Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3132362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 3s5i61vXO4hsDHQg2Nk/KBjUlPsN5hpSh9wLvURLasA=
Subject key identifier: 09:62:52:1D:13:6C:05:DA:79:86:21:46:42:26:ED:BB:D2:24:FE:B9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F513FAEB611C0E29A636CB95BBBF817F4F6F999
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132362e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:01 +0000
ROA not before: Thu 21 Aug 2025 06:34:01 +0000
ROA not after: Thu 20 Aug 2026 06:39:01 +0000
asID: 2914
IP address blocks: 145.79.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:51:3f:ae:b6:11:c0:e2:9a:63:6c:b9:5b:bb:f8:17:f4:f6:f9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:01 2025 GMT
Not After : Aug 20 06:39:01 2026 GMT
Subject: CN=0962521D136C05DA798621464226EDBBD224FEB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:76:3d:33:fd:96:0e:4c:18:41:00:40:8b:
3d:b7:21:43:b1:ac:b6:63:00:ea:02:1a:15:d9:dc:
ef:91:bc:1d:84:5c:c0:47:ef:e0:f5:19:26:1e:0a:
4d:7a:81:d5:bc:66:90:6c:b1:f0:d4:e1:4a:29:01:
38:33:d4:9b:78:a6:be:ca:62:06:48:f5:23:c1:68:
53:32:1f:8d:cb:3b:de:a7:56:57:48:48:dc:44:43:
fc:1e:8e:ab:c7:af:95:5b:ec:2c:ec:c1:a0:a6:fe:
d8:02:4e:02:f4:ce:42:17:d9:d8:0b:22:06:d2:4b:
7e:bc:46:9d:88:63:e9:df:d2:c4:1d:a8:c9:94:cc:
aa:bf:f8:84:46:ce:c6:2c:28:d9:76:22:6b:d7:27:
3b:bb:0e:24:04:be:89:e4:41:ef:c0:27:c7:b0:79:
a5:c7:d5:ce:20:33:b0:31:de:6b:42:df:ba:73:de:
82:29:8f:08:f1:bb:9b:52:be:31:0a:fe:25:3f:26:
c4:69:d0:84:db:e7:ae:32:ea:76:49:d3:db:2c:7b:
38:58:78:c2:74:93:48:c0:e9:30:ba:6e:42:34:bf:
e2:0f:26:36:7c:6f:4b:c8:f2:2d:28:c8:cf:48:8b:
c8:04:b2:90:a4:40:73:e3:06:e0:c3:e5:05:e2:10:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:62:52:1D:13:6C:05:DA:79:86:21:46:42:26:ED:BB:D2:24:FE:B9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.126.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a2:c0:c4:44:01:d6:a6:2d:40:01:71:52:24:04:60:de:61:
5b:62:45:26:12:34:7d:31:03:a7:6c:1a:a0:a1:33:78:e6:30:
87:1e:db:01:a3:8b:62:20:95:d6:3f:d4:5f:f8:4a:1a:f9:fd:
a1:94:cf:ed:d0:97:41:28:5e:c4:89:a4:12:dc:57:49:da:75:
26:91:99:a1:88:4b:42:45:dc:4b:48:95:82:05:65:35:e1:5e:
c4:cf:59:ff:36:0b:c6:07:5d:a2:42:d3:76:4f:20:49:24:f5:
b7:a2:7b:d0:53:b1:1f:72:d2:d3:d6:c2:0e:5d:3d:93:60:2e:
fc:a4:fe:d7:63:7f:2b:3b:22:28:27:f8:9d:39:dd:9c:7c:98:
e2:fb:d0:11:b5:75:65:a6:12:cf:62:f0:58:7d:3f:ca:a8:01:
89:49:ec:7c:c4:ab:f3:dc:72:0d:b3:3d:f3:46:f0:e6:60:b9:
f7:b9:de:28:e6:38:49:a4:4c:e0:d3:3e:36:6b:90:23:e4:12:
e5:ed:8c:f4:dc:96:85:62:66:77:3c:9c:92:49:69:92:3f:ce:
12:30:00:ac:2f:0a:f9:ee:01:f8:c5:61:8b:91:61:23:83:0d:
45:35:09:3f:e3:9f:6a:18:db:e8:23:f8:4b:83:aa:56:03:86:
4f:06:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:12 2025 by rpki-client