IP address blocks: 145.79.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:eb:05:3e:30:83:b8:a7:39:c0:f9:73:09:4e:21:39:a9:87:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:08 2025 GMT
Not After : Sep 1 14:19:08 2026 GMT
Subject: CN=DADB17957DD1B6AB91ABFC146DAF88B64E20007F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:e2:70:d0:47:41:68:58:a3:5c:4a:a2:e6:
05:ea:30:cd:6b:ed:f7:70:24:75:d0:95:89:8e:64:
d5:4c:91:27:1e:f2:41:a0:7a:91:f5:d8:e4:50:d0:
d9:28:8d:0a:ab:13:78:0f:4b:9a:1a:eb:ef:6c:4a:
7c:38:57:8e:0e:05:a5:e7:a7:7f:e7:2d:2e:ef:5f:
4e:2e:48:1c:c7:51:de:ad:75:e2:69:2c:fb:a8:d9:
cb:6d:60:d5:9f:bc:87:12:27:bd:f6:e6:4c:ec:6f:
be:cc:07:9a:14:42:02:bb:1d:a3:36:96:fa:0b:22:
c4:b2:5e:1f:d2:87:51:c8:5b:50:e4:c3:32:f1:3f:
a7:55:3f:17:62:23:b8:c5:d2:65:84:42:1e:70:85:
02:df:a6:39:05:ac:8a:de:39:fa:64:0e:fc:2f:2a:
63:40:46:0d:6e:39:6e:70:f5:8d:61:c9:56:61:4e:
46:0c:77:06:2a:82:5c:14:7f:e1:de:09:d1:7c:21:
0c:85:16:e0:bb:b3:dc:41:a3:96:ed:41:7c:9a:52:
68:dd:28:6d:dc:3e:97:88:20:8f:ac:e2:53:6d:2a:
45:c1:47:e7:5f:4a:e3:6a:28:a2:af:e3:f2:a2:63:
c5:4c:8e:72:f8:c7:9e:d3:c3:0c:a0:4b:ce:c8:57:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:17:95:7D:D1:B6:AB:91:AB:FC:14:6D:AF:88:B6:4E:20:00:7F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.104.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a4:db:88:e9:94:3d:df:b7:b5:f2:cd:89:34:d9:66:76:e7:
a6:88:f0:88:99:ae:4d:88:0b:76:fd:56:12:01:68:e9:96:86:
29:90:53:c5:64:f2:9f:a4:76:4f:cf:73:25:03:e7:dd:6c:5d:
c7:bd:26:75:8c:4d:20:eb:f7:ad:0c:29:2e:27:1a:4f:04:85:
74:74:75:e6:21:65:fd:e5:df:00:8e:ef:3d:b4:71:b8:29:04:
93:e1:fd:55:47:fa:d5:fd:27:f8:e5:68:c9:85:28:66:55:f8:
08:45:a4:9a:57:10:89:82:2d:c5:e8:49:3f:7b:aa:96:05:bb:
6a:67:31:01:73:ee:14:c9:e6:0b:ba:0d:5a:02:86:36:26:ee:
70:ea:ec:93:1e:e0:0b:ed:2c:c8:6a:89:6c:ca:1b:ea:02:9d:
36:84:e9:35:41:2b:57:6b:66:13:d9:da:80:1f:a1:7d:c4:42:
51:f7:da:2a:45:80:16:83:df:2c:69:44:a4:73:40:71:3c:fa:
c9:45:ac:03:bb:ed:09:92:f0:9e:d0:dc:d0:c5:5a:04:c0:39:
ce:b2:f0:fa:ae:13:05:6b:c1:d6:64:03:03:c5:37:1b:0a:db:
6a:b1:71:52:10:ec:04:47:71:6a:50:68:bd:2c:5f:74:88:81:
ab:12:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:50:55 2025 by rpki-client