Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: QYlpHcMwDJ+aZY5WG+FSOb5ZKgaOKzIL9PJnO7+vr6k=
Subject key identifier: 75:E4:3C:D4:89:E5:03:47:6C:A7:B8:7D:5A:FE:79:89:7F:45:3A:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21A8E17C10BF5AC868BFFA969E8B3750D085001D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Sep 2025 12:23:51 +0000
ROA not before: Thu 04 Sep 2025 12:18:51 +0000
ROA not after: Thu 03 Sep 2026 12:23:51 +0000
asID: 214143
IP address blocks: 145.79.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a8:e1:7c:10:bf:5a:c8:68:bf:fa:96:9e:8b:37:50:d0:85:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 12:18:51 2025 GMT
Not After : Sep 3 12:23:51 2026 GMT
Subject: CN=75E43CD489E503476CA7B87D5AFE79897F453A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:83:5a:74:48:06:56:76:b8:3d:c1:1a:17:
37:56:5d:22:1b:c3:e7:59:d5:00:66:0e:55:f1:2a:
69:f8:59:2f:18:bd:b8:37:06:5e:95:89:1f:ea:90:
16:e2:c7:63:27:6f:65:1a:e8:f4:bc:ee:64:56:64:
d6:35:da:08:d3:d0:fd:3e:76:07:0c:ac:15:ba:5a:
be:41:d5:8e:92:38:df:99:73:31:63:2d:0d:3b:45:
3b:b8:93:bc:0a:05:7f:5d:34:c1:2b:a5:03:86:5a:
ac:94:7d:eb:bc:fa:ac:5e:1a:f6:2b:fd:8c:15:cb:
61:f8:00:b4:6b:a0:90:4c:6d:fa:f7:e8:60:be:d0:
d0:46:00:fc:e8:02:f3:70:75:c0:ef:ab:7c:6c:ef:
7a:43:ba:fd:c1:e6:04:a2:bd:3b:7f:29:25:96:80:
bb:f5:a3:75:53:71:26:ab:58:92:65:bd:4a:1e:77:
df:c6:f1:57:69:e8:6e:8a:95:fb:9e:f0:b1:4c:53:
47:aa:71:fa:86:a7:71:29:46:80:1e:de:c8:f6:d7:
6d:fd:21:c6:3b:35:cb:56:51:14:7c:64:a4:f0:fc:
84:2b:be:7b:24:a2:38:b0:e7:78:fb:2b:87:99:97:
cc:71:3b:b4:e2:0d:7c:f1:78:4f:69:c3:d7:2d:4c:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E4:3C:D4:89:E5:03:47:6C:A7:B8:7D:5A:FE:79:89:7F:45:3A:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b8:03:66:e6:62:48:c7:2f:24:df:3d:3e:55:f6:1b:ec:72:
b8:b4:ac:c3:11:37:40:c4:76:8f:e8:f8:44:18:9c:a5:00:94:
ac:41:5c:b0:04:6d:de:ad:9d:d9:ee:9f:38:4f:a7:d6:af:ac:
31:c5:13:c8:e4:22:87:73:a1:f7:c7:3e:bb:e5:85:4d:23:22:
f6:fc:98:4a:b1:f4:c6:9d:c7:60:b6:42:51:73:c1:93:6c:fb:
bb:29:4b:ec:b4:f6:f2:10:32:e6:48:47:68:53:f0:63:f9:85:
37:0d:9f:cc:b0:1c:3a:aa:b3:9f:46:ad:4f:dc:fa:37:63:5d:
a7:51:be:92:bb:8c:c9:cc:03:ac:9a:ce:7c:bc:c3:ff:2a:6a:
9a:82:03:6a:7a:f9:ec:87:08:df:bb:2b:46:12:8f:82:4f:dc:
14:43:54:24:66:09:d0:85:1b:e5:3a:0b:67:bf:2e:be:6a:0a:
2a:28:41:31:e6:c1:79:5a:2e:a7:d5:b5:c3:9a:61:24:db:00:
49:a1:88:bc:59:81:62:dc:36:fd:28:89:23:8b:3f:b8:e5:1f:
7b:50:de:d1:c6:f5:72:3c:9a:a1:19:27:c2:cc:1a:bf:cb:a4:
de:06:8b:1b:39:46:da:07:ba:03:48:03:d4:36:ab:f1:79:47:
56:52:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:26 2025 by rpki-client