Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20323035383836.roa
File: 3134352e37392e3134372e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: T0HBHyEhYh3Noydf7Y7t0/DvVhuw7joWRITpStZ6oD8=
Subject key identifier: 22:CC:A9:DF:DD:06:D3:4C:3F:DD:2F:03:52:35:87:19:0E:BB:B8:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31B4E57EC6B167E45BCCA37A409E1A41372C3A1C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20323035383836.roa
Signing time: Thu 30 Oct 2025 16:56:39 +0000
ROA not before: Thu 30 Oct 2025 16:51:39 +0000
ROA not after: Thu 29 Oct 2026 16:56:39 +0000
asID: 205886
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 21:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:e5:7e:c6:b1:67:e4:5b:cc:a3:7a:40:9e:1a:41:37:2c:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 16:51:39 2025 GMT
Not After : Oct 29 16:56:39 2026 GMT
Subject: CN=22CCA9DFDD06D34C3FDD2F03523587190EBBB88C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3a:7c:1e:18:94:f1:82:a9:a0:75:a1:b5:14:
98:48:fc:a5:40:f7:2e:a1:78:66:9f:93:fb:80:39:
7d:f7:a7:87:3c:8b:c0:a9:e8:47:6c:c3:fd:32:a3:
dc:4a:6d:03:a3:bf:38:18:87:e2:00:6b:5b:6d:32:
8c:8a:ff:db:e5:47:66:6e:62:3c:f3:3c:ac:72:fc:
7f:8d:29:30:5a:0e:a6:aa:79:3e:32:81:fc:dd:c7:
3b:03:f0:cb:0d:89:ab:f6:01:e2:21:f5:a5:d5:08:
6a:5b:d2:b0:21:25:8e:9f:b8:11:4d:96:86:7e:3b:
ef:2d:28:2b:0d:03:b3:c1:e9:bc:06:7a:c8:2c:d7:
25:9e:ff:3d:3e:76:4a:ca:fc:fa:e4:7e:bc:2f:0f:
10:da:6c:e1:5f:c3:00:21:85:73:12:08:9f:4e:fe:
50:2c:a7:57:63:8b:80:98:56:cb:5f:21:77:cb:8a:
49:20:cf:aa:76:d6:9d:56:e2:a3:cf:fe:3d:97:1d:
0e:02:35:a8:b8:00:f0:1f:68:2c:e1:21:75:ad:cc:
68:a3:88:9a:f5:a6:1b:d0:03:bb:49:31:7d:0e:97:
58:c6:f8:f3:bd:cb:2f:d2:47:a5:0c:4e:c7:56:ba:
9e:8a:c0:12:40:37:53:3a:1f:ad:dc:b1:e6:98:e5:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CC:A9:DF:DD:06:D3:4C:3F:DD:2F:03:52:35:87:19:0E:BB:B8:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a2:18:f8:86:14:7a:e1:25:a1:66:cf:65:1f:03:7b:4b:75:
6f:6d:2b:bd:6e:c5:3e:47:18:da:10:11:81:f1:4c:a5:8e:79:
c1:51:e3:23:d0:3b:a0:66:e3:d6:38:c6:74:34:b1:cc:88:b2:
45:cf:05:f0:01:76:84:f0:39:6c:51:aa:9e:1c:0c:57:04:ca:
ee:97:33:85:c5:5e:c6:95:82:28:ee:47:d7:62:67:d7:42:46:
cf:e9:dc:0f:00:94:41:56:d1:25:62:df:ba:2f:86:22:13:67:
ec:c6:13:c6:c5:7c:b2:19:14:61:52:c1:d8:c6:8a:4d:e2:41:
1a:70:d2:15:a7:2b:7e:3d:29:0d:af:fb:f1:4c:d9:ca:69:0b:
2e:c6:3b:29:dd:cb:bf:ff:fc:fb:16:e2:00:b6:6b:35:4b:e2:
a4:93:19:22:70:31:65:46:31:05:5b:88:ec:c3:20:15:bc:fe:
90:42:3d:0c:3c:ca:b6:c9:29:98:ac:9a:72:c9:5c:e4:ce:aa:
8e:e6:bb:f4:1a:7f:ce:ca:03:7c:6f:ab:a3:26:d4:f9:04:e2:
f0:c2:39:e8:8f:28:62:35:ba:26:b9:8c:40:7e:96:48:e6:4b:
f0:4e:54:a7:33:6b:fe:75:1d:1b:9e:42:76:eb:0a:aa:c7:7a:
72:dc:61:f8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMbTlfsaxZ+RbzKN6QJ4aQTcsOhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMzAxNjUxMzlaFw0yNjEwMjkxNjU2MzlaMDMxMTAvBgNV
BAMTKDIyQ0NBOURGREQwNkQzNEMzRkREMkYwMzUyMzU4NzE5MEVCQkI4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6OnweGJTxgqmgdaG1FJhI/KVA
9y6heGafk/uAOX33p4c8i8Cp6Edsw/0yo9xKbQOjvzgYh+IAa1ttMoyK/9vlR2Zu
YjzzPKxy/H+NKTBaDqaqeT4ygfzdxzsD8MsNiav2AeIh9aXVCGpb0rAhJY6fuBFN
loZ+O+8tKCsNA7PB6bwGesgs1yWe/z0+dkrK/PrkfrwvDxDabOFfwwAhhXMSCJ9O
/lAsp1dji4CYVstfIXfLikkgz6p21p1W4qPP/j2XHQ4CNai4APAfaCzhIXWtzGij
iJr1phvQA7tJMX0Ol1jG+PO9yy/SR6UMTsdWup6KwBJAN1M6H63cseaY5W2rAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUIsyp390G00w/3S8DUjWHGQ67uIwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODM4MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT5MwDQYJKoZIhvcNAQELBQADggEBAFeiGPiGFHrhJaFmz2UfA3tLdW9tK71u
xT5HGNoQEYHxTKWOecFR4yPQO6Bm49Y4xnQ0scyIskXPBfABdoTwOWxRqp4cDFcE
yu6XM4XFXsaVgijuR9diZ9dCRs/p3A8AlEFW0SVi37ovhiITZ+zGE8bFfLIZFGFS
wdjGik3iQRpw0hWnK349KQ2v+/FM2cppCy7GOyndy7///PsW4gC2azVL4qSTGSJw
MWVGMQVbiOzDIBW8/pBCPQw8yrbJKZismnLJXOTOqo7mu/Qaf87KA3xvq6Mm1PkE
4vDCOeiPKGI1uia5jEB+lkjmS/BOVKcza/51HRueQnbrCqrHenLcYfg=
-----END CERTIFICATE-----
Generated at Sat Nov 1 08:29:45 2025 by rpki-client