Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: u+eWUvC5GcvR81UjMoDcqeDNQKvp7JN22YR+Q5EJT8c=
Subject key identifier: 28:6A:67:60:8D:C5:31:96:C1:7A:24:5C:E6:F6:08:5F:01:4F:89:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DA5DE1B1A70B797393DC867EAECCFB2BDA0F037
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:11 +0000
ROA not before: Tue 02 Sep 2025 14:14:11 +0000
ROA not after: Tue 01 Sep 2026 14:19:11 +0000
asID: 395793
IP address blocks: 145.79.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a5:de:1b:1a:70:b7:97:39:3d:c8:67:ea:ec:cf:b2:bd:a0:f0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:11 2025 GMT
Not After : Sep 1 14:19:11 2026 GMT
Subject: CN=286A67608DC53196C17A245CE6F6085F014F892C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:d0:b2:dd:8c:77:e7:af:c9:a0:db:87:ad:
96:6e:92:5d:20:5a:33:4c:fa:52:5f:98:46:15:c6:
19:8f:ef:36:3d:8f:37:13:4c:33:55:ad:81:11:48:
2d:22:2b:44:01:46:7f:3c:bf:d8:89:aa:33:71:54:
8d:d7:d6:2a:d4:e5:f0:40:48:d8:80:c7:93:10:ad:
62:98:24:4d:d7:e1:10:95:85:f8:01:1b:db:87:87:
ce:62:0a:6e:a4:c9:e9:88:cd:f2:11:1e:4f:a6:18:
5e:73:83:4d:e4:0f:00:26:0d:1d:6a:b3:db:43:aa:
58:55:f7:84:57:7f:64:2c:58:3f:5f:e6:cb:61:d3:
05:b8:cb:b8:48:cf:48:f0:8d:00:d1:89:6c:75:ba:
25:33:a7:ad:63:32:bf:7e:12:8f:b0:93:96:91:4c:
57:b3:05:85:d7:26:7f:32:ae:1a:93:f6:77:b4:b5:
d9:4e:df:ff:f2:9c:7b:39:a3:ce:02:b0:4a:ae:15:
83:5b:a5:45:4f:16:a4:7b:82:76:39:72:f2:af:37:
15:a5:de:d5:f7:82:62:94:46:ea:a6:46:a0:da:ed:
6e:f4:fa:bd:13:8c:49:5a:de:60:ff:b5:a7:52:80:
5c:20:54:01:85:fa:66:1c:b5:2c:25:de:d3:90:f5:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:67:60:8D:C5:31:96:C1:7A:24:5C:E6:F6:08:5F:01:4F:89:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.119.0/24
Signature Algorithm: sha256WithRSAEncryption
78:44:9f:ee:96:8d:61:49:51:1b:0e:2f:74:c1:72:d1:2f:36:
1c:f4:42:49:82:0b:c4:2c:e5:83:44:04:84:a1:15:a1:12:89:
d4:a6:f9:7d:a5:4c:f5:19:40:a6:ed:4c:ff:4f:8a:24:a4:28:
0d:eb:ce:3f:ef:de:0c:c9:e8:76:6d:4f:05:72:23:6d:7e:83:
50:91:16:50:00:a6:35:c0:f5:af:5d:5f:7e:38:62:67:d5:8c:
16:c6:5e:a6:21:65:e2:34:5e:7f:43:f0:d9:26:6a:13:8b:90:
91:60:ce:e0:9a:0e:a2:9f:a2:c2:54:26:40:9e:e5:ab:70:b4:
48:5d:3a:f8:6b:ed:b7:9f:cf:8a:ae:c9:dc:23:af:22:0a:00:
3c:f9:f2:64:66:13:b9:32:1e:ae:96:19:c7:32:28:ee:56:65:
cf:f0:f3:26:54:6d:53:8a:8a:28:7f:23:fe:f6:e9:b2:e0:96:
21:d7:e4:02:f4:07:c1:2b:6c:86:07:a4:74:e9:a5:66:d3:1a:
54:a5:80:66:ee:53:f3:9f:26:f6:27:2f:fa:a7:a0:ea:d4:d8:
90:74:31:72:92:4e:0e:ea:11:6f:15:05:04:53:96:58:93:15:
0c:df:5c:54:1c:69:3f:f8:aa:73:86:11:67:ef:ae:ae:96:c9:
6e:01:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:51:55 2025 by rpki-client