Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e38332e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: OpLb/wF4TAcrbcsmuXt0sP7VVK3Vaw75HHJp5SWlNyY=
Subject key identifier: BF:C8:A9:6D:E2:8E:B4:2A:EF:9E:A9:9D:9B:9E:65:27:D3:3F:74:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 491C79E844678302EE8A5596A612845A716316D4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 02 Sep 2025 14:19:12 +0000
ROA not before: Tue 02 Sep 2025 14:14:12 +0000
ROA not after: Tue 01 Sep 2026 14:19:12 +0000
asID: 395793
IP address blocks: 145.79.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1c:79:e8:44:67:83:02:ee:8a:55:96:a6:12:84:5a:71:63:16:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:14:12 2025 GMT
Not After : Sep 1 14:19:12 2026 GMT
Subject: CN=BFC8A96DE28EB42AEF9EA99D9B9E6527D33F74A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:df:6e:b1:b8:eb:64:52:e2:15:2b:ac:11:
05:db:a8:1a:b0:32:52:c9:c0:33:50:be:5c:bd:cb:
b5:7f:ae:c8:f0:a1:a3:86:dd:1f:90:05:43:68:bf:
ba:48:f4:05:f3:88:25:4c:77:b2:36:c2:7f:e9:9f:
03:55:12:83:6b:4e:2b:b4:12:5b:a0:73:7a:17:0c:
48:28:5d:ce:46:fc:a1:ff:ad:6c:8c:73:dd:1a:74:
7a:4d:6f:ee:71:99:6d:a2:ce:17:95:e5:64:7e:85:
5b:d7:d9:36:c4:8b:5a:29:0c:2f:c1:71:60:7a:20:
d6:2d:39:4b:84:82:fa:cf:fc:dc:9e:f8:9d:79:55:
41:fb:43:dd:5a:06:c1:9f:17:c4:d0:5c:2e:5a:a1:
a6:78:f9:21:c0:a6:5b:cc:bd:59:9a:7a:d0:b0:19:
92:b8:05:f6:10:e9:d7:c0:df:b6:9b:18:8d:18:c1:
c4:a7:b7:70:e5:2f:40:ab:d2:6a:b7:29:13:4b:87:
1f:ee:0b:81:c3:9b:b1:6c:4f:51:8e:9f:30:54:4f:
11:8d:44:35:93:d6:66:21:8b:66:23:08:e2:3f:ed:
cd:ab:13:b0:22:4e:6a:e7:d9:4f:de:2b:2d:39:85:
2e:21:83:5c:93:65:cf:df:6d:56:6d:6f:eb:31:76:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C8:A9:6D:E2:8E:B4:2A:EF:9E:A9:9D:9B:9E:65:27:D3:3F:74:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:26:9d:fa:fc:90:ce:4e:14:fc:5b:2d:3c:41:02:c5:21:34:
c7:ee:6d:0e:3d:90:e4:8d:0d:b5:ab:fa:1c:a8:da:a9:43:69:
81:01:ab:59:6f:2c:fa:23:1a:bd:c8:ec:28:1a:e9:22:b3:e7:
3b:9b:b8:65:5a:a8:d7:e1:4b:6e:3a:a0:4a:0f:5f:9f:8d:65:
a9:3e:3c:c1:1e:a6:39:19:1e:8c:2c:8d:b8:75:d4:8c:a8:33:
b2:c0:98:f8:c5:c0:d1:ae:f7:8a:7f:49:2a:22:0e:fa:f7:92:
92:e4:4d:a9:7b:b2:1b:10:86:44:b6:0f:26:9a:e4:e0:e0:8d:
45:8b:45:2b:66:d8:c7:40:5c:ce:6f:69:b3:c2:88:6d:05:3f:
61:4e:9d:b7:99:a6:71:e4:c2:09:27:f5:fd:f9:13:fd:e8:1e:
5b:90:37:97:7d:e8:a5:17:3a:e9:7c:2a:7c:20:4c:49:d6:d9:
69:79:d4:58:be:a5:a3:68:83:ca:20:23:8f:37:d1:86:96:c3:
e3:ed:4e:57:14:65:c1:16:01:92:38:5d:dd:b3:3c:9b:0b:f9:
3c:62:5b:0d:b6:7a:c4:1c:1f:1c:dc:37:b8:25:3a:93:52:4c:
e9:b6:d5:e5:20:01:b2:71:dd:76:76:9c:80:a2:e8:e7:e5:75:
4e:26:cc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:50:55 2025 by rpki-client