Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: mkgCFuIEs7RGAh76HR7Me+Vkg1H/Y768GjkKNJX6dyM=
Subject key identifier: 57:5D:15:D8:DF:34:8A:7D:EF:30:C8:6A:38:06:59:E1:F0:D0:AA:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 790B06359162EE03642B687466BB04558133871E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:13 +0000
ROA not before: Thu 21 Aug 2025 06:34:13 +0000
ROA not after: Thu 20 Aug 2026 06:39:13 +0000
asID: 2914
IP address blocks: 145.79.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0b:06:35:91:62:ee:03:64:2b:68:74:66:bb:04:55:81:33:87:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:13 2025 GMT
Not After : Aug 20 06:39:13 2026 GMT
Subject: CN=575D15D8DF348A7DEF30C86A380659E1F0D0AA6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:b3:b5:22:81:44:b1:86:7f:f3:d3:33:92:
52:f1:d5:4c:da:50:82:ce:12:72:88:f1:e2:ec:32:
fd:f0:0b:5e:cd:fe:b1:69:2d:4c:20:c9:f4:3f:19:
6f:92:81:09:ec:7e:45:a0:37:a3:83:7f:1e:dc:53:
e2:18:1d:6b:67:24:e1:1a:8f:d2:72:d4:e4:37:b2:
e6:ab:ee:86:0b:24:3c:86:e5:83:5b:be:7a:4e:20:
97:86:22:d2:da:b6:c4:87:ef:f7:d4:50:67:b7:ac:
dd:ab:1c:9f:03:e7:5c:25:28:c7:dc:a7:69:12:b8:
15:9b:97:88:b5:9e:d4:57:f0:6b:82:84:a2:fd:ea:
1f:67:76:3e:fa:91:41:3c:54:d3:70:a1:c4:3a:c2:
8c:7a:f5:77:e3:a8:cd:06:a6:19:88:b6:86:76:98:
92:9e:1a:bf:4a:12:de:4d:55:e3:e9:36:ff:75:3e:
28:64:88:2f:9b:f9:20:86:0e:65:18:57:27:25:1a:
d2:6c:6a:69:82:eb:c0:fe:e5:83:3c:b0:ab:36:14:
5a:8e:b1:6f:98:62:9f:90:23:cf:1c:ba:7a:73:b4:
d9:74:17:8b:5e:62:02:58:ce:78:c4:13:8c:84:94:
15:dc:72:0a:35:56:c1:3d:c4:60:44:42:7b:e1:77:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5D:15:D8:DF:34:8A:7D:EF:30:C8:6A:38:06:59:E1:F0:D0:AA:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:fb:ce:1f:f0:59:ee:9f:58:ef:e3:7f:5b:61:09:2c:05:45:
16:f9:97:6d:87:b8:24:3b:62:f9:83:3b:67:82:42:65:b3:29:
c4:e7:37:41:f2:55:88:a7:39:d0:b6:f5:b6:97:85:9f:7f:e1:
2e:b7:1f:88:35:3d:28:2c:6b:13:aa:0d:52:5f:09:77:d2:7c:
f7:c9:96:63:c1:c4:60:ea:b6:35:da:4c:ff:d1:65:5b:0a:e0:
8d:a3:21:a6:13:3d:be:52:13:bc:47:da:8a:ae:08:4f:95:d1:
44:06:c1:85:ff:4c:6f:cb:cd:0c:69:8f:4a:1c:00:f8:fd:b9:
a9:71:f1:b9:5d:fc:6f:e9:a8:ac:e6:1e:26:13:8c:72:69:d4:
e9:21:dd:67:5c:28:f6:00:08:85:00:64:0e:02:f0:c7:60:89:
20:e5:e6:61:ff:b0:f4:b7:c4:83:b2:4a:b2:58:59:21:ad:0c:
2c:da:d6:10:5e:e7:af:9a:ef:14:e2:2b:07:13:10:e6:f4:a5:
fa:59:e5:3e:20:d3:7c:cf:55:ac:45:4a:c8:48:b1:e4:16:2f:
e3:d4:d9:bc:31:9d:3d:a2:99:c3:fd:35:64:4c:d0:51:d8:f8:
fb:ed:17:eb:f8:0d:39:6a:01:7d:32:0e:01:47:d5:5e:50:53:
c9:5b:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:01 2025 by rpki-client