Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: k3XoQG82gUR6A6ZtfeDYchqvrNiP2VoIC+TeOFff/xY=
Subject key identifier: 6E:28:E3:12:56:80:37:43:7B:85:5C:FB:80:19:00:51:2C:BF:EE:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 260517C6B86B9F00AFA143BBFF15E7B9983EB750
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 29 May 2025 19:06:50 +0000
ROA not before: Thu 29 May 2025 19:01:50 +0000
ROA not after: Thu 28 May 2026 19:06:50 +0000
asID: 395793
IP address blocks: 145.79.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:05:17:c6:b8:6b:9f:00:af:a1:43:bb:ff:15:e7:b9:98:3e:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 19:01:50 2025 GMT
Not After : May 28 19:06:50 2026 GMT
Subject: CN=6E28E312568037437B855CFB801900512CBFEE83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:53:39:f8:45:31:d3:70:42:1d:36:fb:b9:
ca:8f:a3:16:10:f6:21:d7:92:b3:05:62:22:2c:73:
d3:a9:76:79:a6:cc:ca:c7:75:94:af:d8:81:ed:28:
aa:b4:00:da:9f:b6:9f:84:16:df:14:d1:d9:a4:07:
3e:37:8f:b9:e2:52:24:fa:8f:70:5d:90:43:ba:51:
5a:81:1b:b3:b3:34:07:90:a5:12:36:d4:0a:e5:5c:
15:0d:f8:20:52:8f:01:26:f3:19:c2:95:22:0b:ea:
c5:ba:78:3d:3c:18:55:03:99:a8:e0:40:aa:db:f6:
1e:52:b5:db:6b:29:3f:7e:35:7f:4d:da:62:ab:52:
dd:1c:79:94:12:12:c4:1e:c0:81:f2:59:99:a3:04:
a3:1b:95:00:73:54:11:af:ff:e4:5f:b9:a5:4c:4e:
8e:f8:2a:1a:bc:f7:cc:07:2a:9b:e7:43:54:82:20:
10:d0:6a:fd:01:4a:ac:1d:25:de:95:14:e8:f6:71:
32:18:45:c7:67:d9:d0:50:bc:d5:29:7e:ab:7a:c0:
2b:81:64:a3:c0:52:fa:25:7b:f6:b9:1d:2c:79:6b:
21:f9:a7:06:37:4d:43:9e:17:3c:cb:7a:4b:73:ba:
ed:43:45:c3:37:d2:3b:82:0c:26:8b:c7:c2:88:99:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:E3:12:56:80:37:43:7B:85:5C:FB:80:19:00:51:2C:BF:EE:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8f:0b:ad:60:fe:db:11:c1:0a:90:6d:0e:b2:ed:25:05:90:
ec:2c:52:46:b7:e9:01:51:65:e7:f6:03:7c:ff:8d:a4:bd:db:
92:ba:d2:c5:a8:9b:94:21:26:f0:73:fc:81:64:28:a8:ee:ba:
58:03:32:6e:b0:bf:f4:65:9c:ff:9e:5c:fc:e2:8c:19:60:b1:
e1:ff:c3:07:c6:75:de:5b:1b:08:ef:d7:83:93:d2:ee:0b:0c:
ef:e5:b9:19:f3:b7:e2:45:67:fe:26:41:cb:a2:a5:ca:36:26:
de:62:18:d4:49:35:81:7e:52:2d:7b:a8:73:35:2d:ec:77:c6:
0a:1b:04:1b:9b:c5:8e:90:2c:53:f9:08:7b:91:4c:39:11:13:
ab:cd:41:c4:63:d4:58:a2:bb:1a:aa:ee:aa:d2:b2:d6:84:48:
56:1b:1c:c9:94:e1:e3:e7:3d:b5:32:2f:c6:5b:23:f2:2d:ad:
6d:78:48:7e:b2:d3:93:82:52:e8:71:a4:83:59:f7:71:b4:b4:
1d:15:e4:f1:85:9e:e2:61:fc:02:06:d9:8f:ce:72:ac:94:3a:
1d:ca:42:2b:36:1b:79:fa:96:02:3c:00:b5:7e:b4:a5:26:c0:
5a:67:75:bf:d4:87:8c:eb:b8:ab:3f:c3:93:49:bb:2b:16:22:
58:b1:f9:23
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUJgUXxrhrnwCvoUO7/xXnuZg+t1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MjkxOTAxNTBaFw0yNjA1MjgxOTA2NTBaMDMxMTAvBgNV
BAMTKDZFMjhFMzEyNTY4MDM3NDM3Qjg1NUNGQjgwMTkwMDUxMkNCRkVFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPWVM5+EUx03BCHTb7ucqPoxYQ
9iHXkrMFYiIsc9OpdnmmzMrHdZSv2IHtKKq0ANqftp+EFt8U0dmkBz43j7niUiT6
j3BdkEO6UVqBG7OzNAeQpRI21ArlXBUN+CBSjwEm8xnClSIL6sW6eD08GFUDmajg
QKrb9h5StdtrKT9+NX9N2mKrUt0ceZQSEsQewIHyWZmjBKMblQBzVBGv/+RfuaVM
To74Khq898wHKpvnQ1SCIBDQav0BSqwdJd6VFOj2cTIYRcdn2dBQvNUpfqt6wCuB
ZKPAUvole/a5HSx5ayH5pwY3TUOeFzzLektzuu1DRcM30juCDCaLx8KImdfFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUbijjElaAN0N7hVz7gBkAUSy/7oMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM2
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzNzM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT6EwDQYJKoZIhvcNAQELBQADggEBAI+PC61g/tsRwQqQbQ6y7SUFkOwsUka3
6QFRZef2A3z/jaS925K60sWom5QhJvBz/IFkKKjuulgDMm6wv/RlnP+eXPzijBlg
seH/wwfGdd5bGwjv14OT0u4LDO/luRnzt+JFZ/4mQcuipco2Jt5iGNRJNYF+Ui17
qHM1Lex3xgobBBubxY6QLFP5CHuRTDkRE6vNQcRj1Fiiuxqq7qrSstaESFYbHMmU
4ePnPbUyL8ZbI/ItrW14SH6y05OCUuhxpINZ93G0tB0V5PGFnuJh/AIG2Y/OcqyU
Oh3KQis2G3n6lgI8ALV+tKUmwFpndb/Uh4zruKs/w5NJuysWIlix+SM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:25 2025 by rpki-client