Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e37392e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: 8mEAdjKDGox/tHdfHW1OEypzaPHNIjGZZP5O75i1Dps=
Subject key identifier: AB:CD:A9:35:85:2F:C6:77:39:E5:64:F0:22:2B:4A:97:AE:67:3D:B8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F6745D9C82B29CFC786193F069AF19F36D15381
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Sep 2025 12:23:54 +0000
ROA not before: Thu 04 Sep 2025 12:18:54 +0000
ROA not after: Thu 03 Sep 2026 12:23:54 +0000
asID: 214143
IP address blocks: 145.79.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:67:45:d9:c8:2b:29:cf:c7:86:19:3f:06:9a:f1:9f:36:d1:53:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 12:18:54 2025 GMT
Not After : Sep 3 12:23:54 2026 GMT
Subject: CN=ABCDA935852FC67739E564F0222B4A97AE673DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:dd:f9:bc:86:c3:10:0c:b0:25:d5:88:a6:
19:da:09:e4:09:53:7e:42:fb:9d:c9:ca:46:c7:7e:
6c:97:a3:93:3f:1e:7b:de:d4:99:f1:0e:76:e1:37:
98:8a:e2:8e:e3:19:18:4e:e4:6f:ae:49:a6:7b:27:
3a:79:5c:a6:27:8a:93:08:30:de:2e:9e:97:a2:7e:
b8:a7:69:ff:19:d8:72:5d:a0:7e:a4:4e:f2:56:5a:
42:65:dd:eb:5e:7e:ce:c2:01:d7:b7:bc:06:c5:0d:
09:11:fd:62:9d:27:f6:5d:2f:f9:a5:a9:18:de:29:
85:b9:68:71:f1:9b:60:c3:00:89:c7:70:81:a4:1e:
d5:f3:6f:b0:9d:53:8d:39:87:64:ff:58:37:71:62:
25:12:9e:b1:aa:df:54:90:1b:a4:fc:c0:2a:cf:44:
da:13:33:51:eb:cc:9a:f3:f9:a5:39:f3:11:d9:b4:
e4:43:af:03:a2:f9:a0:d9:b1:3a:1f:8d:35:50:9c:
94:9d:79:fa:bd:5e:e9:b3:f5:dd:dc:78:57:71:ff:
41:8e:32:47:19:93:db:fd:c3:85:a6:df:d5:3e:53:
8a:70:49:c2:67:58:17:80:41:d5:51:82:2e:e9:db:
96:71:84:2d:9e:ac:f8:1b:87:4b:21:0a:79:7a:52:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CD:A9:35:85:2F:C6:77:39:E5:64:F0:22:2B:4A:97:AE:67:3D:B8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.79.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ee:e7:05:04:7d:7d:06:af:0d:0d:cc:b2:4d:e8:f3:b5:eb:
8f:0f:01:e4:7f:42:e3:2b:90:5e:ae:30:b2:8c:1c:1d:b3:67:
1c:f7:af:b5:6e:a9:53:c4:fb:a3:19:2f:81:26:b1:92:e1:22:
65:bd:38:25:cf:05:b9:19:a1:98:07:75:70:93:01:e1:70:95:
60:0a:6a:67:be:2d:c7:05:26:e6:5b:bf:d4:49:76:14:25:f6:
cd:5d:c5:ef:af:06:d8:53:65:c9:6c:91:cd:05:f0:58:a7:af:
c9:b6:f1:a6:18:20:a2:c1:da:59:36:5f:f5:40:c0:0b:00:78:
17:ef:87:c9:d5:ea:51:ea:42:67:3e:c9:7b:40:24:48:0e:5f:
9c:e9:8b:13:27:03:b6:35:5c:db:c1:a8:5b:9a:61:7b:d0:a6:
54:eb:e3:77:75:1b:29:56:95:75:60:19:cc:93:df:f8:b7:31:
9e:0d:bc:6e:6e:69:e9:5d:f6:ec:7d:55:15:f6:f1:1d:d8:0e:
ae:03:3a:52:05:cd:44:51:91:d1:dc:6d:f7:a6:fa:09:43:bc:
9f:b1:93:18:6d:ec:85:83:ab:83:c0:75:ee:da:70:96:ba:63:
37:74:be:18:dc:a2:9c:9b:94:65:d7:9b:a1:fd:78:3b:78:51:
25:98:83:47
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUD2dF2cgrKc/Hhhk/BprxnzbRU4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA5MDQxMjE4NTRaFw0yNjA5MDMxMjIzNTRaMDMxMTAvBgNV
BAMTKEFCQ0RBOTM1ODUyRkM2NzczOUU1NjRGMDIyMkI0QTk3QUU2NzNEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rt35vIbDEAywJdWIphnaCeQJ
U35C+53JykbHfmyXo5M/Hnve1JnxDnbhN5iK4o7jGRhO5G+uSaZ7Jzp5XKYnipMI
MN4unpeifrinaf8Z2HJdoH6kTvJWWkJl3etefs7CAde3vAbFDQkR/WKdJ/ZdL/ml
qRjeKYW5aHHxm2DDAInHcIGkHtXzb7CdU405h2T/WDdxYiUSnrGq31SQG6T8wCrP
RNoTM1HrzJrz+aU58xHZtORDrwOi+aDZsTofjTVQnJSdefq9Xumz9d3ceFdx/0GO
MkcZk9v9w4Wm39U+U4pwScJnWBeAQdVRgi7p25ZxhC2erPgbh0shCnl6UlnVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUq82pNYUvxnc55WTwIitKl65nPbgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNzM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzEzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU9PMA0GCSqGSIb3DQEBCwUAA4IBAQAU7ucFBH19Bq8NDcyyTejzteuPDwHkf0Lj
K5BerjCyjBwds2cc96+1bqlTxPujGS+BJrGS4SJlvTglzwW5GaGYB3VwkwHhcJVg
Cmpnvi3HBSbmW7/USXYUJfbNXcXvrwbYU2XJbJHNBfBYp6/JtvGmGCCiwdpZNl/1
QMALAHgX74fJ1epR6kJnPsl7QCRIDl+c6YsTJwO2NVzbwahbmmF70KZU6+N3dRsp
VpV1YBnMk9/4tzGeDbxubmnpXfbsfVUV9vEd2A6uAzpSBc1EUZHR3G33pvoJQ7yf
sZMYbeyFg6uDwHXu2nCWumM3dL4Y3KKcm5Rl15uh/Xg7eFElmINH
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:38 2025 by rpki-client