Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34302e302f32322d3232203d3e2033323537.roa
File: 3134352e37392e34302e302f32322d3232203d3e2033323537.roa (raw, json)
Hash identifier: dfZNk4ORrahIu8lujDNIeYCxOElCHAjMvcgyrjhUDBA=
Subject key identifier: A3:F9:E0:15:26:2C:7E:6E:09:9C:1F:4F:D6:4E:1D:AA:9B:71:7A:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4402BDEBF50A8D90DF36214E1A015D06F3CB689C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34302e302f32322d3232203d3e2033323537.roa
Signing time: Fri 20 Jun 2025 10:31:22 +0000
ROA not before: Fri 20 Jun 2025 10:26:22 +0000
ROA not after: Fri 19 Jun 2026 10:31:22 +0000
asID: 3257
IP address blocks: 145.79.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:02:bd:eb:f5:0a:8d:90:df:36:21:4e:1a:01:5d:06:f3:cb:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 20 10:26:22 2025 GMT
Not After : Jun 19 10:31:22 2026 GMT
Subject: CN=A3F9E015262C7E6E099C1F4FD64E1DAA9B717AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:ca:01:42:b0:6d:46:7f:63:4f:88:a8:a2:
04:4e:e7:29:15:32:45:8c:97:11:c9:c4:d8:b2:88:
de:3d:e9:89:a2:1b:05:85:f6:82:3f:7c:2b:97:a2:
d9:86:a1:28:35:9a:92:56:c2:5d:d7:f9:b4:52:f6:
d2:95:50:7e:31:5b:33:b5:d9:ed:19:58:be:20:da:
5c:b3:46:26:21:f6:12:e0:94:ea:6d:50:59:fc:f0:
6b:a0:a2:2e:a8:ed:e4:73:ff:4f:db:07:14:19:3c:
06:64:15:b4:36:2f:fd:76:68:a9:d4:77:cc:40:11:
e3:0d:54:ee:44:52:a8:91:48:f8:54:7a:27:6f:dd:
49:ea:5b:e7:98:e2:73:f0:de:0b:46:cc:11:fe:4d:
80:c4:c7:a1:c3:d0:c5:72:3f:0d:55:76:d8:24:8f:
37:f6:c1:02:b9:1c:9f:1a:f8:77:76:47:a3:d3:a3:
77:52:c6:1c:da:6f:4f:1b:2b:4e:6f:a3:e7:0e:e9:
1d:4e:19:db:67:8c:1f:cb:19:33:9c:1b:c1:ee:b8:
dc:33:81:fc:78:6e:80:98:86:ac:32:5b:4d:1e:06:
2b:a9:e5:a7:83:90:52:3a:34:6d:f1:f4:e9:32:da:
51:c3:67:ec:a3:e6:10:a2:e2:8d:d0:6a:d8:c9:2d:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:E0:15:26:2C:7E:6E:09:9C:1F:4F:D6:4E:1D:AA:9B:71:7A:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34302e302f32322d3232203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.40.0/22
Signature Algorithm: sha256WithRSAEncryption
98:8f:0d:a3:ad:0d:0b:04:91:15:f5:d2:cc:dc:c9:dd:c3:c2:
49:15:55:08:dd:34:5e:ec:70:17:e3:70:16:e1:23:b0:98:59:
e0:a9:15:68:ca:35:08:79:83:68:93:84:90:b3:02:fe:28:87:
3a:e1:18:36:99:de:4e:07:6b:0e:da:5e:05:d6:03:f9:8e:7d:
22:1c:e2:88:f7:70:b9:e0:88:e1:d7:8d:f3:96:d8:0e:d8:b4:
0b:01:2e:22:f0:ed:1f:c7:79:da:a2:8f:7d:1d:93:0f:f7:3a:
39:60:4d:8e:2a:dd:92:e5:2c:09:65:c3:f9:4e:19:55:0d:7a:
32:8a:cf:97:da:5d:5f:92:e5:04:0f:9a:89:34:0b:d7:b0:30:
49:f0:0a:52:1c:ef:28:69:41:bf:65:ce:5d:d4:6f:67:6f:b1:
78:dc:71:67:dc:7c:d9:7c:c5:92:18:ab:fc:e9:89:c7:00:3e:
d5:35:e3:9a:31:7b:cb:3e:1c:e1:2f:23:35:2d:66:6b:71:27:
35:9b:51:42:99:ce:a4:7a:45:c1:45:10:39:61:61:e0:f4:04:
38:35:30:9e:47:30:37:f3:be:42:20:19:48:1f:d1:2d:c8:3b:
8f:aa:07:2e:28:ec:60:0c:a5:ce:ce:42:b4:cd:a5:82:e2:5d:
45:91:cb:d4
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURAK96/UKjZDfNiFOGgFdBvPLaJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjAxMDI2MjJaFw0yNjA2MTkxMDMxMjJaMDMxMTAvBgNV
BAMTKEEzRjlFMDE1MjYyQzdFNkUwOTlDMUY0RkQ2NEUxREFBOUI3MTdBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+soBQrBtRn9jT4ioogRO5ykV
MkWMlxHJxNiyiN496YmiGwWF9oI/fCuXotmGoSg1mpJWwl3X+bRS9tKVUH4xWzO1
2e0ZWL4g2lyzRiYh9hLglOptUFn88Gugoi6o7eRz/0/bBxQZPAZkFbQ2L/12aKnU
d8xAEeMNVO5EUqiRSPhUeidv3UnqW+eY4nPw3gtGzBH+TYDEx6HD0MVyPw1Vdtgk
jzf2wQK5HJ8a+Hd2R6PTo3dSxhzab08bK05vo+cO6R1OGdtnjB/LGTOcG8HuuNwz
gfx4boCYhqwyW00eBiup5aeDkFI6NG3x9Oky2lHDZ+yj5hCi4o3QatjJLUR5AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUo/ngFSYsfm4JnB9P1k4dqptxeuswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNDMw
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzMjM1Mzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKRTygw
DQYJKoZIhvcNAQELBQADggEBAJiPDaOtDQsEkRX10szcyd3DwkkVVQjdNF7scBfj
cBbhI7CYWeCpFWjKNQh5g2iThJCzAv4ohzrhGDaZ3k4Haw7aXgXWA/mOfSIc4oj3
cLngiOHXjfOW2A7YtAsBLiLw7R/Hedqij30dkw/3OjlgTY4q3ZLlLAllw/lOGVUN
ejKKz5faXV+S5QQPmok0C9ewMEnwClIc7yhpQb9lzl3Ub2dvsXjccWfcfNl8xZIY
q/zpiccAPtU145oxe8s+HOEvIzUtZmtxJzWbUUKZzqR6RcFFEDlhYeD0BDg1MJ5H
MDfzvkIgGUgf0S3IO4+qBy4o7GAMpc7OQrTNpYLiXUWRy9Q=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:09:20 2025 by rpki-client