Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: aI0rRcR5wv+8OaRgf8B1rDjHOremQVMtWqRc83T1H2g=
Subject key identifier: D8:5E:BD:1D:A0:A1:68:BF:4B:C7:F6:48:63:16:07:A1:E9:7F:E9:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 73071B5C71291E71CD0D373748587EEF4D1FF2FE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e2032393134.roa
Signing time: Tue 14 Oct 2025 06:57:27 +0000
ROA not before: Tue 14 Oct 2025 06:52:27 +0000
ROA not after: Tue 13 Oct 2026 06:57:27 +0000
asID: 2914
IP address blocks: 145.79.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:07:1b:5c:71:29:1e:71:cd:0d:37:37:48:58:7e:ef:4d:1f:f2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 14 06:52:27 2025 GMT
Not After : Oct 13 06:57:27 2026 GMT
Subject: CN=D85EBD1DA0A168BF4BC7F648631607A1E97FE924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:f1:fb:67:22:12:f4:a6:70:e0:0d:14:b3:
e5:81:0c:1e:8e:7d:36:74:dc:2d:7b:45:af:be:1f:
1c:9b:58:bc:4e:eb:bd:d2:c0:94:02:98:3d:6f:74:
f3:70:de:ec:bb:c6:39:ef:af:da:ad:c6:fb:ae:37:
d4:5e:ec:05:32:14:8b:6f:82:f6:52:d2:d9:d3:2d:
2c:58:f0:75:31:1c:33:39:08:b8:fa:40:03:72:13:
26:1c:14:40:b6:d3:90:f9:b1:9a:ec:76:cd:62:80:
1e:29:b2:28:50:48:63:73:01:be:60:93:52:54:b8:
0c:86:73:c5:90:23:9a:52:0e:00:59:f5:e6:30:5d:
e9:f0:f8:67:ef:b3:f3:58:9c:e3:53:94:48:96:56:
85:91:dd:0e:c2:ae:94:d6:9a:ae:33:7f:24:a8:ab:
3d:5f:06:f2:14:bf:8b:22:cd:76:e9:4f:53:4f:ac:
3d:f5:5c:f8:80:e2:c8:cd:e4:d3:db:97:f1:a7:55:
76:e8:0c:fd:72:84:95:6e:b0:fa:4e:13:c6:3d:8d:
a5:f7:91:cc:ca:62:01:68:0d:59:54:54:82:8d:9d:
95:1f:af:ae:7c:97:61:58:27:f4:df:2d:be:a3:43:
bf:2b:5b:0a:a0:e4:10:19:57:13:29:d4:99:6b:57:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5E:BD:1D:A0:A1:68:BF:4B:C7:F6:48:63:16:07:A1:E9:7F:E9:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.84.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e9:0d:fd:41:a5:fe:d6:4f:33:f0:8a:65:9c:27:75:07:cc:
ce:fd:f7:8c:b6:db:df:ab:51:52:29:18:1c:c4:93:f4:7d:7f:
93:f2:dc:7a:93:7e:75:a1:ca:c4:80:e7:d7:3c:a6:cc:66:3a:
89:dc:5d:39:7c:d4:5d:24:41:65:9c:ee:8a:e2:96:4a:63:c1:
6f:70:cd:a5:eb:84:cf:3a:9c:ca:30:b6:42:b7:db:a5:6c:67:
c3:05:4f:46:88:98:6d:61:6e:de:15:17:61:fe:96:fb:2d:d4:
f6:97:6c:33:71:ed:2a:c6:a9:37:5c:2f:7c:08:c4:52:e5:b3:
22:a9:78:32:22:62:e1:7a:2d:9e:c2:05:c9:12:f8:73:9b:71:
27:bd:bd:f1:53:bb:cf:c6:1f:4b:e4:c4:e3:55:85:10:81:b4:
e4:40:0f:93:ba:62:fb:d0:8b:c9:54:85:e1:09:d3:67:e2:bf:
06:5c:dd:4d:81:18:e6:74:db:98:f1:8d:b3:c8:7e:77:a2:bf:
cf:97:9c:25:9d:1b:30:57:bd:a9:a1:ca:3c:e4:7f:02:16:19:
0f:54:e7:ed:0d:ce:d4:83:3d:5a:fc:2f:79:45:72:a7:80:39:
92:d8:79:b0:32:18:61:bf:78:96:40:01:72:fa:c5:9e:62:10:
49:d0:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:17 2025 by rpki-client