Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: ejS6hMZiEGUEQQAj3dfaJR+Zvmn70R9J+3YSTbq1kUo=
Subject key identifier: 14:E7:6C:EA:A0:51:91:28:A3:D5:0F:FC:5B:21:64:3F:4F:79:7D:1E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 726FDDB6CF95410156DD9E7118B78FE8C50E15D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:15 +0000
ROA not before: Thu 21 Aug 2025 06:34:15 +0000
ROA not after: Thu 20 Aug 2026 06:39:15 +0000
asID: 2914
IP address blocks: 145.79.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:6f:dd:b6:cf:95:41:01:56:dd:9e:71:18:b7:8f:e8:c5:0e:15:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:15 2025 GMT
Not After : Aug 20 06:39:15 2026 GMT
Subject: CN=14E76CEAA0519128A3D50FFC5B21643F4F797D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:45:34:d5:10:1c:94:1a:39:ec:2a:14:fb:
57:9e:1f:21:96:38:61:19:43:44:3e:6b:9a:5f:7a:
3a:29:ae:ba:a2:ca:54:0f:6c:98:86:c2:ee:45:f7:
ed:4d:a3:af:05:db:08:1d:89:36:06:e5:4e:a1:40:
22:79:7a:be:8c:eb:f0:3a:c1:36:ef:8f:9a:4e:89:
99:b8:e0:c6:55:f3:f7:cd:62:b5:67:e7:87:d7:96:
a7:aa:be:47:b0:4a:18:78:bd:55:e2:00:8f:0c:6b:
eb:c0:07:15:b1:ed:76:10:eb:27:bc:96:7e:f0:a9:
d4:7c:f4:26:46:59:d5:09:68:c4:0b:73:48:cc:36:
49:88:48:26:e6:04:bf:fc:89:aa:d0:7a:97:08:05:
6c:99:e9:bb:bd:15:64:94:ba:d3:fd:ed:b1:96:c9:
34:40:9a:2a:0d:1a:0b:b7:60:1f:2b:24:9e:0e:62:
cd:86:5f:76:b5:7b:aa:ba:20:d6:0f:50:34:dd:1f:
c8:2b:04:a7:c0:64:82:3a:2d:af:cb:8b:8d:fa:33:
04:8b:ae:f9:1b:2d:ee:af:6c:60:13:0d:16:b5:a8:
58:19:d6:62:f1:59:bd:7d:a7:64:52:48:18:03:43:
3b:e8:8b:2e:17:76:5d:9c:9c:e9:72:c7:8e:96:cf:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E7:6C:EA:A0:51:91:28:A3:D5:0F:FC:5B:21:64:3F:4F:79:7D:1E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3a:cd:92:4a:02:34:30:20:de:be:e1:7a:cd:95:10:a8:bc:
45:8e:4f:fe:28:65:b7:6f:2d:ae:24:df:30:09:b9:80:fb:d5:
c4:3b:26:e1:04:2e:c8:2a:39:06:a8:91:26:71:75:0e:21:54:
34:5b:86:36:b3:4b:3f:f4:64:72:54:1d:4d:e3:6b:ea:cd:76:
74:9d:06:aa:66:0e:9f:9d:ae:f5:b7:36:d1:24:9e:aa:94:f6:
15:89:3d:60:8a:95:fa:00:e0:f7:31:46:73:d3:c3:85:4c:cb:
7b:fc:40:49:a7:31:c9:a1:ab:e8:41:be:01:a7:c1:7a:b8:d0:
25:b2:eb:fe:c7:c8:b1:9f:58:75:fc:ee:4d:69:3b:3e:19:d0:
62:c3:6f:4a:90:97:08:b9:b5:0a:39:ca:7f:7f:6c:8d:d8:7b:
c2:95:10:4f:58:25:c8:de:81:4b:15:78:f7:b1:82:49:b7:5a:
ca:f6:83:67:6a:a9:b2:8a:72:c7:37:c7:a2:bd:d3:63:ba:a9:
49:e5:32:e0:1a:3a:65:4f:e4:44:67:0d:a2:ce:49:1b:7f:71:
9c:ba:7c:03:6c:1c:fd:05:66:ef:bd:c5:1a:e9:ed:54:64:6d:
17:90:d8:52:99:14:1e:ba:65:d8:40:e0:69:ed:b0:7e:57:2b:
99:97:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:10 2025 by rpki-client