Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0z+NyAUXJ7W0g53l7w815RqHDMtE/3Xevjx4NzJpI6M=
Subject key identifier: 60:10:80:FC:07:8D:6D:93:27:8D:E1:D5:40:5A:16:92:A0:1D:D4:8E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F48463FDA20A69674E0E42110BE1850F74CFE5B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 06 Oct 2025 13:02:30 +0000
ROA not before: Mon 06 Oct 2025 12:57:30 +0000
ROA not after: Mon 05 Oct 2026 13:02:30 +0000
asID: 136787
IP address blocks: 145.79.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:48:46:3f:da:20:a6:96:74:e0:e4:21:10:be:18:50:f7:4c:fe:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 12:57:30 2025 GMT
Not After : Oct 5 13:02:30 2026 GMT
Subject: CN=601080FC078D6D93278DE1D5405A1692A01DD48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:e6:f1:ac:02:14:63:2d:27:b7:cc:19:05:
fd:68:e5:db:1a:32:c4:82:ef:17:15:21:56:b6:4a:
7d:4f:cc:a2:8c:8a:f2:07:3d:09:86:15:6e:a2:75:
df:0b:a9:f8:7e:e9:c7:38:80:5d:00:01:4d:8a:3d:
44:78:51:b1:27:fe:79:f7:28:a6:fc:4d:31:18:87:
7d:a4:a3:df:80:71:15:a7:1b:18:69:9c:5a:6e:5c:
fe:de:f4:3c:2e:e1:37:89:36:7e:f5:8e:7f:15:10:
a7:73:95:3d:76:43:fd:81:c7:3e:11:ba:53:4e:85:
d9:86:fa:ef:70:ec:d3:e1:0e:aa:13:8f:f3:f9:29:
04:ab:69:bb:66:2d:c7:ac:14:6e:62:14:18:aa:c2:
d6:ec:db:f4:bb:e3:44:09:f4:ba:10:be:a5:77:33:
a5:c7:5e:d6:59:65:92:39:65:b1:81:73:95:89:1e:
43:9b:d7:82:10:19:b2:bb:7b:7d:7c:90:d9:d7:69:
84:50:4c:6b:20:6a:5a:41:af:ab:50:c1:84:5c:45:
e9:67:9d:3b:64:c3:30:61:aa:ff:cf:16:e0:7b:51:
55:ac:7b:07:a7:f0:de:9e:95:96:f4:d6:9b:91:87:
eb:da:45:b7:30:c9:e0:ab:6d:9b:e2:76:0a:ec:34:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:80:FC:07:8D:6D:93:27:8D:E1:D5:40:5A:16:92:A0:1D:D4:8E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7b:9b:ae:e5:e6:e5:14:42:ba:a6:29:0e:4e:ac:99:4b:d3:
0c:91:f0:5c:99:db:e0:b7:94:ab:e3:92:95:c0:2b:7e:8b:0a:
d7:73:54:89:9e:7e:f6:44:9a:7d:22:d2:bd:3c:9f:47:47:c9:
8b:34:9f:1f:cf:a5:89:87:d7:b6:23:0f:94:5f:46:64:3f:cf:
ac:54:da:8e:4b:18:30:73:0e:7a:1c:09:57:2a:60:8c:f9:b4:
e9:5f:b4:4f:46:d3:75:bd:77:ff:17:e5:4e:30:10:b8:26:b9:
cd:20:a0:df:19:c7:31:f7:84:07:f2:93:1f:8c:a4:15:1a:1d:
fa:43:0f:ce:b2:81:8d:c8:68:59:e7:99:21:b8:84:6b:e9:1e:
2e:80:94:25:1d:87:fb:2c:c9:9d:b0:17:1e:1b:34:59:82:cd:
ca:15:b7:5a:de:7b:a0:06:48:7b:6b:ee:9a:23:a6:50:c2:21:
7b:aa:4b:ab:57:a2:1e:92:a0:46:98:f8:70:b8:e0:01:f6:2d:
bd:87:a5:77:90:08:1c:77:e7:7b:8b:c9:60:4e:ef:eb:24:8d:
03:fa:a8:00:a0:d9:90:60:fc:fc:ae:35:52:32:3e:e3:25:61:
26:ce:78:60:00:6e:d4:a0:cd:e6:02:e4:7e:92:6d:06:78:4c:
5a:9a:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:03 2025 by rpki-client