Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131362e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131362e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: DTlmKhrbBJNunsskD8zmC3eKoL1kxrOzehIFjaBVtsw=
Subject key identifier: 11:32:BB:E9:DE:F2:1E:94:01:68:D7:81:5D:BC:48:7A:3C:B2:0D:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A3D3313EDDDA3C353B73C19AB42A6EE99F47A11
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131362e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:13 +0000
ROA not before: Tue 02 Sep 2025 14:14:13 +0000
ROA not after: Tue 01 Sep 2026 14:19:13 +0000
asID: 395793
IP address blocks: 145.79.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:3d:33:13:ed:dd:a3:c3:53:b7:3c:19:ab:42:a6:ee:99:f4:7a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:13 2025 GMT
Not After : Sep 1 14:19:13 2026 GMT
Subject: CN=1132BBE9DEF21E940168D7815DBC487A3CB20D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:ba:0a:88:05:2d:f4:5b:f8:4c:a6:c7:a3:
90:8f:0c:b1:95:5e:2f:70:48:4d:38:f6:cb:95:22:
6c:00:05:d7:3d:82:c1:80:85:64:07:b8:3d:2d:18:
2e:94:27:68:e4:33:3b:2c:db:34:fa:d5:0a:5e:74:
62:8f:c2:54:fa:57:8f:00:fd:16:66:af:c0:dd:b6:
f5:29:5c:78:42:2e:96:3b:9e:93:2e:35:e2:9d:5a:
70:15:ce:92:77:e7:1d:3e:a3:61:34:84:45:bb:e6:
96:ef:30:d9:6e:4c:80:5b:9b:cb:5e:61:04:c4:8d:
fe:e8:e1:77:c7:20:3c:04:81:f3:ae:7d:80:4f:89:
8a:fe:38:35:4c:41:0d:fd:40:95:19:29:8a:d0:86:
52:0d:f4:1f:58:37:56:71:4e:d4:5d:33:c2:9d:09:
28:55:63:46:38:60:ff:31:83:2f:bd:ab:7e:b8:7c:
8d:a8:12:c2:e7:37:0d:a8:34:b8:00:99:df:b7:fc:
91:91:04:bf:67:2e:dc:55:f2:d9:8c:ec:bc:b9:93:
a2:cf:bd:51:60:e8:b4:6b:d6:28:f0:7d:d5:49:2d:
03:67:41:42:fb:64:80:40:f8:4b:6c:fa:16:48:b0:
a7:73:6c:7b:aa:71:c2:74:2c:e6:82:13:dd:ae:38:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:BB:E9:DE:F2:1E:94:01:68:D7:81:5D:BC:48:7A:3C:B2:0D:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131362e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.116.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0e:67:d1:2e:a0:5d:da:c8:5c:29:76:fd:b7:5e:d2:f0:f6:
22:60:c2:8c:c2:27:3c:d3:29:1f:29:72:04:c8:db:60:b0:7f:
a9:2e:0f:5f:32:d6:c5:83:b3:00:c6:87:97:5a:16:80:eb:4e:
2c:42:da:87:41:7a:1a:eb:9a:8f:98:1b:1b:b3:80:b4:47:13:
3b:a6:a1:32:26:97:10:0f:fd:78:f1:0f:63:30:fd:2e:d0:f2:
82:5c:55:8c:a5:a0:f6:ce:8c:27:a4:cc:a4:18:a9:d7:b0:1d:
7d:9d:b2:21:df:40:2f:45:32:31:41:bb:df:d4:1a:f7:e2:d9:
28:73:63:62:1a:16:86:bc:17:2c:d3:3e:47:f6:dc:9b:27:51:
6a:4a:0d:c1:fe:66:c2:47:f4:8d:84:e0:3f:c4:96:3e:fc:2f:
d1:3a:37:c1:d9:49:e3:81:e6:01:73:e3:c7:f8:b3:a8:e9:1b:
b9:86:73:30:6d:56:0c:4b:0a:f6:18:8c:ff:73:e7:84:6c:e7:
bd:70:73:87:d2:85:9d:b5:ed:7c:13:1c:15:fb:75:7d:16:05:
0a:3a:5b:77:30:e2:2e:77:9c:d9:0e:cb:86:59:d0:02:96:e7:
d4:d7:9f:c4:df:58:83:bc:45:cf:ab:cd:46:ed:a0:cb:d0:fa:
54:35:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:51:52 2025 by rpki-client