Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: saAS3ZFR9JJ77osxjaqUfieENbQcSrqFJXz1+QFVNuc=
Subject key identifier: C1:7B:DD:FC:C2:AD:BD:E7:10:76:A2:B4:2D:DD:23:B3:12:28:3B:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 53B71C50EE8AEA6AF6958E4222360E0FC7ADAAAA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:08 +0000
ROA not before: Thu 21 Aug 2025 06:34:08 +0000
ROA not after: Thu 20 Aug 2026 06:39:08 +0000
asID: 2914
IP address blocks: 145.79.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b7:1c:50:ee:8a:ea:6a:f6:95:8e:42:22:36:0e:0f:c7:ad:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:08 2025 GMT
Not After : Aug 20 06:39:08 2026 GMT
Subject: CN=C17BDDFCC2ADBDE71076A2B42DDD23B312283B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:ce:5d:d6:a7:2c:a8:80:a2:e9:51:70:6b:
d7:51:71:77:bc:6a:55:d9:d5:1f:72:10:54:6f:3d:
04:4c:0f:7d:7f:1c:40:96:ef:b5:28:3d:98:24:f9:
9a:dd:84:51:d0:22:74:3f:a6:da:07:7e:95:c1:89:
ce:be:e7:3a:12:59:fd:be:68:56:ed:2c:81:64:95:
29:7d:b0:bd:54:29:a4:2a:e8:05:1f:df:67:73:38:
2c:09:db:43:9f:0c:17:b0:9a:3b:8d:82:55:e9:df:
3d:d1:75:0b:ce:02:55:0d:37:04:9e:10:78:c4:09:
45:ae:35:ae:db:26:62:f4:a3:78:b3:d2:da:0d:2d:
62:9a:3a:9e:0d:97:83:21:8c:b9:ce:69:a6:b4:61:
25:4c:1f:51:51:3d:bf:be:5a:17:46:a1:82:18:01:
b3:62:45:57:e3:2a:c1:de:b6:55:06:14:7d:50:03:
ce:69:b7:e2:89:16:d8:ef:54:75:25:f0:78:e0:27:
67:06:54:39:e1:bb:00:a2:23:b2:d1:92:6a:89:17:
bc:5a:7a:16:2f:a0:bb:37:c7:72:4f:7f:d6:8e:ca:
06:23:bd:75:2a:8d:7a:27:a2:cb:c1:7b:d0:1e:94:
6d:a8:f8:f3:44:d8:bc:b7:4b:40:42:48:5f:ac:35:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:DD:FC:C2:AD:BD:E7:10:76:A2:B4:2D:DD:23:B3:12:28:3B:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.111.0/24
Signature Algorithm: sha256WithRSAEncryption
05:37:cf:b8:37:b8:7f:c6:e1:71:90:24:11:e1:03:39:f2:b4:
6e:00:bc:0c:9e:32:ac:95:b8:c1:1f:88:b4:14:ee:58:e4:5b:
cb:8b:c5:32:d7:2c:bc:08:d3:71:3a:b0:9c:3b:c8:ed:c2:88:
12:33:8b:c2:16:f6:3a:a4:8d:c8:ca:56:49:33:99:34:31:d9:
57:1e:fb:1c:04:93:78:10:25:b3:c6:f9:04:a8:e6:ff:7a:62:
ac:91:41:b8:21:ad:b6:82:65:bd:08:82:46:19:80:64:88:c1:
5b:51:82:cf:c1:da:b7:1b:0b:6f:7d:f7:4b:8e:93:7a:c3:32:
93:4c:7b:bf:49:6b:16:24:1a:11:ce:8c:be:2f:b6:95:ed:89:
04:28:1f:16:58:b3:20:bc:d1:dd:32:5c:aa:e3:ce:32:67:bc:
72:20:46:2a:8a:5d:3e:32:d3:a7:eb:ad:a9:64:24:b9:b5:a5:
ed:71:4d:e4:e9:a2:0e:35:6b:32:e0:85:57:f7:49:59:82:2e:
04:25:2c:d3:33:8b:de:fe:17:7b:21:dd:35:6f:63:04:a2:f8:
ae:d5:69:f6:b8:c7:82:d9:d9:52:9a:71:23:2f:54:a1:f2:55:
1c:84:a3:71:eb:e6:0b:86:dd:15:9d:ea:c0:9b:9c:99:ba:61:
94:ca:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:31 2025 by rpki-client