Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36352e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e36352e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: nuEbcIBkN1Yb8lJX3f49uzVmhPIGFEQ9B4q9qC4HNW4=
Subject key identifier: 0C:B1:AD:04:BC:0F:B0:68:92:8C:05:91:90:EA:5D:CD:45:A5:86:04
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E3D29A9F34B9C5EFF2E6F337CC43FAB6D8B1241
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36352e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Sep 2025 12:23:53 +0000
ROA not before: Thu 04 Sep 2025 12:18:53 +0000
ROA not after: Thu 03 Sep 2026 12:23:53 +0000
asID: 214143
IP address blocks: 145.79.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:3d:29:a9:f3:4b:9c:5e:ff:2e:6f:33:7c:c4:3f:ab:6d:8b:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 12:18:53 2025 GMT
Not After : Sep 3 12:23:53 2026 GMT
Subject: CN=0CB1AD04BC0FB068928C059190EA5DCD45A58604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:76:26:e3:65:47:24:ec:0e:f1:59:5e:2a:
83:58:02:dd:bb:95:3a:82:2b:bc:9f:8b:1f:e6:7a:
53:a5:9c:93:de:de:e4:0d:78:50:1c:e6:31:cf:b6:
f2:45:e8:e9:19:13:de:89:8d:2b:15:23:b3:ec:1f:
ea:50:3c:23:76:70:59:ff:73:b8:17:ba:bd:7a:13:
79:51:e1:2d:b9:d9:59:b5:39:3f:c8:7d:c5:f9:e7:
d8:32:4c:f8:2d:fc:02:99:e9:95:a2:44:e6:87:ef:
69:82:5f:04:d8:f3:b7:ff:44:c0:47:dd:54:1b:7d:
97:30:7a:64:94:f2:34:60:d9:de:39:e8:dd:24:ec:
04:ad:ba:d9:21:16:56:d5:b0:dc:8b:c5:b1:c0:10:
50:0c:68:d8:ae:ca:df:17:5d:0b:04:07:aa:87:97:
82:ee:93:17:72:47:91:2d:ba:97:03:48:99:54:a2:
05:de:bf:35:41:b7:f5:25:3c:fe:69:e2:b0:3a:59:
f8:da:b7:c2:51:dd:39:c9:af:70:0f:fb:62:f7:49:
33:ed:29:09:51:e0:67:c3:09:36:cb:89:33:8e:7c:
08:56:78:24:e5:ca:d4:21:ee:cc:6d:d4:1b:17:5d:
d6:49:96:51:ad:1b:cd:43:bd:f9:c3:8c:f4:30:23:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B1:AD:04:BC:0F:B0:68:92:8C:05:91:90:EA:5D:CD:45:A5:86:04
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36352e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.65.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a1:a4:ff:ee:7d:8d:dc:e7:3b:7a:d7:95:86:c8:45:e5:69:
52:60:1e:1e:49:f9:4c:f4:11:91:cf:df:98:b0:43:19:04:69:
ec:15:59:21:74:b3:44:85:57:bb:54:0e:92:fa:5f:38:ef:fb:
0c:bb:82:e2:b7:ac:e6:80:4c:c0:72:5c:8d:c4:3a:cf:df:cf:
8c:c3:a9:82:12:13:53:09:8b:b7:b9:12:a9:10:59:a1:31:35:
7c:7c:d4:14:0b:36:f8:ce:f4:f0:42:1a:6f:fb:0c:eb:a9:ae:
3c:cd:bb:0c:09:ba:db:74:71:cc:9e:a9:e2:e9:2a:65:22:4e:
f7:83:e9:77:42:de:ca:17:0d:0a:d6:a0:cd:38:03:51:16:38:
46:34:d7:4f:52:f5:81:ba:99:fc:4d:16:c0:ed:b7:39:15:d1:
52:c3:e2:f2:95:de:ad:88:26:56:db:a6:72:ad:1b:99:79:af:
87:14:65:0e:d8:c3:2b:2a:6b:78:dd:f9:b1:de:eb:20:8e:fd:
a5:9a:93:d6:7e:64:0c:4c:00:5d:04:1b:88:cd:5f:46:09:83:
7f:86:c6:9b:0f:41:20:63:9e:fd:55:df:e3:7f:25:a8:40:ba:
23:06:62:7a:a3:d8:09:26:2f:d9:48:1d:76:35:ed:78:dc:b6:
76:89:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:32 2025 by rpki-client