Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa
File: 3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa (raw, json)
Hash identifier: u4iBXwOc0JoNDyok+z4MUVhK7BLW9uBqAACmCyzuVTY=
Subject key identifier: 24:16:60:E1:A0:7B:0D:FE:95:23:5D:B9:E2:EB:AF:DB:13:65:3B:5D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1060E118753546661C504D8DAF5C97CE8505FFA8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa
Signing time: Wed 13 Aug 2025 12:08:52 +0000
ROA not before: Wed 13 Aug 2025 12:03:52 +0000
ROA not after: Wed 12 Aug 2026 12:08:52 +0000
asID: 399073
IP address blocks: 145.79.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:60:e1:18:75:35:46:66:1c:50:4d:8d:af:5c:97:ce:85:05:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 13 12:03:52 2025 GMT
Not After : Aug 12 12:08:52 2026 GMT
Subject: CN=241660E1A07B0DFE95235DB9E2EBAFDB13653B5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:84:c6:df:54:2f:58:76:da:bd:e7:b6:66:
58:49:09:b4:8d:6f:a9:80:96:34:fa:52:80:4b:48:
59:7d:40:c7:40:a7:f5:5e:aa:78:64:d4:03:a3:92:
bf:c8:f7:1b:4e:6d:bf:d8:21:31:58:3d:e1:f4:d7:
cd:fa:ed:01:9e:35:c6:1f:ac:c4:de:5b:39:45:36:
2c:eb:6e:9c:c4:9e:08:07:4d:4c:63:1a:c1:80:6b:
56:0d:41:b9:c3:d8:4b:02:48:a4:db:88:63:12:e3:
2f:e3:e4:86:fa:e8:4c:1d:95:2a:6e:f0:07:b2:42:
61:74:97:14:6c:fb:d0:d1:96:f0:00:1e:3c:a6:ef:
7e:84:0e:cb:b9:66:fb:66:ee:bf:5b:e0:69:30:41:
3a:7f:dd:d4:6b:c4:0e:b2:fd:64:46:e7:02:7d:6b:
c1:d8:9e:ca:62:2b:d0:53:21:30:b0:ba:03:82:03:
43:6c:4f:b1:40:e1:a5:7c:6c:58:37:02:09:2b:8a:
37:6d:f9:fe:db:e9:3f:c5:d7:3e:05:80:17:6c:7a:
cd:e6:cf:bc:79:01:59:d0:d4:80:9f:ba:a9:97:03:
ea:02:26:19:09:8a:a6:94:4c:22:cf:f2:cf:d6:cc:
a5:cb:6d:51:a2:15:f4:9a:cf:ab:a1:20:3c:eb:c6:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:60:E1:A0:7B:0D:FE:95:23:5D:B9:E2:EB:AF:DB:13:65:3B:5D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.165.0/24
Signature Algorithm: sha256WithRSAEncryption
67:de:cf:c5:77:83:16:0e:35:a4:13:a2:fc:62:5e:fc:d9:9a:
f8:72:db:9a:22:b0:ab:ab:65:d1:77:b1:fe:1e:f7:f4:eb:d8:
ea:eb:3b:74:92:e0:ea:23:ba:c9:6b:b6:82:9e:16:70:96:b1:
a5:b1:9b:70:59:30:d7:8d:d1:12:66:f9:7d:39:c4:dc:96:22:
52:c2:bb:d7:87:b6:a5:4e:21:33:bf:dd:db:5d:e7:f9:86:48:
f1:92:51:e2:2c:04:d0:43:a7:67:e4:0a:cb:30:ef:22:ac:7b:
d1:f1:fe:f2:19:f5:ec:93:a3:c9:16:e0:f6:61:ac:1e:28:d2:
5f:8c:79:cc:25:09:86:1a:c7:5c:23:1e:12:b4:3c:86:07:3b:
ca:1e:c9:ba:42:8a:f7:7f:37:9c:09:80:c6:5b:9b:b4:07:40:
12:c6:e4:02:2a:cf:3c:e1:ea:37:d9:13:5f:69:d0:38:45:da:
bc:79:4c:c9:db:b2:43:af:9a:0a:12:e5:e8:f8:d4:8d:89:1c:
f5:71:1b:d4:07:e5:f2:ae:ae:0f:a3:83:fe:e2:cd:f1:ae:0b:
4a:78:1a:6b:9e:d3:a8:35:9c:01:e9:ea:11:11:3c:f9:4e:46:
70:12:d3:52:c2:27:dd:8d:94:3f:20:9d:7d:b5:b8:ef:a8:47:
94:26:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:16 2025 by rpki-client