Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: Nv75KBLRLYHJIRCy+d+vZ+lf8V6fhLUfHuuumDR0i40=
Subject key identifier: 53:D3:A3:CE:DD:9D:13:88:73:82:24:2A:EB:E4:BC:8B:D5:2A:99:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 36098618BC7854A92B6151569D9C5D3F0EED8216
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:09 +0000
ROA not before: Tue 02 Sep 2025 14:14:09 +0000
ROA not after: Tue 01 Sep 2026 14:19:09 +0000
asID: 395793
IP address blocks: 145.79.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:09:86:18:bc:78:54:a9:2b:61:51:56:9d:9c:5d:3f:0e:ed:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:09 2025 GMT
Not After : Sep 1 14:19:09 2026 GMT
Subject: CN=53D3A3CEDD9D13887382242AEBE4BC8BD52A9959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:bc:94:4a:fc:c6:92:f6:ce:51:94:dd:d7:
ad:00:44:9c:05:28:88:4a:a9:f0:ce:d5:85:bf:13:
e1:d3:5a:bf:3f:38:b4:84:f7:32:ae:b7:e9:a9:16:
0d:29:a9:2a:5b:93:9c:e5:c4:6a:8e:9f:6c:8c:50:
d1:bc:c3:cb:b2:30:87:87:cf:e4:1b:da:8e:fd:ce:
ef:d9:40:eb:f2:84:d8:23:e9:91:09:f9:51:bf:b1:
4f:1f:ba:84:8d:99:40:39:87:74:63:77:3d:94:99:
0d:b2:7c:12:c6:e1:07:d3:55:79:91:d4:7b:41:63:
3d:f1:8c:e1:61:06:3a:1f:e1:24:8b:9a:a9:06:99:
40:11:84:63:a8:51:f8:c2:ba:68:11:a1:b6:93:71:
a7:f6:80:0a:fa:97:67:80:27:1b:d3:a8:77:b1:2c:
c5:4f:ec:1b:c1:f7:bc:9a:1f:c2:0b:a2:8f:90:c7:
e2:53:44:bc:57:2b:b9:00:27:f3:78:82:9b:fb:b8:
dc:ef:3d:35:73:99:5a:61:5d:2c:79:15:3d:a3:2f:
ef:ef:20:84:ed:82:59:5a:b0:bd:57:7e:e2:4c:42:
33:5e:e4:c5:87:3b:7b:91:a9:1c:76:88:c1:39:a9:
40:bc:1f:b5:30:84:ae:87:06:97:87:9c:e7:79:1c:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:A3:CE:DD:9D:13:88:73:82:24:2A:EB:E4:BC:8B:D5:2A:99:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.111.0/24
Signature Algorithm: sha256WithRSAEncryption
32:71:33:68:8a:60:e4:43:02:05:b6:76:e8:52:a0:58:fe:d8:
e4:e6:49:61:48:c9:67:73:26:29:a4:1d:d3:b9:3a:16:ab:1b:
0c:25:bc:cb:45:04:ba:29:6a:8b:65:71:18:26:1e:d9:f7:b8:
a3:9b:39:c8:d1:af:2e:77:c4:f7:27:d1:2a:be:7f:f9:48:90:
d2:94:43:3b:a5:cd:06:90:43:82:e6:af:64:1b:57:77:a1:a8:
d3:ec:4d:9a:bf:28:22:9a:95:d1:50:02:bc:90:ae:33:db:1b:
dd:71:50:5d:8a:de:39:9f:2e:68:b5:40:af:99:a4:3b:94:5f:
7c:81:9a:32:5d:65:a0:6f:09:42:b1:63:72:af:38:b0:07:35:
48:96:82:af:d9:5a:c5:5e:b9:ea:85:4d:9d:9c:9f:28:3b:18:
01:cf:d1:45:bb:1d:e5:39:64:58:52:ce:56:8d:82:94:79:a4:
57:9c:ea:a4:cb:73:df:b8:e8:88:ae:7f:87:97:4c:aa:93:cf:
fb:cd:f8:bc:d7:7e:40:84:96:33:31:13:d5:f2:c2:26:72:11:
1f:42:99:a5:16:3d:1f:6b:ce:74:1f:df:d0:4f:e8:fd:9c:ff:
e5:98:a0:c0:41:3b:89:40:83:96:2d:59:3e:8a:26:c6:d8:bd:
a0:66:8a:e7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNgmGGLx4VKkrYVFWnZxdPw7tghYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDIxNDE0MDlaFw0yNjA5MDExNDE5MDlaMDMxMTAvBgNV
BAMTKDUzRDNBM0NFREQ5RDEzODg3MzgyMjQyQUVCRTRCQzhCRDUyQTk5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpbyUSvzGkvbOUZTd160ARJwF
KIhKqfDO1YW/E+HTWr8/OLSE9zKut+mpFg0pqSpbk5zlxGqOn2yMUNG8w8uyMIeH
z+Qb2o79zu/ZQOvyhNgj6ZEJ+VG/sU8fuoSNmUA5h3Rjdz2UmQ2yfBLG4QfTVXmR
1HtBYz3xjOFhBjof4SSLmqkGmUARhGOoUfjCumgRobaTcaf2gAr6l2eAJxvTqHex
LMVP7BvB97yaH8ILoo+Qx+JTRLxXK7kAJ/N4gpv7uNzvPTVzmVphXSx5FT2jL+/v
IITtgllasL1XfuJMQjNe5MWHO3uRqRx2iME5qUC8H7UwhK6HBpeHnOd5HMNpAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUU9Ojzt2dE4hzgiQq6+S8i9UqmVkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzNzM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT28wDQYJKoZIhvcNAQELBQADggEBADJxM2iKYORDAgW2duhSoFj+2OTmSWFI
yWdzJimkHdO5OharGwwlvMtFBLopaotlcRgmHtn3uKObOcjRry53xPcn0Sq+f/lI
kNKUQzulzQaQQ4Lmr2QbV3ehqNPsTZq/KCKaldFQAryQrjPbG91xUF2K3jmfLmi1
QK+ZpDuUX3yBmjJdZaBvCUKxY3KvOLAHNUiWgq/ZWsVeueqFTZ2cnyg7GAHP0UW7
HeU5ZFhSzlaNgpR5pFec6qTLc9+46Iiuf4eXTKqTz/vN+LzXfkCEljMxE9XywiZy
ER9CmaUWPR9rznQf39BP6P2c/+WYoMBBO4lAg5YtWT6KJsbYvaBmiuc=
-----END CERTIFICATE-----
Generated at Fri Sep 5 08:51:54 2025 by rpki-client