Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hEjBNc0MrxArarjV1W3LfQgDF9SiNU06TcaxYPk5GbI=
Subject key identifier: 65:B5:E3:19:B1:D9:0B:3F:00:4D:AE:9D:23:47:4F:37:1B:BF:D3:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66222B2A73CFFBCD16F75A12A4241F03E1ACB3CC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 06 Jun 2025 12:00:58 +0000
ROA not before: Fri 06 Jun 2025 11:55:58 +0000
ROA not after: Fri 05 Jun 2026 12:00:58 +0000
asID: 136787
IP address blocks: 145.79.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:22:2b:2a:73:cf:fb:cd:16:f7:5a:12:a4:24:1f:03:e1:ac:b3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 6 11:55:58 2025 GMT
Not After : Jun 5 12:00:58 2026 GMT
Subject: CN=65B5E319B1D90B3F004DAE9D23474F371BBFD344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:d1:e0:96:6a:cf:69:d2:3b:67:7d:a3:9d:
28:d5:fa:fb:33:89:7a:93:79:92:e0:e5:d3:8b:7c:
cd:de:9e:43:ff:65:c7:9f:95:f5:c4:49:c3:fd:3f:
d9:ee:dd:5b:80:6c:3e:33:23:a5:16:ea:8a:43:94:
54:b8:d4:04:a8:a0:fb:61:72:f4:2b:1d:a4:ad:fa:
86:8a:b8:ff:07:4c:df:75:75:06:da:32:c6:b1:9b:
21:ea:32:53:5d:fb:1d:c7:a9:4b:91:be:00:2f:ba:
fa:ea:e7:78:bb:cc:e2:d6:2a:2a:ae:6b:36:ae:4e:
b1:2a:6c:35:00:28:38:35:5a:29:97:99:31:e9:a8:
f1:8e:7a:4c:6c:ec:64:a1:72:98:13:c3:dd:0f:b6:
65:4d:1c:a2:44:d7:b9:c7:ab:d1:a2:90:ba:ad:6f:
5c:b8:bd:eb:f0:e6:e9:09:e9:3b:45:ed:6e:3b:27:
0f:2c:a2:ca:dc:e4:cb:89:7f:43:52:ed:03:5c:56:
ba:54:b6:b5:6b:1f:9b:e4:1d:a5:07:d8:86:d6:1b:
7d:7d:b4:fb:6f:c5:15:75:f0:9f:d5:24:3b:b9:1f:
78:72:98:5b:24:b9:94:54:b5:6f:7b:49:c7:2d:44:
2a:b5:2b:4b:cb:8e:f3:cd:13:56:9e:5c:be:34:3a:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B5:E3:19:B1:D9:0B:3F:00:4D:AE:9D:23:47:4F:37:1B:BF:D3:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.196.0/24
Signature Algorithm: sha256WithRSAEncryption
76:25:69:3b:0c:82:1d:7f:64:30:8d:11:ef:bd:14:9d:bc:30:
5e:50:13:b4:09:6c:8f:bb:da:05:38:e5:77:cc:8d:ee:55:fd:
26:d3:d9:1e:7c:d2:95:d8:71:5e:4a:31:be:48:b8:61:7c:f6:
ac:a1:70:87:a0:7e:4b:0a:4b:e2:54:df:b5:a0:77:a7:df:4e:
68:af:f9:3d:7c:79:05:98:ca:3c:20:ee:9e:05:00:f2:fc:c2:
83:fa:5f:05:ff:9b:ba:03:ad:ef:a1:3c:62:c5:22:47:34:51:
f7:db:32:52:94:6d:f2:70:b1:6f:02:08:a9:3e:0b:6d:93:a8:
a0:6b:bc:66:87:0c:02:8d:3c:5d:c1:a9:ac:cb:0e:05:45:4f:
33:68:a5:e6:aa:94:aa:9d:a2:cd:df:a9:68:b1:23:2e:45:26:
4d:f9:2a:3b:49:35:03:63:15:d0:a8:55:87:f5:9b:f5:39:cb:
5f:a8:d0:c4:03:bf:83:fa:6f:61:52:05:6f:7e:6b:a1:2f:16:
b1:9d:07:c2:08:67:e1:73:a7:5f:92:ee:aa:c5:df:74:f3:c2:
ec:c7:72:eb:82:07:43:20:2f:c7:67:04:12:71:98:18:a8:b2:
55:43:f3:25:32:9d:20:ff:f9:a6:97:bd:16:24:70:b1:94:56:
03:ff:c3:83
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZiIrKnPP+80W91oSpCQfA+Gss8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MDYxMTU1NThaFw0yNjA2MDUxMjAwNThaMDMxMTAvBgNV
BAMTKDY1QjVFMzE5QjFEOTBCM0YwMDREQUU5RDIzNDc0RjM3MUJCRkQzNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSdHglmrPadI7Z32jnSjV+vsz
iXqTeZLg5dOLfM3enkP/ZceflfXEScP9P9nu3VuAbD4zI6UW6opDlFS41ASooPth
cvQrHaSt+oaKuP8HTN91dQbaMsaxmyHqMlNd+x3HqUuRvgAvuvrq53i7zOLWKiqu
azauTrEqbDUAKDg1WimXmTHpqPGOekxs7GShcpgTw90PtmVNHKJE17nHq9GikLqt
b1y4vevw5ukJ6TtF7W47Jw8sosrc5MuJf0NS7QNcVrpUtrVrH5vkHaUH2IbWG319
tPtvxRV18J/VJDu5H3hymFskuZRUtW97ScctRCq1K0vLjvPNE1aeXL40OnrJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUZbXjGbHZCz8ATa6dI0dPNxu/00QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM5
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT8QwDQYJKoZIhvcNAQELBQADggEBAHYlaTsMgh1/ZDCNEe+9FJ28MF5QE7QJ
bI+72gU45XfMje5V/SbT2R580pXYcV5KMb5IuGF89qyhcIegfksKS+JU37Wgd6ff
Tmiv+T18eQWYyjwg7p4FAPL8woP6XwX/m7oDre+hPGLFIkc0UffbMlKUbfJwsW8C
CKk+C22TqKBrvGaHDAKNPF3BqazLDgVFTzNopeaqlKqdos3fqWixIy5FJk35KjtJ
NQNjFdCoVYf1m/U5y1+o0MQDv4P6b2FSBW9+a6EvFrGdB8IIZ+Fzp1+S7qrF33Tz
wuzHcuuCB0MgL8dnBBJxmBioslVD8yUynSD/+aaXvRYkcLGUVgP/w4M=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:14:31 2025 by rpki-client