Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3136322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 0wRh7UF8svkGILUwYsHEg27duMhySeoaA8OgNz6vDp0=
Subject key identifier: 96:AC:AC:D3:DF:AB:F9:22:B3:EA:8E:75:9B:E3:42:8B:59:0B:86:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63B7D695752CCEF17C0CE1640429B3D57E6490A2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e2039333034.roa
Signing time: Mon 02 Jun 2025 18:49:57 +0000
ROA not before: Mon 02 Jun 2025 18:44:57 +0000
ROA not after: Mon 01 Jun 2026 18:49:57 +0000
asID: 9304
IP address blocks: 145.79.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b7:d6:95:75:2c:ce:f1:7c:0c:e1:64:04:29:b3:d5:7e:64:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 2 18:44:57 2025 GMT
Not After : Jun 1 18:49:57 2026 GMT
Subject: CN=96ACACD3DFABF922B3EA8E759BE3428B590B867A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:7c:41:e3:c0:b8:e5:49:6a:bf:94:47:32:
a4:6b:ae:c7:c4:59:3f:a2:5a:60:36:43:81:aa:4c:
bb:a7:2b:82:e8:d4:7f:d2:40:2f:83:3b:4f:9d:be:
9a:fc:55:39:0f:04:7d:62:b5:03:31:f3:18:00:80:
82:06:c0:c7:bc:a7:61:eb:5b:5b:ea:13:35:fc:77:
03:e7:b0:49:4d:9c:ec:c5:8e:0b:4e:95:71:6a:c5:
40:09:2c:01:fb:57:90:38:2a:8b:2d:98:7c:14:4e:
7d:6a:ca:50:26:b4:3a:47:81:36:62:87:20:ee:58:
3c:24:ca:d5:52:e1:63:e3:c4:5f:0f:11:27:c6:72:
6b:51:e4:b1:fe:5e:bf:60:43:79:16:49:23:8d:49:
12:ba:6f:63:21:47:fd:fd:de:64:f9:b5:db:49:d9:
ee:de:de:51:88:ee:e5:c5:47:68:2c:a6:89:e9:b1:
45:39:0a:c2:60:b3:c4:b2:a5:cc:8d:0d:71:60:0a:
b0:85:98:b8:26:35:c4:c8:c7:9f:aa:3d:3c:0d:a8:
f2:bb:06:40:95:40:49:ed:b0:0c:71:44:d9:f8:89:
0b:42:bf:93:e7:cb:63:13:ba:30:d6:40:f5:cd:fe:
32:08:f1:e5:9a:50:8b:84:e1:bf:0d:c1:0f:45:ee:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:AC:D3:DF:AB:F9:22:B3:EA:8E:75:9B:E3:42:8B:59:0B:86:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.162.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fa:c4:81:c9:e8:ff:dd:66:44:f3:42:24:5d:53:80:c0:49:
bf:ac:bf:db:38:25:9d:4e:45:b7:68:5b:2c:e3:24:09:6d:8c:
38:5b:26:42:35:83:9d:86:20:ac:b2:68:a0:6c:88:78:63:90:
06:cd:69:16:dc:75:5e:4d:4c:42:bf:7e:eb:76:2b:4d:87:14:
7d:5b:98:a4:42:9c:01:3d:d4:4f:ba:11:8a:14:06:ff:84:ad:
95:68:8d:21:b5:b0:c1:79:1e:b6:c0:84:86:46:79:e4:f4:f0:
7b:62:a7:5b:79:ce:a2:68:df:b4:35:e2:65:c4:5a:32:59:4e:
a1:7a:a9:1d:b8:fb:11:95:7a:b0:b5:4f:b2:09:67:b8:6f:be:
dc:e6:46:de:5b:db:ef:fd:61:02:e8:48:18:f8:af:35:4e:d4:
3d:ce:a0:c3:35:ca:dd:38:aa:b8:02:68:66:eb:e3:57:91:b8:
98:8a:00:54:ff:32:6f:ad:38:96:db:fe:7a:ad:64:c3:e6:c4:
98:79:a0:c8:22:6a:6e:e5:df:87:cd:e6:29:59:ff:44:2a:08:
fe:c5:6d:db:7e:f2:f3:89:44:cd:f0:8e:c2:f5:e2:a4:66:74:
ab:c1:fe:23:9a:1f:3a:a1:05:16:14:42:57:1c:c7:0c:d8:47:
af:59:90:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:12 2025 by rpki-client