Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136382e302f32342d3234203d3e203231383539.roa
File: 3134352e37392e3136382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: /r6duDl/ixFk7nZdVTGhsrYTJDlHclTz5e1OPzsCm7A=
Subject key identifier: 2A:44:3C:69:F8:52:B3:02:7E:9E:D3:86:A8:5F:34:CA:48:40:0C:B0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 047372F05438412703D95397975355766999FB2C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136382e302f32342d3234203d3e203231383539.roa
Signing time: Mon 04 Aug 2025 10:57:32 +0000
ROA not before: Mon 04 Aug 2025 10:52:32 +0000
ROA not after: Mon 03 Aug 2026 10:57:32 +0000
asID: 21859
IP address blocks: 145.79.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:73:72:f0:54:38:41:27:03:d9:53:97:97:53:55:76:69:99:fb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 4 10:52:32 2025 GMT
Not After : Aug 3 10:57:32 2026 GMT
Subject: CN=2A443C69F852B3027E9ED386A85F34CA48400CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:38:4d:19:70:ce:02:9b:f2:2a:de:12:d0:92:
f7:e1:77:ba:b2:cf:f1:2b:41:a3:a0:ed:ee:7c:c9:
3c:57:ca:1e:17:1c:4d:b3:05:5b:12:a8:be:81:95:
bc:96:55:1a:08:76:f5:be:f3:3b:72:7e:24:a0:0a:
09:3c:16:94:f9:ac:b9:51:10:f2:fc:2d:1a:69:11:
ca:8a:56:21:94:57:35:de:10:0b:2e:49:d7:6e:7a:
f8:ba:c7:9c:e5:d8:fd:51:57:86:83:dd:6e:e3:18:
aa:c2:0f:ec:d5:82:c7:c8:f6:8c:4f:23:cc:b6:ce:
7b:d9:cd:61:21:86:cd:4d:fe:31:7a:97:7a:cf:cc:
32:e7:9a:4e:41:81:21:42:2d:86:06:53:84:3e:95:
80:19:ca:ed:e3:b8:ef:87:e3:bb:8e:9e:04:5e:d9:
1e:63:12:1d:cb:2d:73:f5:25:99:0a:7d:5a:1f:7f:
f5:bb:5b:68:13:d8:98:26:ed:20:1e:dc:5e:41:bf:
17:a9:44:41:4e:57:ec:5e:a1:10:80:3a:89:3f:1e:
94:ac:88:6a:86:65:bb:6b:9e:8b:bb:32:be:49:63:
95:ee:8f:6b:ef:15:12:c7:82:78:5d:5d:f8:b2:40:
57:ce:93:0e:77:3b:26:b8:92:99:a9:5a:06:04:c3:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:3C:69:F8:52:B3:02:7E:9E:D3:86:A8:5F:34:CA:48:40:0C:B0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.168.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8e:cc:17:d9:0c:94:ea:e5:7f:f1:91:07:28:81:4b:c2:b9:
ac:74:a0:be:6e:1e:b7:53:12:41:8a:ac:01:80:ea:b1:84:a4:
42:68:b5:41:74:b6:a6:85:7a:33:07:5c:de:53:d3:fe:42:5b:
e1:de:8c:0c:75:f6:fc:5e:cc:74:e1:55:ea:94:6c:d5:c5:25:
77:ad:91:8f:7f:3b:8a:4a:b0:e6:57:35:0a:7b:a2:57:8c:63:
ff:97:4f:11:ca:ee:54:a4:19:fb:c6:ce:f9:00:45:29:a5:21:
c7:7e:14:38:b7:25:ba:7b:87:7f:4c:e8:27:7d:c8:a2:e2:60:
de:c8:2b:32:d4:0d:ad:81:4a:17:0b:71:a3:ad:b5:0e:ba:44:
09:1e:98:05:5d:3a:bc:cd:ec:f4:7f:49:e6:99:21:fc:42:af:
31:11:11:7e:c9:5b:73:eb:a5:4a:62:ad:ae:84:ac:21:c7:d6:
e1:31:7d:ed:79:8a:2c:da:d9:98:22:83:f7:ca:36:22:8a:14:
20:e3:12:76:be:ba:c7:69:5c:6e:ac:ff:f4:0f:ba:06:77:d3:
22:19:57:56:b3:7e:a5:92:b1:0f:3a:9b:f1:20:dd:b3:90:45:
df:fa:7e:b3:6e:a2:99:e9:38:b4:91:84:6b:a8:cc:77:3f:85:
b8:21:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:54:42 2025 by rpki-client