Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130392e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: gzBNoG/0/zGeMSN9i/5zbJ+5SyQIocBglSUFR1LRbEw=
Subject key identifier: C9:D6:AD:67:9B:59:35:3A:D9:AC:78:3C:D5:EC:FB:8F:7D:13:F2:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C3D94C9E5B8A7757729059B800C66FB2A684165
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130392e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:10 +0000
ROA not before: Thu 21 Aug 2025 06:34:10 +0000
ROA not after: Thu 20 Aug 2026 06:39:10 +0000
asID: 2914
IP address blocks: 145.79.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3d:94:c9:e5:b8:a7:75:77:29:05:9b:80:0c:66:fb:2a:68:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:10 2025 GMT
Not After : Aug 20 06:39:10 2026 GMT
Subject: CN=C9D6AD679B59353AD9AC783CD5ECFB8F7D13F219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:18:9f:08:54:00:ec:7f:ad:32:de:1e:e8:
06:38:7f:be:f2:e2:4b:c6:fc:78:c4:9b:87:f2:ff:
a3:96:f1:3b:e9:43:97:1f:f5:13:70:41:6e:0d:56:
f7:32:98:4d:7a:50:e5:64:56:dd:e1:0f:0d:9f:72:
f1:0a:63:ce:d3:d6:fa:29:5f:34:88:b9:2b:a7:33:
36:c7:a3:d6:0b:20:dd:b9:79:37:b1:f7:11:2c:f9:
63:b3:13:b1:f8:ce:ec:23:dc:fe:30:d4:52:47:ed:
e1:8c:61:fd:9c:2e:6a:f3:38:f0:e1:8c:20:99:ac:
6e:e1:94:f9:aa:23:26:78:de:46:94:b5:eb:0d:5e:
54:98:be:bb:89:9e:70:7c:47:e3:e9:8e:f5:63:86:
d6:39:23:a8:9a:f7:40:15:47:73:8d:e5:fc:b1:42:
fa:c8:8a:b2:0e:a8:7c:3e:53:7b:c3:f3:b5:cb:a1:
22:56:b5:af:87:39:07:59:40:c9:ba:0e:d8:20:68:
6f:55:12:91:f8:15:90:c7:ff:04:12:d0:cb:2c:9f:
c0:ee:e2:dc:ce:64:62:ab:45:ed:9c:f5:61:df:e8:
5c:c0:d0:73:69:9d:e8:f5:98:cf:b8:29:3d:a2:79:
a9:58:7d:79:bf:44:f5:2c:31:d0:7a:cf:4c:76:1b:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:AD:67:9B:59:35:3A:D9:AC:78:3C:D5:EC:FB:8F:7D:13:F2:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7c:81:3a:47:8b:39:12:24:18:06:2d:9c:45:b1:7f:33:c4:
1e:ea:2e:50:89:35:96:bc:7c:7a:75:01:d7:a7:7d:f5:43:77:
43:68:3e:36:b1:4c:fb:82:dc:c2:98:f9:ec:35:57:4f:d0:e1:
76:75:2c:bf:90:19:87:92:58:74:01:6e:27:4d:6d:5c:90:88:
2c:ba:5b:8b:fe:2f:90:7b:8f:9d:ca:49:ae:04:61:ac:86:4d:
2b:e8:6d:f0:9f:80:46:a9:01:d8:f5:f4:31:8d:e4:19:e9:9d:
d6:ce:f2:dc:5a:62:e4:22:6e:fd:b5:79:00:df:37:8b:3a:94:
5c:c0:c7:49:e1:f5:a8:28:b7:7a:a3:e3:7c:c0:a5:96:63:2b:
77:8f:3b:6e:35:a2:aa:0c:57:6f:79:6e:d0:d4:8c:c7:4d:28:
33:bc:da:ac:ea:2e:5f:ed:6c:fb:0e:e1:17:66:46:95:fe:0d:
74:d6:39:f4:5e:d4:8a:d1:8c:86:46:be:af:5f:5e:0f:24:b1:
38:75:e5:3f:a8:13:9b:28:44:44:7f:72:b1:3f:ed:af:db:f3:
a9:62:60:4c:d9:5e:98:10:bb:a3:1b:b9:db:95:3b:f1:77:bf:
03:fd:67:d7:6e:5f:c2:9a:f6:8b:59:03:5e:39:d2:6c:93:59:
3b:b7:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:42 2025 by rpki-client