Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: uHKHr2AXpAmE+c92sPFNybhKV3s9W7vchd8k0OvS+CI=
Subject key identifier: 49:9A:86:23:5C:D4:D3:41:6F:87:F8:A6:EE:4E:08:1A:D1:EC:5F:08
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52BC5C11EA8239210ACED1AE94AE0591D144D274
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:20 +0000
ROA not before: Thu 21 Aug 2025 06:34:20 +0000
ROA not after: Thu 20 Aug 2026 06:39:20 +0000
asID: 2914
IP address blocks: 145.79.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bc:5c:11:ea:82:39:21:0a:ce:d1:ae:94:ae:05:91:d1:44:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:20 2025 GMT
Not After : Aug 20 06:39:20 2026 GMT
Subject: CN=499A86235CD4D3416F87F8A6EE4E081AD1EC5F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:10:c0:76:3f:9a:09:16:fb:b5:91:be:f1:
30:e5:c7:99:0d:34:c6:48:b7:3b:42:76:07:94:04:
50:21:26:4a:44:9a:6b:6a:73:48:67:20:06:f2:6e:
f5:44:d5:61:37:84:35:ca:1a:36:b3:49:a7:91:ed:
31:c6:cf:bb:2b:87:27:69:a2:ca:fa:02:37:9c:56:
c9:6d:aa:c0:43:d5:88:db:d2:8c:be:06:29:e8:38:
ca:aa:86:27:10:5c:31:81:54:7d:53:d4:11:13:8b:
44:ec:06:ab:68:da:dd:46:36:d9:f2:81:49:b6:9f:
4d:d5:bd:c8:4a:20:5d:9f:34:9b:6b:9e:6a:e3:c7:
91:95:2e:1a:8c:83:16:fc:b8:b5:79:55:49:73:5a:
4d:6b:4f:41:1c:4a:83:10:b4:df:fa:3c:33:5c:21:
cc:cc:63:63:a6:6d:a6:36:04:52:b1:2b:c9:8c:95:
29:42:10:41:c4:fb:a1:20:56:5a:d5:c8:b4:fe:c9:
c4:c5:38:fb:45:4d:26:74:e6:cb:f2:de:3b:8d:11:
02:54:65:ec:a1:82:e4:28:07:11:85:4f:6d:5b:cc:
d7:93:67:3e:34:d3:c3:30:d1:a6:9c:96:d9:67:68:
e2:7d:1b:ff:d2:06:0c:1f:0f:50:59:a7:68:23:70:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9A:86:23:5C:D4:D3:41:6F:87:F8:A6:EE:4E:08:1A:D1:EC:5F:08
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8f:71:47:38:a4:1d:0c:85:b1:91:e8:27:7b:5f:50:9b:30:
8c:e5:fa:94:ff:be:3f:59:73:d7:3c:38:78:6b:9b:54:c9:29:
1d:15:96:c2:44:32:0c:ab:8f:39:a9:40:08:23:7c:d6:b4:f1:
5c:32:a6:0a:ea:fc:28:6c:5e:e3:1d:40:a5:1b:df:ae:4e:ee:
90:8d:96:e2:71:50:cb:b2:5e:55:3a:91:6e:3b:e9:ec:a2:ce:
61:63:fe:92:55:4c:f3:76:23:63:d7:7d:99:7b:00:99:92:05:
c6:f8:34:f4:7e:76:72:41:72:10:ed:c7:e7:a2:0d:51:e9:b3:
eb:50:75:74:63:4c:1b:e2:f9:90:6b:33:07:a5:db:2f:37:bf:
9f:1c:05:7f:41:20:6e:6a:72:b7:51:30:58:6d:a7:8c:fe:b2:
09:c8:97:57:87:92:08:e1:fb:05:ba:9e:39:13:f2:c6:67:f7:
2e:6f:e4:d5:6f:05:51:f9:9d:c8:11:7c:4a:52:60:84:6d:2e:
67:66:97:a8:b7:52:45:af:cc:0c:e2:85:78:52:8e:ed:dc:37:
72:3b:f1:16:1b:3e:5d:16:09:2d:63:da:eb:cb:04:7e:97:39:
49:43:42:84:03:19:55:f9:e2:12:2e:75:34:fc:b8:40:c2:92:
12:6a:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:56 2025 by rpki-client