Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131322e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Wh1lOddfZQrlRhQ44EM/CmzTSJG0GlXEnD5M4q7P+JA=
Subject key identifier: BB:16:D6:F1:1C:EF:68:90:36:89:F2:1A:CB:BF:4C:0D:DF:5B:37:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FCB0437B08E343233B3784845D22CC8B43588ED
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131322e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:08 +0000
ROA not before: Thu 21 Aug 2025 06:34:08 +0000
ROA not after: Thu 20 Aug 2026 06:39:08 +0000
asID: 2914
IP address blocks: 145.79.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:cb:04:37:b0:8e:34:32:33:b3:78:48:45:d2:2c:c8:b4:35:88:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:08 2025 GMT
Not After : Aug 20 06:39:08 2026 GMT
Subject: CN=BB16D6F11CEF68903689F21ACBBF4C0DDF5B37A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:82:06:e2:60:67:ed:5d:13:f8:ba:49:3e:
67:7e:b8:0c:ae:fe:00:26:b8:55:a5:4c:4d:5f:f6:
8f:a8:39:01:cc:2e:5c:c5:f8:89:1e:02:a9:db:19:
d6:45:bd:8d:91:a2:5a:7f:bb:f8:25:a5:19:18:fa:
76:a7:04:09:fc:b0:a4:cd:3d:15:ca:3f:7a:cf:0a:
03:7e:18:e0:fc:57:f8:6f:bf:f8:5a:0b:e7:de:ed:
69:26:9e:98:69:3b:69:a1:82:e1:05:fb:ff:b6:52:
f8:aa:86:6b:71:37:2e:99:d5:46:06:30:35:ed:b3:
47:44:1b:1f:a0:08:f5:32:11:48:07:15:38:78:be:
44:26:f6:a0:c5:89:6d:68:a1:33:30:f7:2c:c2:de:
b9:d9:ff:3c:c2:b2:34:cb:07:4a:50:2c:c3:e2:c5:
54:7b:ed:df:14:c5:7f:eb:c6:b1:5a:12:55:54:36:
fa:d8:5d:bf:25:17:ae:24:82:e6:62:d3:ba:95:a0:
99:04:48:bb:ae:a6:24:55:91:bb:89:e5:3a:2a:2d:
9d:19:7b:32:45:94:c1:b0:a7:11:fa:df:44:d9:65:
ae:24:1f:ca:e5:ed:3a:46:12:ee:0c:9b:e0:36:fe:
49:13:62:26:80:19:71:6c:fb:0b:d8:d2:65:4e:88:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:16:D6:F1:1C:EF:68:90:36:89:F2:1A:CB:BF:4C:0D:DF:5B:37:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8a:21:63:fa:8b:06:9c:75:00:6d:f5:94:93:a1:84:47:94:
59:7c:f5:d2:09:8c:da:a1:75:7e:be:c9:5d:ea:52:29:b4:4c:
ab:9c:b5:43:5f:8d:dd:28:4c:9f:03:c8:4e:5c:e6:86:fa:05:
a8:bc:ed:0f:49:6b:12:8c:bd:42:31:73:3b:14:79:38:0b:e7:
74:50:aa:93:d2:80:1d:1c:d9:2b:58:02:a0:95:41:93:24:df:
81:cf:83:21:c5:3e:1a:68:95:e9:bb:f2:42:7e:29:b2:9f:c8:
44:d9:a1:d4:9f:79:ae:8f:55:9e:46:1b:bc:8b:3e:ab:13:d0:
67:96:5e:a4:9a:54:6f:b2:00:c8:3b:7a:3c:4b:2e:c1:19:34:
72:a3:34:47:fb:e4:b2:b3:29:fa:ca:0f:10:76:f7:b7:29:b9:
e8:a0:1b:b3:fe:22:11:93:59:ff:fe:49:3c:2d:9c:ae:cb:a9:
c9:cb:5f:1c:7f:4b:81:cb:43:28:25:ac:92:85:c0:16:06:08:
cf:d9:99:19:e1:36:5f:c6:b7:9c:c0:cf:b9:85:00:69:3f:40:
33:0a:2f:22:49:e1:0a:73:f6:b3:17:ef:b6:66:44:b8:93:f5:
af:c6:42:fd:ce:ae:1e:ac:5c:d7:8d:71:dd:1d:47:ea:68:51:
39:45:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:55 2025 by rpki-client