Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: dVQ7ck8P3g6TUsu2UZG6KwoQoBFwJtQjp3pNitw9+Fc=
Subject key identifier: 7B:E3:8A:34:26:76:28:BC:02:E1:E9:EB:CB:E4:73:01:4D:60:99:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B80D289D8CC536D3735D6038473653FF29B8E90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:10 +0000
ROA not before: Tue 02 Sep 2025 14:14:10 +0000
ROA not after: Tue 01 Sep 2026 14:19:10 +0000
asID: 395793
IP address blocks: 145.79.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:80:d2:89:d8:cc:53:6d:37:35:d6:03:84:73:65:3f:f2:9b:8e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:10 2025 GMT
Not After : Sep 1 14:19:10 2026 GMT
Subject: CN=7BE38A34267628BC02E1E9EBCBE473014D6099E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:35:46:f5:ea:59:77:95:70:4f:57:9b:ba:
e1:68:9d:2a:1e:fa:45:b9:ff:99:75:10:d0:43:90:
b5:d1:31:a1:d2:fc:a1:c3:25:c4:50:6c:24:3d:ba:
6a:89:d7:bb:77:bb:17:7c:83:65:55:56:ba:7d:6d:
ff:b4:2e:92:f7:26:9a:29:43:52:7f:71:a5:01:eb:
3c:d6:4e:2f:10:97:45:cb:3e:d8:54:d8:13:9f:09:
29:bd:24:cc:4a:04:0b:ce:bf:55:58:e3:7f:72:37:
7a:81:1e:75:1e:96:1b:8e:65:25:6f:65:12:d8:41:
fa:c9:e7:79:89:02:5d:4e:0a:6c:20:e4:4d:de:55:
f6:b8:26:47:48:f3:02:77:be:cf:f2:be:93:2b:72:
86:f2:a5:26:f4:4e:44:d4:32:81:50:dd:61:b0:95:
a5:86:6b:13:07:7d:6e:ea:db:89:ca:35:95:76:57:
3a:fa:c3:17:7c:b1:fe:27:48:8c:0d:c6:59:c2:68:
1c:d2:50:b5:eb:22:c4:32:5e:e8:2c:be:52:04:e5:
92:61:55:9b:45:af:09:0a:ff:75:f6:41:0e:91:34:
a5:68:ef:c9:38:33:6f:dc:f9:0d:a8:fa:d1:1b:61:
08:11:bf:72:f4:da:59:21:b2:88:17:70:61:b9:85:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:8A:34:26:76:28:BC:02:E1:E9:EB:CB:E4:73:01:4D:60:99:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.115.0/24
Signature Algorithm: sha256WithRSAEncryption
25:63:52:cb:08:94:c5:5b:5d:2a:97:d4:4d:bb:28:95:3b:c8:
d7:ec:a5:d6:0c:ac:e3:64:20:aa:9a:1e:57:09:f0:f4:8b:34:
a8:fc:94:08:b0:12:ed:99:40:86:df:e8:df:17:4d:28:49:b2:
e8:26:20:4f:bb:70:a6:e3:5a:f7:8f:d4:7e:b0:3f:e9:ce:44:
c9:f5:59:47:30:26:49:34:d2:6a:3b:73:57:1f:be:37:cb:22:
19:ac:c9:04:eb:76:41:3c:1f:1a:98:55:ff:b2:60:96:28:ec:
4d:d2:3f:62:e2:fb:d7:08:66:68:92:79:e3:1c:1c:96:0b:7f:
2d:d5:4f:d1:e4:35:92:a5:d5:87:14:f6:da:30:a5:e1:0a:94:
1f:5f:06:93:50:b2:13:e6:61:94:67:5a:86:8d:8a:0c:90:ff:
52:d2:41:04:57:26:4e:c9:87:52:55:5d:22:91:ca:de:0e:d0:
f7:55:e0:49:53:6b:a3:22:86:44:5a:f0:d9:27:fa:31:ea:be:
a3:52:26:7d:74:aa:09:7f:82:1c:0d:aa:6a:d8:04:bb:24:d8:
11:8c:58:69:3f:4e:cd:2a:41:86:85:d0:58:55:05:37:48:97:
68:0a:44:a5:6c:2c:f8:58:f8:f4:b6:8b:68:77:30:c9:81:cd:
ca:3a:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:51:54 2025 by rpki-client