Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135312e302f32342d3234203d3e20323035383836.roa
File: 3134352e37392e3135312e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: tOzifxWSSiN1mKORjyNbPi0DZyOZ7soIdOctz2dEihE=
Subject key identifier: 9D:A0:B4:1D:59:BA:C4:BC:23:CA:3E:3F:BE:0A:D3:82:05:E8:46:E6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 560DE26609CA7497ADA066C34904E78D6EE9FA1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135312e302f32342d3234203d3e20323035383836.roa
Signing time: Mon 29 Sep 2025 08:55:48 +0000
ROA not before: Mon 29 Sep 2025 08:50:48 +0000
ROA not after: Mon 28 Sep 2026 08:55:48 +0000
asID: 205886
IP address blocks: 145.79.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0d:e2:66:09:ca:74:97:ad:a0:66:c3:49:04:e7:8d:6e:e9:fa:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 29 08:50:48 2025 GMT
Not After : Sep 28 08:55:48 2026 GMT
Subject: CN=9DA0B41D59BAC4BC23CA3E3FBE0AD38205E846E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:37:52:08:96:9e:40:a0:50:8a:aa:09:ca:
d6:10:52:a8:8d:44:2b:c9:ed:8e:b0:a2:af:f6:37:
1b:ce:df:24:8a:29:13:9d:3b:5b:b4:07:3a:73:bc:
99:ee:d0:21:29:f4:f4:ec:b7:c8:45:f1:a7:15:d6:
d1:3b:cb:64:d9:ab:fe:ea:93:6a:31:63:27:ae:d0:
42:53:4b:bc:c0:ac:d4:d9:2b:93:40:e3:02:cb:b8:
2a:ad:44:8e:10:f2:61:60:1d:1d:08:74:95:3f:28:
04:b2:a0:ea:22:6b:ca:61:bc:3b:2a:56:8a:a7:95:
04:85:1d:53:51:94:42:be:34:0b:8e:8e:06:99:c4:
9f:c6:95:99:eb:e3:13:6a:1b:16:11:dd:19:ef:bc:
c0:18:91:48:03:d0:89:c8:b6:d4:45:30:f8:ca:51:
89:75:ca:cf:3b:9d:99:e2:4d:dd:a9:9c:d8:d9:fc:
a4:e7:9b:a4:8f:e6:29:24:b6:6c:15:7d:fb:e5:d0:
5a:bd:f7:74:69:e4:c5:06:16:74:83:a4:da:4d:9f:
33:18:75:3a:05:57:20:30:c9:90:72:50:e2:84:67:
9d:78:9a:cb:f4:c7:66:57:7a:9d:b3:ec:e7:04:6a:
0f:2f:a5:be:4e:f1:87:65:14:16:26:21:69:7f:b8:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:B4:1D:59:BA:C4:BC:23:CA:3E:3F:BE:0A:D3:82:05:E8:46:E6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135312e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.151.0/24
Signature Algorithm: sha256WithRSAEncryption
46:30:1b:56:fb:17:65:48:59:d7:d6:37:a9:07:cc:53:3e:95:
23:40:58:ef:66:ab:5b:e2:cb:78:8e:2e:59:53:c8:52:58:cb:
dd:da:20:42:98:c3:d9:6e:eb:59:6a:e8:8c:a7:17:18:44:5a:
7b:57:83:7f:34:ea:a9:37:9b:a3:c2:92:6a:05:b5:0b:cd:46:
05:03:56:6e:0d:f6:81:24:50:ca:87:c9:e5:3c:10:09:33:34:
9b:a7:ba:8d:ee:b2:b0:5c:19:75:85:6f:66:90:c6:75:8b:a5:
0a:2c:4e:10:49:6d:05:1f:36:ae:20:44:4d:e9:b3:6e:22:dc:
d1:77:62:80:95:8c:fd:f7:a9:31:db:78:48:c4:0f:8a:e8:b9:
96:e9:75:1e:83:49:ce:91:a5:04:14:8e:91:f8:f7:df:99:7e:
c0:1e:be:77:d1:c7:48:c2:b5:84:a6:ba:62:7a:48:af:6b:2e:
57:4b:fe:aa:04:73:63:27:1f:25:6c:84:90:5c:d8:53:8d:47:
9d:59:96:36:1b:c4:3a:26:5a:8b:79:b1:91:4f:f4:5e:ae:26:
62:20:67:39:e5:df:37:cf:10:3c:67:f3:a9:03:d7:46:c7:7b:
61:20:cf:95:39:22:2b:25:90:ba:85:87:77:f9:79:e9:28:16:
f6:49:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:22 2025 by rpki-client