Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e37382e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: K1WQDgHiFhyzn04PMoOMPunD98NTtajKfB7iNXcpZKw=
Subject key identifier: F9:87:29:1D:DB:0F:8D:25:EE:00:CB:C6:75:0E:4B:57:3B:4B:4F:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5CB6F54A15B3B700B58611FE42E0D8B69F08D90B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Sep 2025 12:23:52 +0000
ROA not before: Thu 04 Sep 2025 12:18:52 +0000
ROA not after: Thu 03 Sep 2026 12:23:52 +0000
asID: 214143
IP address blocks: 145.79.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b6:f5:4a:15:b3:b7:00:b5:86:11:fe:42:e0:d8:b6:9f:08:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 12:18:52 2025 GMT
Not After : Sep 3 12:23:52 2026 GMT
Subject: CN=F987291DDB0F8D25EE00CBC6750E4B573B4B4F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:68:02:ff:c2:db:b0:c5:6e:91:0c:cf:bc:
83:64:71:2a:e4:36:57:4f:58:33:92:98:ab:da:77:
e8:fa:e3:30:65:83:b4:f3:3e:c6:15:96:4e:e2:bf:
57:44:3e:9b:66:2f:98:c9:aa:8b:d8:96:d9:ff:09:
78:2d:26:6e:2b:68:99:02:74:f8:93:7b:14:3f:be:
cc:5e:c9:e3:f9:73:3c:64:a8:61:57:e1:c6:c5:0a:
a7:24:53:92:45:f9:3b:41:a6:81:65:f3:56:0d:b6:
38:e5:a8:85:f0:93:88:c3:3e:e3:b5:f5:b8:54:b0:
ec:54:ce:11:16:10:73:b0:01:0e:57:37:50:0e:38:
50:49:c9:0d:74:62:5e:42:ae:49:2b:ae:4f:6a:2d:
55:ef:53:07:f0:87:9c:c6:7b:0d:ed:59:c8:f4:58:
4a:33:22:6a:57:36:ce:5f:5d:23:08:95:b6:42:0e:
29:a1:9b:a3:3e:e3:4e:1f:1e:d0:93:b6:88:c6:0b:
1c:c5:b9:fe:f2:8d:d1:da:17:97:48:da:13:53:b3:
e3:1a:7a:07:82:fa:3c:69:11:46:34:86:e1:fd:8f:
53:e5:7f:82:60:84:23:3d:b1:03:3c:a5:63:59:79:
33:2d:00:fc:93:79:af:4b:9e:33:41:da:35:61:f5:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:29:1D:DB:0F:8D:25:EE:00:CB:C6:75:0E:4B:57:3B:4B:4F:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.78.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b4:da:63:e0:c3:87:18:ab:cd:c7:bb:db:13:f5:51:e3:75:
ae:75:07:ee:09:49:3c:2a:fc:b6:63:c3:f3:9c:d0:e3:44:47:
23:35:68:45:9b:32:15:f8:aa:a6:8a:1e:89:65:06:ab:73:ee:
13:31:e9:0e:c3:fd:c0:d7:ae:a2:c8:63:1c:f0:71:4a:86:94:
9f:a0:c2:f3:ed:4e:01:5d:3a:e3:bb:27:7a:60:f9:04:22:27:
e3:66:8a:a3:3a:2b:99:72:51:e1:dd:9e:96:b9:a9:f8:7b:63:
cf:f2:2b:cd:fe:0e:67:60:c8:8b:c3:99:e0:89:fb:ea:46:89:
91:4f:d1:6a:24:57:33:6b:a5:27:3d:89:e1:72:fa:27:e2:e8:
f1:35:04:4b:99:41:fc:14:3e:8c:5a:70:07:77:f3:e9:28:9d:
84:a7:69:2e:c9:03:30:4b:6e:62:d5:8e:2a:21:44:56:47:f6:
da:1a:e5:d1:26:eb:eb:af:21:df:36:98:70:f3:f0:65:04:23:
e5:bb:46:b9:37:71:a6:3d:6d:e1:4e:2b:74:eb:70:08:98:ff:
b6:41:ba:8d:d3:05:f9:91:04:ec:8c:b2:7d:15:7a:e5:0b:35:
4c:01:75:fc:e1:3a:e5:e7:7a:20:6f:ba:5f:c6:84:1c:78:ec:
2c:09:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:36 2025 by rpki-client