Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203133333437.roa
File: 3134352e37392e34342e302f32322d3234203d3e203133333437.roa (raw, json)
Hash identifier: tFN6jrdfOOvwrSTu5WM0uFlzhwddCecZxuEHV/0GE7E=
Subject key identifier: 25:81:F8:7C:22:92:33:CF:F0:CA:D4:3B:A0:CF:DC:C7:D8:EB:45:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 24E27C0ACB549B11A6A13B68CD9D895957F4C947
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203133333437.roa
Signing time: Wed 25 Jun 2025 18:11:22 +0000
ROA not before: Wed 25 Jun 2025 18:06:22 +0000
ROA not after: Wed 24 Jun 2026 18:11:22 +0000
asID: 13347
IP address blocks: 145.79.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e2:7c:0a:cb:54:9b:11:a6:a1:3b:68:cd:9d:89:59:57:f4:c9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 25 18:06:22 2025 GMT
Not After : Jun 24 18:11:22 2026 GMT
Subject: CN=2581F87C229233CFF0CAD43BA0CFDCC7D8EB45FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:01:bd:c4:12:7c:e5:38:ae:ac:bc:1b:f5:
3a:da:33:0a:72:a4:49:aa:65:a8:45:a8:bb:df:fb:
a0:76:e1:04:52:6a:3b:2f:9f:e7:b5:e5:d1:0f:29:
bf:a2:76:a0:c6:de:44:13:4f:65:98:86:71:d6:ba:
b7:e2:d0:99:27:1b:9f:ae:72:e1:ba:9f:1c:39:a6:
f3:b7:a6:c9:ef:05:fb:55:c7:74:d0:f2:b3:61:f4:
30:7a:23:66:f7:80:64:38:f8:6a:84:8d:18:4c:b6:
94:45:4a:bc:f8:b0:b2:8e:55:3d:10:e2:a1:73:1d:
a3:20:9e:e9:d8:3b:c8:53:70:f6:43:41:50:e1:c1:
64:83:d9:8e:4c:91:72:ae:9b:39:4d:ef:5e:9b:6e:
83:c8:2d:b9:fd:86:b7:35:eb:b8:57:e6:61:05:5e:
cb:7d:57:f0:51:65:d4:c0:4d:eb:68:20:19:11:7e:
98:a1:5e:d8:94:53:a4:e9:78:78:7a:60:4d:c3:76:
47:50:a2:65:fb:51:7c:09:f1:31:74:42:b7:ca:50:
88:26:b2:db:15:c0:57:ce:8f:9b:65:f7:61:4a:02:
43:5d:73:90:b5:50:82:76:62:bc:a8:59:4f:dc:19:
49:79:9c:de:c0:84:36:0d:d8:3b:3c:e5:f1:a1:8a:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:F8:7C:22:92:33:CF:F0:CA:D4:3B:A0:CF:DC:C7:D8:EB:45:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:fa:86:68:d6:94:bc:33:9d:75:37:d5:e0:6e:0f:9b:e6:9f:
ce:94:65:ba:a8:9c:f4:73:f4:65:58:7d:73:37:7c:94:8f:d3:
61:68:de:e4:b0:63:20:1b:5b:9c:1e:fc:5b:34:c1:f0:c8:0e:
d6:e7:4c:0d:a0:72:68:d8:f3:b3:36:59:2c:65:90:e2:85:bf:
d5:53:4d:3a:0e:99:20:83:da:e9:51:ea:35:7e:07:28:4c:c1:
f7:39:b3:ff:c6:ed:8c:cf:94:15:fa:82:3d:5f:20:ab:a3:44:
33:e7:15:6e:fa:4d:5e:e3:05:03:88:ad:41:d6:09:8b:8c:24:
0c:9f:86:de:af:0c:33:ae:3d:81:fc:80:4b:c0:3e:fb:83:4f:
dd:ce:72:f3:83:5f:a1:74:cd:f9:a3:c0:2a:e7:26:1a:29:92:
d1:5f:5a:37:39:cf:fd:fa:5e:63:a2:59:55:16:eb:92:73:86:
ca:7a:a2:f4:56:d6:fa:4e:37:4c:af:fa:89:9a:df:3a:b5:c9:
5b:0e:a5:53:2a:b1:ec:a2:30:26:e4:92:28:b1:e3:21:94:1c:
b9:23:c3:d5:87:fe:29:3d:ea:da:e8:5d:4c:b4:26:7a:fc:8a:
63:49:20:28:4d:e0:31:2e:4c:e0:1b:d1:57:58:3d:17:cf:0c:
24:9c:a9:fa
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJOJ8CstUmxGmoTtozZ2JWVf0yUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MjUxODA2MjJaFw0yNjA2MjQxODExMjJaMDMxMTAvBgNV
BAMTKDI1ODFGODdDMjI5MjMzQ0ZGMENBRDQzQkEwQ0ZEQ0M3RDhFQjQ1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rQG9xBJ85TiurLwb9TraMwpy
pEmqZahFqLvf+6B24QRSajsvn+e15dEPKb+idqDG3kQTT2WYhnHWurfi0JknG5+u
cuG6nxw5pvO3psnvBftVx3TQ8rNh9DB6I2b3gGQ4+GqEjRhMtpRFSrz4sLKOVT0Q
4qFzHaMgnunYO8hTcPZDQVDhwWSD2Y5MkXKumzlN716bboPILbn9hrc167hX5mEF
Xst9V/BRZdTATetoIBkRfpihXtiUU6TpeHh6YE3DdkdQomX7UXwJ8TF0QrfKUIgm
stsVwFfOj5tl92FKAkNdc5C1UIJ2YryoWU/cGUl5nN7AhDYN2Ds85fGhii6BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJYH4fCKSM8/wytQ7oM/cx9jrRf8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNDM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzMzMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApFP
LDANBgkqhkiG9w0BAQsFAAOCAQEAT/qGaNaUvDOddTfV4G4Pm+afzpRluqic9HP0
ZVh9czd8lI/TYWje5LBjIBtbnB78WzTB8MgO1udMDaByaNjzszZZLGWQ4oW/1VNN
Og6ZIIPa6VHqNX4HKEzB9zmz/8btjM+UFfqCPV8gq6NEM+cVbvpNXuMFA4itQdYJ
i4wkDJ+G3q8MM649gfyAS8A++4NP3c5y84NfoXTN+aPAKucmGimS0V9aNznP/fpe
Y6JZVRbrknOGynqi9FbW+k43TK/6iZrfOrXJWw6lUyqx7KIwJuSSKLHjIZQcuSPD
1Yf+KT3q2uhdTLQmevyKY0kgKE3gMS5M4BvRV1g9F88MJJyp+g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:23 2025 by rpki-client