Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3234302e302f32302d3234203d3e2035363530.roa
File: 3134352e37392e3234302e302f32302d3234203d3e2035363530.roa (raw, json)
Hash identifier: lTNoZKJNnDVWwP21vvvDcpJ8WeGKy5Reb3R3tgjM1Cc=
Subject key identifier: EB:EB:1A:95:E0:CA:CA:3F:D6:34:15:D3:7E:50:24:FA:41:BE:9A:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74767792A9AB67F765C84CBA77553A010CF264BC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3234302e302f32302d3234203d3e2035363530.roa
Signing time: Wed 10 Sep 2025 14:03:23 +0000
ROA not before: Wed 10 Sep 2025 13:58:23 +0000
ROA not after: Wed 09 Sep 2026 14:03:23 +0000
asID: 5650
IP address blocks: 145.79.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:76:77:92:a9:ab:67:f7:65:c8:4c:ba:77:55:3a:01:0c:f2:64:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 13:58:23 2025 GMT
Not After : Sep 9 14:03:23 2026 GMT
Subject: CN=EBEB1A95E0CACA3FD63415D37E5024FA41BE9A4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:c5:4e:96:4f:99:e4:22:a4:47:11:fc:32:
99:dc:4a:c9:a8:a5:d7:91:b7:be:49:9e:2d:8e:14:
fc:25:a5:9c:54:f4:14:8a:35:3d:80:d8:c5:0a:cf:
81:3f:d4:e9:ce:b9:82:80:e4:1a:43:9a:cc:83:a9:
fc:da:d4:c3:60:32:c4:99:3f:a1:a9:2c:60:c9:ff:
6e:0e:0d:1e:e6:11:3d:c7:85:fe:3d:34:a4:c6:50:
c4:6f:ee:cb:ac:38:80:c3:5b:e3:75:77:1e:ea:3a:
51:7b:38:8b:ea:36:8c:ca:66:ed:6c:34:59:6f:77:
11:60:38:5b:8c:ab:67:d6:a5:7e:86:5d:4d:6d:8e:
69:1a:02:f0:40:6c:21:bb:dd:10:91:5b:cf:9e:7d:
67:1c:90:31:53:3a:d8:12:c1:75:1f:f2:4b:d5:e7:
41:cd:ad:ae:aa:bf:a0:8f:27:c1:bc:89:bb:c6:99:
16:8b:9c:97:be:45:f6:b3:54:cd:75:72:ab:d7:bc:
8a:b0:a9:e3:f9:5a:80:28:a9:52:83:de:5b:76:90:
7b:12:10:a5:56:36:18:a0:5d:86:10:ed:23:c4:ee:
0f:28:0b:1e:0f:e4:cc:b2:a6:eb:27:35:b1:59:1c:
b1:7e:37:c9:c7:68:5a:ce:9c:a6:ad:06:ee:ed:ea:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:1A:95:E0:CA:CA:3F:D6:34:15:D3:7E:50:24:FA:41:BE:9A:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3234302e302f32302d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.240.0/20
Signature Algorithm: sha256WithRSAEncryption
13:c7:11:aa:77:fe:1f:2e:d0:7a:d9:c4:77:83:27:20:a4:5b:
95:9f:d9:82:9b:08:a5:c5:b5:2d:53:3b:1e:60:b6:d7:ec:54:
99:aa:da:9f:69:f0:03:6d:c9:c0:66:e5:94:ba:22:df:fb:74:
0d:69:be:c6:af:b5:25:c8:ae:ce:0b:68:36:45:9e:f9:21:25:
f0:d9:ff:3f:3a:64:09:1d:02:e7:67:93:c5:29:91:4b:93:14:
a5:31:be:10:13:98:61:63:eb:76:8d:de:d4:18:47:81:55:50:
1e:8b:cb:70:1a:f5:4c:c3:fb:0c:e1:54:c0:f5:f2:8e:d5:09:
4b:1b:0c:9d:33:7c:92:01:2c:3d:f0:70:a5:79:ef:ea:5d:d8:
7c:de:a3:6d:2a:81:a1:a6:97:6d:7a:f6:d2:08:fe:ef:c3:3d:
80:2a:45:c3:8d:e5:10:46:6e:63:2f:fb:15:ba:61:91:d0:c2:
ff:c5:2a:f2:71:3f:eb:bc:5b:fe:e3:73:45:0e:10:ee:01:14:
8c:47:3f:a2:93:0c:3d:23:dc:94:4a:68:20:8c:70:cf:ae:ec:
cd:81:d6:69:2b:08:da:99:79:91:9f:7a:7f:b6:ce:96:69:1e:
d9:c7:24:dc:46:72:d4:18:44:0a:15:a7:87:21:cf:e0:d9:ae:
6f:3e:10:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdHZ3kqmrZ/dlyEy6d1U6AQzyZLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MTAxMzU4MjNaFw0yNjA5MDkxNDAzMjNaMDMxMTAvBgNV
BAMTKEVCRUIxQTk1RTBDQUNBM0ZENjM0MTVEMzdFNTAyNEZBNDFCRTlBNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYMVOlk+Z5CKkRxH8MpncSsmo
pdeRt75Jni2OFPwlpZxU9BSKNT2A2MUKz4E/1OnOuYKA5BpDmsyDqfza1MNgMsSZ
P6GpLGDJ/24ODR7mET3Hhf49NKTGUMRv7susOIDDW+N1dx7qOlF7OIvqNozKZu1s
NFlvdxFgOFuMq2fWpX6GXU1tjmkaAvBAbCG73RCRW8+efWcckDFTOtgSwXUf8kvV
50HNra6qv6CPJ8G8ibvGmRaLnJe+RfazVM11cqvXvIqwqeP5WoAoqVKD3lt2kHsS
EKVWNhigXYYQ7SPE7g8oCx4P5MyypusnNbFZHLF+N8nHaFrOnKatBu7t6q6DAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6+saleDKyj/WNBXTflAk+kG+mk0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMjM0
MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJFP
8DANBgkqhkiG9w0BAQsFAAOCAQEAE8cRqnf+Hy7QetnEd4MnIKRblZ/ZgpsIpcW1
LVM7HmC21+xUmaran2nwA23JwGbllLoi3/t0DWm+xq+1JciuzgtoNkWe+SEl8Nn/
PzpkCR0C52eTxSmRS5MUpTG+EBOYYWPrdo3e1BhHgVVQHovLcBr1TMP7DOFUwPXy
jtUJSxsMnTN8kgEsPfBwpXnv6l3YfN6jbSqBoaaXbXr20gj+78M9gCpFw43lEEZu
Yy/7FbphkdDC/8Uq8nE/67xb/uNzRQ4Q7gEUjEc/opMMPSPclEpoIIxwz67szYHW
aSsI2pl5kZ96f7bOlmke2cck3EZy1BhEChWnhyHP4Nmubz4Q0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:06 2025 by rpki-client