Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32312d3231203d3e203230333236.roa
File: 3134352e37392e3137362e302f32312d3231203d3e203230333236.roa (raw, json)
Hash identifier: +5fWx0HVZYbjpih4M/rHtm5O8PHAXasgPrOxN5rTZcg=
Subject key identifier: 27:BB:77:38:85:8A:D6:EF:94:C2:3B:81:D8:54:B4:C2:36:12:68:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 375CF5660C3791726F1F1B723702866AFD5D51C3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32312d3231203d3e203230333236.roa
Signing time: Wed 06 Aug 2025 09:35:49 +0000
ROA not before: Wed 06 Aug 2025 09:30:49 +0000
ROA not after: Wed 05 Aug 2026 09:35:49 +0000
asID: 20326
IP address blocks: 145.79.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5c:f5:66:0c:37:91:72:6f:1f:1b:72:37:02:86:6a:fd:5d:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 09:30:49 2025 GMT
Not After : Aug 5 09:35:49 2026 GMT
Subject: CN=27BB7738858AD6EF94C23B81D854B4C236126891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:3a:66:04:b6:fc:2b:76:50:14:f8:5e:e3:
e6:54:15:ca:93:a0:d2:98:a2:04:6b:f6:30:44:df:
d3:7b:38:ff:d0:77:79:98:1d:4f:7a:94:1c:12:88:
2c:20:dd:ac:04:e8:1b:3c:4a:e1:21:a9:8d:11:2d:
0d:6d:83:1a:aa:56:ab:af:d8:e5:b3:90:40:de:af:
80:3b:41:df:05:66:7c:61:dc:d9:53:9f:5b:90:13:
9a:35:50:b0:17:d5:1d:2a:1c:c5:38:e7:95:09:bb:
ef:29:31:32:bb:13:dc:1f:81:26:a5:57:ae:05:93:
ae:d4:1c:a2:97:ec:0d:b9:37:8b:ac:78:3e:3b:0c:
2a:9c:29:33:f0:07:1f:82:b1:19:d7:8b:3d:06:96:
f4:a6:ae:20:2e:75:b2:ef:65:a3:f0:4d:fc:11:a3:
3b:0e:95:3c:a1:21:65:32:f6:41:22:5e:76:a8:0c:
28:f2:00:4d:b1:b3:b2:45:56:c2:c5:35:da:8d:d5:
6c:c7:65:05:7c:b9:48:7c:56:25:ed:50:a6:5c:98:
87:98:fe:20:cd:7e:09:66:f5:d4:80:ed:60:9d:58:
bb:1d:8e:b1:da:9b:89:14:81:0f:57:73:ba:e2:6f:
b3:cf:29:68:3b:15:fa:50:1d:ae:bf:51:3b:49:aa:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:77:38:85:8A:D6:EF:94:C2:3B:81:D8:54:B4:C2:36:12:68:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32312d3231203d3e203230333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:84:73:b5:65:4d:d9:a4:23:b1:ed:54:d8:47:fc:d9:28:09:
f3:1d:eb:31:ec:46:b5:86:10:66:3b:c6:77:25:30:f1:dd:dc:
9d:ba:34:8e:bd:33:2f:7a:78:7e:65:52:a6:27:bc:74:3a:c1:
91:1b:9b:9d:c5:cf:4c:df:8a:44:2a:93:5f:93:bf:66:e3:74:
fa:2e:d4:d9:99:7a:73:d7:ff:65:5f:a2:fe:cf:d5:10:ce:24:
ee:ee:13:fd:39:83:0c:73:10:a4:42:0a:46:4d:31:0a:21:79:
c5:ca:7b:3d:e6:6e:f5:07:6c:a1:14:df:db:19:80:85:4d:95:
ea:ad:b8:4f:fe:12:ab:51:5c:a0:cc:5a:a7:ab:b4:09:aa:00:
1a:22:d0:a9:ee:47:df:15:d6:6d:99:e8:8d:c2:76:ef:c8:77:
cb:a9:68:ae:48:15:6b:c1:6d:a7:4d:da:db:27:51:3c:de:64:
2d:5d:64:ef:c9:31:54:0b:dd:f5:35:17:99:ab:87:a1:e2:c0:
98:95:b8:9a:8e:53:6d:4a:43:d9:89:73:50:02:9e:ae:0c:37:
b7:27:6e:50:86:69:b4:db:7b:43:74:15:dc:14:ff:c6:9c:1c:
bc:2e:a2:55:8b:58:17:51:9e:83:f6:2e:46:97:8b:29:ef:4a:
44:e2:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:43 2025 by rpki-client