Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37302e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 4C6otYALtjWLHi4aU+YnwEXOjo50taxRN/aYTE7CbWM=
Subject key identifier: 49:14:AD:81:BD:47:8D:1F:5D:2B:EE:CB:61:59:5D:40:84:05:75:BB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20C01A9A0C3E861581E8956311A3BDCD2C845F45
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:25 +0000
ROA not before: Thu 21 Aug 2025 06:34:25 +0000
ROA not after: Thu 20 Aug 2026 06:39:25 +0000
asID: 2914
IP address blocks: 145.79.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c0:1a:9a:0c:3e:86:15:81:e8:95:63:11:a3:bd:cd:2c:84:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:25 2025 GMT
Not After : Aug 20 06:39:25 2026 GMT
Subject: CN=4914AD81BD478D1F5D2BEECB61595D40840575BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:a6:f9:8b:33:f3:c1:50:9d:8a:08:58:3d:
7f:a0:d1:17:d3:57:76:c2:91:5c:49:c5:0d:47:90:
42:c3:6e:e2:ef:fa:f2:d7:0b:ac:d4:bb:1c:29:4f:
30:12:b9:4e:53:c0:7c:6d:bc:48:89:72:59:56:bc:
23:0b:ef:0e:f7:60:a5:73:59:a6:bc:ba:0f:39:f3:
6a:a0:af:c5:38:8b:14:c2:98:50:b9:37:3c:ea:e0:
27:83:23:06:f0:93:4d:93:23:2b:73:6a:c6:bf:31:
31:86:2d:64:d7:76:dd:91:30:97:cc:e1:1a:5c:84:
f2:a1:89:70:87:4a:5a:c9:0e:94:18:13:d4:02:45:
01:c0:cd:d3:e1:94:f1:61:d8:bb:64:66:62:60:31:
53:e2:b9:98:53:da:e9:4b:98:9b:aa:a1:10:28:66:
2e:7e:8e:4c:ae:89:b8:f4:9e:c5:4a:f3:57:3b:f5:
9a:00:d0:eb:d6:ae:fb:4e:04:12:3c:39:78:89:c1:
96:10:53:0e:c7:3c:ae:7a:4f:e1:78:7c:7d:65:75:
9c:9a:fc:d6:31:f0:fd:b2:4e:84:18:3b:be:9e:ac:
54:ae:06:8d:c8:94:97:39:3f:68:40:17:81:ec:0f:
07:39:0b:89:dc:c5:4a:e3:bb:1f:e0:79:ef:af:ac:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:AD:81:BD:47:8D:1F:5D:2B:EE:CB:61:59:5D:40:84:05:75:BB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.70.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c2:ee:33:61:e2:6e:9e:31:f2:04:bf:8a:da:c5:6a:44:6f:
f1:d6:41:e5:39:6a:45:aa:c0:7e:fa:dc:ec:83:ca:91:bf:e1:
e0:56:44:f4:d4:2b:8b:2c:72:39:73:24:fb:2b:ea:d0:f6:7e:
7f:8a:2c:27:38:3b:53:98:f9:aa:74:c6:bf:06:0a:ba:fc:c6:
e0:a5:7f:09:b8:4a:83:87:82:cc:f3:5e:dd:ae:21:0b:8e:fc:
d4:1b:56:be:c7:7f:23:c1:53:50:7e:46:0f:b2:ce:c0:56:46:
ca:40:f3:1f:3b:dc:64:dd:60:80:f7:01:b3:b4:4e:2e:de:ee:
e2:84:cb:d0:6c:2b:e6:8f:5f:0c:98:70:75:1c:07:16:68:a8:
21:ca:d2:e6:9c:85:f8:b8:f0:95:71:65:36:36:26:77:3b:37:
26:46:af:8d:07:d6:a5:bb:49:5c:ef:86:34:83:25:11:70:3b:
a3:b4:02:e5:d2:77:84:55:02:17:2a:f1:14:38:e2:7b:f9:bb:
66:b7:38:7d:db:c0:19:08:d1:c7:a3:28:03:6b:01:51:75:fa:
33:d2:2a:10:d1:1d:c8:fa:29:cc:92:d9:27:ad:b9:dd:86:1e:
0a:c3:f3:aa:e2:2b:e2:b9:3f:f0:dd:75:7d:37:00:7e:70:32:
77:95:74:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:46:46 2025 by rpki-client