Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232342e302f32322d3234203d3e20343030333034.roa
File: 3134352e37392e3232342e302f32322d3234203d3e20343030333034.roa (raw, json)
Hash identifier: 8yeqLNaP0NKy85deANFAybOXaYHnFF7SEIdovcTf9lk=
Subject key identifier: 5E:F4:DD:44:E4:F9:AC:C5:CE:B2:9C:83:E5:3B:14:14:7F:DD:B4:D2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B141138225A970D82CF02C8398BDFC3E5CB1F45
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232342e302f32322d3234203d3e20343030333034.roa
Signing time: Sat 23 Aug 2025 07:41:21 +0000
ROA not before: Sat 23 Aug 2025 07:36:21 +0000
ROA not after: Sat 22 Aug 2026 07:41:21 +0000
asID: 400304
IP address blocks: 145.79.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:14:11:38:22:5a:97:0d:82:cf:02:c8:39:8b:df:c3:e5:cb:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 23 07:36:21 2025 GMT
Not After : Aug 22 07:41:21 2026 GMT
Subject: CN=5EF4DD44E4F9ACC5CEB29C83E53B14147FDDB4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:2b:e9:32:0c:68:0f:f5:6f:69:ae:52:69:
f4:3b:77:1a:da:1a:88:bb:67:c1:aa:a4:ff:e7:d8:
cb:96:e7:56:d3:f4:a7:ce:e9:8f:60:62:be:54:08:
bb:be:c9:22:f2:a5:48:f5:52:d8:8e:6d:c9:9c:23:
b6:17:d7:32:19:0b:bb:5d:14:83:dc:c7:78:95:25:
1c:30:18:66:74:09:4e:b3:44:8f:b0:9e:f1:63:7e:
5e:50:96:2c:f1:86:2f:3d:f7:88:3f:37:c0:8a:1e:
d5:21:44:25:c2:b1:c0:39:aa:ed:12:3e:ef:76:ca:
f3:df:15:05:f1:c7:39:7f:fb:11:d0:69:2e:0b:42:
12:0a:eb:5f:be:c4:c6:34:5f:ab:56:9c:74:33:07:
5c:22:3a:d1:f4:ab:4e:ec:b3:ea:bd:8b:df:2c:60:
21:dc:a7:45:df:c6:8c:e7:ce:76:52:b3:fc:eb:4c:
39:c0:59:35:58:81:0f:e3:46:08:be:75:47:f7:6b:
3c:c5:59:c6:1e:ce:bc:e5:32:61:f7:29:b9:3c:1d:
84:87:e0:01:d6:fd:61:0e:4b:16:7c:71:a1:5a:b1:
33:6a:f1:bf:30:63:0a:48:a7:13:8f:c0:4f:6f:b0:
3d:9f:45:1d:e5:8a:a0:02:94:64:b4:18:7a:ca:b1:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:DD:44:E4:F9:AC:C5:CE:B2:9C:83:E5:3B:14:14:7F:DD:B4:D2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232342e302f32322d3234203d3e20343030333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.224.0/22
Signature Algorithm: sha256WithRSAEncryption
35:6d:d7:4e:61:ed:a1:96:f2:1a:67:23:bd:31:fd:fa:19:5d:
a1:39:d3:d4:91:f6:ea:23:a8:2e:42:c0:ed:bd:5f:b9:70:e7:
77:ab:e1:07:b2:f4:6f:23:89:f8:b5:fd:0e:67:fb:42:66:95:
df:fa:a9:2b:3c:a6:09:ff:2e:45:27:d8:7d:1a:95:aa:3e:df:
74:3e:3b:cf:48:d7:17:55:38:fc:de:ed:0e:c9:7c:67:40:75:
05:06:b7:5d:61:10:b1:ad:02:41:d5:e2:1a:7d:28:04:79:0d:
c4:d3:e2:57:f2:90:5e:bd:93:ae:b8:6b:93:a6:cf:56:3d:59:
a1:20:2f:37:f7:6a:50:59:c9:37:ff:d0:ac:cf:f0:b6:26:9e:
a2:fb:9d:50:b7:bc:f8:fd:c2:5e:f0:8e:17:56:3d:19:86:0e:
5e:6c:fa:fd:6c:6a:09:db:b2:45:ab:9e:cd:fa:7e:3b:e5:bd:
a3:fd:2c:85:b1:80:0c:f0:18:ad:5c:7d:e8:d6:eb:e2:43:2f:
58:41:2a:4d:cb:2e:5d:d5:57:84:50:f9:38:b7:9c:fb:8b:71:
4f:b7:1c:ab:7b:d2:ae:62:a1:d9:18:b3:a5:df:a1:72:c1:49:
46:d5:d1:93:81:83:f1:d3:8a:88:3e:ce:15:f2:09:81:59:c2:
cd:f8:5f:00
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUSxQROCJalw2CzwLIOYvfw+XLH0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjMwNzM2MjFaFw0yNjA4MjIwNzQxMjFaMDMxMTAvBgNV
BAMTKDVFRjRERDQ0RTRGOUFDQzVDRUIyOUM4M0U1M0IxNDE0N0ZEREI0RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFCvpMgxoD/Vvaa5SafQ7dxra
Goi7Z8GqpP/n2MuW51bT9KfO6Y9gYr5UCLu+ySLypUj1UtiObcmcI7YX1zIZC7td
FIPcx3iVJRwwGGZ0CU6zRI+wnvFjfl5Qlizxhi8994g/N8CKHtUhRCXCscA5qu0S
Pu92yvPfFQXxxzl/+xHQaS4LQhIK61++xMY0X6tWnHQzB1wiOtH0q07ss+q9i98s
YCHcp0XfxoznznZSs/zrTDnAWTVYgQ/jRgi+dUf3azzFWcYezrzlMmH3Kbk8HYSH
4AHW/WEOSxZ8caFasTNq8b8wYwpIpxOPwE9vsD2fRR3liqAClGS0GHrKsRr1AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUXvTdROT5rMXOspyD5TsUFH/dtNIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMjMy
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDMwMzAzMzMwMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKRT+AwDQYJKoZIhvcNAQELBQADggEBADVt105h7aGW8hpnI70x/foZXaE509SR
9uojqC5CwO29X7lw53er4Qey9G8jifi1/Q5n+0Jmld/6qSs8pgn/LkUn2H0alao+
33Q+O89I1xdVOPze7Q7JfGdAdQUGt11hELGtAkHV4hp9KAR5DcTT4lfykF69k664
a5Omz1Y9WaEgLzf3alBZyTf/0KzP8LYmnqL7nVC3vPj9wl7wjhdWPRmGDl5s+v1s
agnbskWrns36fjvlvaP9LIWxgAzwGK1cfejW6+JDL1hBKk3LLl3VV4RQ+Ti3nPuL
cU+3HKt70q5iodkYs6XfoXLBSUbV0ZOBg/HTiog+zhXyCYFZws34XwA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:41 2025 by rpki-client