Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e38362e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: TS8kIEl7HEEFLTsmmnjGAJ21iLBHuKba18z7LgDRbiM=
Subject key identifier: 45:A9:7D:C4:33:8E:96:99:88:21:00:28:3A:07:79:18:6C:64:D3:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70367A9C5FEB98DB0A1AAC46FED878FC29C24FA9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Sep 2025 12:23:52 +0000
ROA not before: Thu 04 Sep 2025 12:18:52 +0000
ROA not after: Thu 03 Sep 2026 12:23:52 +0000
asID: 214143
IP address blocks: 145.79.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:36:7a:9c:5f:eb:98:db:0a:1a:ac:46:fe:d8:78:fc:29:c2:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 4 12:18:52 2025 GMT
Not After : Sep 3 12:23:52 2026 GMT
Subject: CN=45A97DC4338E9699882100283A0779186C64D35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:b5:b2:fa:14:1d:f8:e6:8f:4c:84:4b:7a:
fd:7f:b6:68:d9:00:31:e9:4e:1a:df:79:3a:20:da:
e3:0c:10:af:b8:89:9c:db:3b:1e:e5:eb:c0:d3:75:
e6:b6:cd:50:0b:1b:55:70:d5:63:a4:c3:d8:1b:7f:
b6:a4:ba:93:09:e5:10:6a:2a:97:d0:81:d9:48:91:
83:36:88:92:34:79:fe:55:c6:8d:dd:e4:1c:a7:7d:
c6:a6:f3:ca:be:4b:2b:34:ef:ec:7f:4e:46:51:35:
cf:cd:e9:13:c1:ba:66:4a:58:30:99:b6:e7:81:0f:
50:e4:67:8d:e7:d8:84:be:73:a2:cc:c4:50:53:43:
0e:0c:19:7b:59:d0:98:a3:01:62:64:88:0b:23:b7:
b2:84:ef:ba:ff:8c:81:2f:fe:ff:42:51:f0:9f:84:
69:f1:c5:eb:47:d4:fa:9c:3d:17:35:fc:ed:c8:1e:
c7:42:85:e1:9c:28:ac:37:84:a4:bd:c2:58:b1:a7:
9e:6f:7b:16:ae:f5:29:4d:e9:08:4d:e9:d5:be:33:
eb:39:93:9b:e5:7a:70:c5:04:40:5e:e4:0f:3e:07:
20:44:08:a9:2e:23:0f:0e:4c:f5:49:34:0b:ff:8f:
c0:24:f6:43:fe:27:d6:91:b3:65:91:8e:02:7c:48:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A9:7D:C4:33:8E:96:99:88:21:00:28:3A:07:79:18:6C:64:D3:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.86.0/24
Signature Algorithm: sha256WithRSAEncryption
55:eb:6f:b3:c0:2f:51:74:ee:77:03:87:c6:a7:f0:01:23:64:
b4:c7:12:4a:38:e1:18:be:94:e1:31:40:5e:11:d4:ff:9d:4f:
27:7e:e1:fc:f0:3e:a7:1a:85:75:7e:4f:af:3e:5f:d0:8c:97:
3c:83:70:e7:e0:50:f5:58:9c:95:6a:de:bc:07:79:db:1d:db:
3b:69:2b:d0:60:6b:50:3d:ba:68:0a:b4:58:b1:68:fd:6e:11:
0a:77:01:be:17:76:95:4c:42:ac:79:8e:4e:90:24:79:e7:21:
14:90:b4:c8:ec:21:d4:b6:97:9a:2c:4f:4f:ee:90:f2:88:7a:
e1:a9:e3:4c:cf:10:9a:26:c8:5a:fc:5e:8a:56:be:ef:bc:df:
7c:69:fa:ce:b7:14:9e:5e:18:a3:cf:98:c6:82:26:74:24:1c:
42:ae:b2:de:8b:66:89:b1:a3:35:2f:14:bb:2c:cc:b7:bd:29:
82:80:4f:4a:85:a1:7e:94:29:9e:3c:aa:cf:21:0c:14:08:e0:
a9:2c:f1:9e:61:28:6f:80:35:24:98:e5:a7:4c:97:86:df:9e:
12:31:6a:46:b0:07:07:dc:c4:f7:48:7c:37:09:8e:86:62:80:
d1:a7:e7:d5:ab:ce:c6:64:f2:d6:f2:6a:29:e5:b9:93:cd:34:
be:e1:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:35:31 2025 by rpki-client