Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38352e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e38352e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: 8SuGIjfoIvXOg0LtiCatzrhGXRn11YT8JiUfwwg/D+g=
Subject key identifier: AE:D4:50:15:0D:75:A4:55:38:EE:5D:8E:BD:F8:10:F2:14:FF:AB:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22B6622FDCDEA5C8E1C48603261BC17C2E0D7A5B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38352e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Sep 2025 12:23:54 +0000
ROA not before: Thu 04 Sep 2025 12:18:54 +0000
ROA not after: Thu 03 Sep 2026 12:23:54 +0000
asID: 214143
IP address blocks: 145.79.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b6:62:2f:dc:de:a5:c8:e1:c4:86:03:26:1b:c1:7c:2e:0d:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 12:18:54 2025 GMT
Not After : Sep 3 12:23:54 2026 GMT
Subject: CN=AED450150D75A45538EE5D8EBDF810F214FFAB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:c7:99:87:30:40:78:cd:f9:68:0c:a4:61:
41:cb:eb:43:be:45:f5:97:bc:26:24:e4:75:ec:dc:
de:3b:5c:77:af:d2:44:14:4a:d1:98:5c:72:76:6c:
cb:31:37:9c:cc:db:9d:15:f7:63:ae:a1:44:e9:b5:
3d:2d:90:d7:cf:3c:40:63:4c:19:cd:40:12:95:9f:
4c:3e:f5:39:06:99:b8:92:ed:6f:87:84:90:ad:66:
a8:62:23:bc:85:1f:75:50:bf:e9:a5:8a:79:f7:60:
42:a2:09:86:a3:90:f4:57:5b:af:1b:35:f4:c5:69:
61:10:db:76:13:36:4e:e0:d2:32:36:ac:8d:4b:79:
c6:77:bc:4a:ec:f3:e4:18:20:76:be:a3:01:90:93:
0e:fb:be:f9:c2:82:54:bb:2f:10:f1:8e:43:b9:ae:
77:e0:4b:09:b2:e4:8a:be:50:32:ef:f8:2b:ba:d4:
1e:8b:8e:82:ce:df:e0:30:41:fe:a8:53:07:79:43:
f5:30:05:68:ad:ed:c8:12:d0:94:86:64:f2:fe:35:
eb:e2:20:c8:90:d2:ba:e0:ba:96:0c:5b:9f:c6:4e:
58:b9:3f:2b:c2:5b:ab:fa:2c:4e:01:4b:e0:09:8f:
3f:a0:4c:5b:7d:c3:4a:c8:50:cc:d5:cd:0a:28:1a:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:50:15:0D:75:A4:55:38:EE:5D:8E:BD:F8:10:F2:14:FF:AB:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38352e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.85.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c8:aa:dd:a7:7c:72:80:8b:d3:38:01:ed:ea:24:4b:b3:6e:
fb:cd:04:72:6e:e6:dc:fc:e4:90:62:f0:a3:7e:7d:24:5a:2a:
7e:32:a1:3f:17:62:be:63:ab:03:2a:70:9b:ca:d8:da:c6:e5:
c8:85:82:33:ad:0c:24:b6:e6:b2:72:ba:e8:d4:8d:ac:06:cb:
6a:25:91:43:21:bf:21:81:ff:9f:95:26:51:b7:c8:e5:ba:ec:
9c:d8:67:57:95:b0:22:86:95:72:cc:98:ca:4d:67:bb:9e:44:
96:c0:a4:df:c4:ac:de:94:67:e7:c5:f0:33:37:e2:93:54:7b:
d0:71:d2:09:ad:e6:da:74:0d:6d:b9:94:22:99:f2:04:ef:e1:
1a:a2:ef:5f:e3:ab:85:e8:19:c2:dd:14:a4:3b:87:12:e5:ef:
e6:07:55:4c:cd:db:b4:b5:2f:11:c3:e4:42:3c:7f:63:1d:eb:
b9:0d:06:a2:33:17:c8:19:c9:7f:b1:35:53:c5:45:1c:78:8c:
19:a8:4a:74:f8:7f:f6:72:54:3c:95:42:b7:5e:15:86:55:28:
9c:e3:48:70:74:e9:5b:69:47:9e:89:3a:64:4c:3a:9e:3c:04:
e9:98:9b:4b:b9:8a:b8:7e:80:8f:a9:38:c4:ef:90:72:39:3d:
c5:b8:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:35 2025 by rpki-client