Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38322e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: jVKJudRej3b9PTnj4a3FxSvOnv72/lpWJ0S1p64e3+0=
Subject key identifier: D5:9F:98:71:93:93:3F:98:77:53:42:A9:0F:88:DE:6B:38:4D:15:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1363B19820255E2741B0702D5F8437FD8E4E4D97
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38322e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:22 +0000
ROA not before: Thu 21 Aug 2025 06:34:22 +0000
ROA not after: Thu 20 Aug 2026 06:39:22 +0000
asID: 2914
IP address blocks: 145.79.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:63:b1:98:20:25:5e:27:41:b0:70:2d:5f:84:37:fd:8e:4e:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:22 2025 GMT
Not After : Aug 20 06:39:22 2026 GMT
Subject: CN=D59F987193933F98775342A90F88DE6B384D153F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:46:c4:b9:30:e9:26:53:b2:1b:c3:d8:86:
8f:bf:25:db:90:3f:d1:27:9d:f3:23:1f:e5:ee:05:
08:8d:64:fb:bb:62:2f:44:c5:5f:df:ff:e0:c4:d7:
ce:0c:4c:18:42:f8:75:03:14:ad:33:43:5f:b7:68:
65:ef:b2:3a:40:b4:bd:a2:0b:59:93:85:ba:87:50:
28:fe:b1:a8:15:23:c2:c3:7b:c3:52:14:d9:af:26:
56:52:dd:ee:dd:cb:78:af:2f:ac:92:ca:94:5d:8e:
e6:63:0d:e5:98:90:11:68:d4:0e:d8:70:c5:15:59:
38:a9:c3:7f:1d:13:cb:99:60:0c:ef:a2:bf:93:6f:
d5:1f:47:04:83:25:7a:f6:9c:8a:da:19:fb:c9:e9:
1c:96:64:f4:29:7a:71:f1:5b:a8:7c:6f:3f:4e:d5:
da:16:5f:db:ff:4b:62:e2:dc:e5:b9:0a:b1:c5:ea:
96:48:ea:ed:e8:32:1a:83:7b:a0:5c:1a:02:d5:cb:
3d:8a:bf:31:67:4a:2f:b6:d8:71:7b:32:f6:30:88:
a4:02:9c:ea:c1:5f:f7:b5:04:89:3b:e7:8c:6d:7d:
62:18:69:02:c5:70:ed:28:83:08:f7:69:62:10:4b:
b4:4f:45:53:b2:3e:54:f0:86:54:f4:ac:c6:a8:10:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:98:71:93:93:3F:98:77:53:42:A9:0F:88:DE:6B:38:4D:15:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.82.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8a:a2:60:7c:2c:ef:ed:2a:65:c6:a3:12:9d:58:4e:67:34:
c7:d0:44:18:86:12:1b:c0:57:e0:e2:4b:02:b6:62:04:46:8b:
5c:a3:29:a5:0f:00:65:b5:d7:dc:3c:87:71:0e:a8:cd:6a:9d:
67:f9:58:e0:7d:1c:8f:d0:81:e1:d3:3f:c1:76:3a:a5:07:68:
cc:8c:95:e3:7e:11:df:b3:7e:f1:a4:72:1a:04:81:d4:aa:1f:
da:f0:7c:14:31:3c:d6:8d:ed:d6:0f:27:04:1c:3f:07:e4:9e:
de:fa:9e:6a:88:c2:53:a7:bb:ed:e0:6a:a2:0d:8b:c0:eb:0c:
83:58:85:4b:f8:45:1f:d3:a6:d0:03:84:0a:41:15:c9:2c:24:
84:75:66:af:52:8d:9d:73:99:e7:cf:46:95:f3:f7:bd:24:69:
3e:e0:7b:c1:d0:28:b5:50:8f:ef:6a:bf:e3:c3:eb:7f:c5:85:
41:d1:ee:90:e9:cd:be:38:9e:6b:1c:e3:65:39:bc:45:4c:cb:
0b:85:a0:66:9d:dd:62:df:3b:4d:33:bc:89:97:f7:0c:0a:bd:
cf:49:21:9a:9a:8a:68:b1:5d:79:bd:fc:5f:ef:fc:2b:7f:65:
a5:c4:9d:79:75:7a:d3:fb:36:0f:1d:86:b2:78:87:75:57:21:
31:99:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:56 2025 by rpki-client