Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: O9NoE6wJ96mCOXitFQ0x5H6KsUm96mK0F/HiSWchX9E=
Subject key identifier: 93:89:53:B3:5D:5B:43:9D:93:53:BA:88:77:81:DC:B7:8F:9E:6D:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3097B8A6965270A0ADA68D7AEA0023AD3B5935EE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 28 Aug 2025 09:52:20 +0000
ROA not before: Thu 28 Aug 2025 09:47:20 +0000
ROA not after: Thu 27 Aug 2026 09:52:20 +0000
asID: 136787
IP address blocks: 145.79.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 18:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:97:b8:a6:96:52:70:a0:ad:a6:8d:7a:ea:00:23:ad:3b:59:35:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 09:47:20 2025 GMT
Not After : Aug 27 09:52:20 2026 GMT
Subject: CN=938953B35D5B439D9353BA887781DCB78F9E6D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:86:21:6f:fe:c0:46:6d:d9:90:70:61:5d:
83:03:fe:21:28:8c:5e:9f:5f:78:98:9d:e2:01:70:
58:90:1f:89:63:41:e4:9a:56:35:1c:b4:ac:56:56:
04:75:48:7d:17:28:43:95:c9:be:a3:fb:79:b3:a6:
5b:66:8c:8d:9b:af:00:d9:80:65:bf:ab:4f:cd:f7:
0e:aa:89:8a:c7:30:69:c9:ff:44:a7:ad:94:35:1c:
9e:89:66:47:9d:dd:d0:e7:71:f2:3e:e4:34:c5:e7:
24:42:81:2e:bf:86:ed:d9:f9:2b:ab:50:ce:96:a4:
d6:5e:f0:27:c4:55:d5:82:40:6e:b0:04:eb:7d:f2:
43:44:f8:da:7f:75:4b:7d:b6:9e:62:fd:24:ca:56:
20:4f:7c:cc:01:70:21:7d:77:ba:61:7b:c2:52:18:
bb:77:3a:6f:74:91:85:8c:12:46:fa:6a:4c:5d:f7:
8f:9f:c4:ea:83:36:66:29:fa:d0:4a:06:20:99:5e:
64:ee:39:ac:1e:6e:d1:a1:eb:d0:5a:80:74:87:ac:
7f:b9:bb:38:ba:8e:2a:a1:85:a8:22:3a:b1:74:9a:
86:d0:57:57:da:1c:e8:99:fb:09:01:07:97:c9:82:
18:87:dd:b6:bf:37:17:39:a6:db:c3:67:13:3b:ab:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:53:B3:5D:5B:43:9D:93:53:BA:88:77:81:DC:B7:8F:9E:6D:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cc:53:07:ad:65:96:65:ba:d6:50:8c:fc:9c:e0:19:a6:3d:
94:ed:af:8c:d6:41:23:df:49:b5:22:21:31:e3:dd:f7:60:98:
06:d9:40:5f:a5:0e:6d:87:1a:df:c1:1e:ae:18:b6:97:57:72:
d3:03:c7:6e:15:2a:fa:a2:3b:95:3b:4b:4c:0b:1e:81:51:d2:
2c:59:de:1c:a4:4c:85:60:5b:17:9d:08:d9:22:bc:8a:e1:49:
06:32:51:4e:ab:5b:e8:7b:a3:23:e4:b2:1e:99:42:3e:3a:c6:
f3:25:d4:53:48:4a:de:e1:2d:4c:ba:c4:51:38:9d:ba:3f:16:
5e:3b:4a:d2:85:03:7f:1c:28:af:c2:d3:7d:1f:8c:2e:71:01:
db:8f:4c:18:cf:98:33:8d:e3:c2:04:44:09:41:ca:32:d1:7f:
cd:67:0b:e7:1b:9a:9e:ab:42:03:e9:b9:0e:66:a9:10:18:5f:
03:13:9f:0f:4a:5e:ca:0c:83:b9:cd:88:e3:84:51:2c:26:64:
63:65:e2:a0:38:90:aa:3b:06:28:29:a7:65:e8:17:20:29:f8:
66:f1:65:31:b5:1b:58:bb:85:fe:ba:ad:66:e7:b6:b4:7f:c9:
57:ea:6f:a8:dd:75:11:96:df:f2:2b:9e:dd:ac:f5:42:db:0d:
ab:eb:93:4a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMJe4ppZScKCtpo166gAjrTtZNe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjgwOTQ3MjBaFw0yNjA4MjcwOTUyMjBaMDMxMTAvBgNV
BAMTKDkzODk1M0IzNUQ1QjQzOUQ5MzUzQkE4ODc3ODFEQ0I3OEY5RTZEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClK4Yhb/7ARm3ZkHBhXYMD/iEo
jF6fX3iYneIBcFiQH4ljQeSaVjUctKxWVgR1SH0XKEOVyb6j+3mzpltmjI2brwDZ
gGW/q0/N9w6qiYrHMGnJ/0SnrZQ1HJ6JZked3dDncfI+5DTF5yRCgS6/hu3Z+Sur
UM6WpNZe8CfEVdWCQG6wBOt98kNE+Np/dUt9tp5i/STKViBPfMwBcCF9d7phe8JS
GLt3Om90kYWMEkb6akxd94+fxOqDNmYp+tBKBiCZXmTuOawebtGh69BagHSHrH+5
uzi6jiqhhagiOrF0mobQV1faHOiZ+wkBB5fJghiH3ba/Nxc5ptvDZxM7qxGFAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUk4lTs11bQ52TU7qId4Hct4+ebYYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM5
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT8YwDQYJKoZIhvcNAQELBQADggEBADrMUwetZZZlutZQjPyc4BmmPZTtr4zW
QSPfSbUiITHj3fdgmAbZQF+lDm2HGt/BHq4YtpdXctMDx24VKvqiO5U7S0wLHoFR
0ixZ3hykTIVgWxedCNkivIrhSQYyUU6rW+h7oyPksh6ZQj46xvMl1FNISt7hLUy6
xFE4nbo/Fl47StKFA38cKK/C030fjC5xAduPTBjPmDON48IERAlByjLRf81nC+cb
mp6rQgPpuQ5mqRAYXwMTnw9KXsoMg7nNiOOEUSwmZGNl4qA4kKo7Bigpp2XoFyAp
+GbxZTG1G1i7hf66rWbntrR/yVfqb6jddRGW3/Irnt2s9ULbDavrk0o=
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:51:13 2025 by rpki-client