Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39352e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: dLGbsezzMtj6Jk6I1NDjR8/agXhugiaAPJFE87hpTbY=
Subject key identifier: E3:6D:47:B7:EA:1C:C8:2E:5D:0E:46:D2:F6:BC:F3:B9:DA:A8:00:92
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79A8F2982B904A0A1FD3F4D87F982707EFF24D54
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39352e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:18 +0000
ROA not before: Thu 21 Aug 2025 06:34:18 +0000
ROA not after: Thu 20 Aug 2026 06:39:18 +0000
asID: 2914
IP address blocks: 145.79.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a8:f2:98:2b:90:4a:0a:1f:d3:f4:d8:7f:98:27:07:ef:f2:4d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:18 2025 GMT
Not After : Aug 20 06:39:18 2026 GMT
Subject: CN=E36D47B7EA1CC82E5D0E46D2F6BCF3B9DAA80092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:a9:f0:4f:d3:97:59:20:64:9b:77:08:29:
ee:a2:64:9f:d8:8e:3b:8b:07:2c:65:48:fe:e8:8a:
c5:03:1b:88:1b:60:80:e7:7e:15:d6:1c:ee:75:4d:
71:79:b3:6a:6c:32:f0:1f:92:fc:2f:29:c8:a4:34:
f0:d8:bc:1d:bc:02:9d:71:ec:83:d8:0a:52:a7:8d:
3b:62:da:23:36:8d:a4:fc:7f:3b:20:f8:1f:83:9f:
ed:58:df:a9:da:22:4b:8b:ca:17:98:f6:20:10:ff:
51:2d:1f:4f:18:9e:bd:3b:fd:29:74:ad:4f:7a:b8:
d1:c0:f7:92:c7:61:cc:b8:81:7a:d6:8b:1c:2b:10:
ff:0c:be:7a:db:83:58:ab:69:b8:a0:e5:c4:f6:55:
e1:90:1d:32:77:97:43:21:14:e9:97:4e:06:1d:40:
ed:53:44:08:9e:c9:4f:65:ce:77:05:a9:66:c0:d2:
4a:36:f3:a5:61:5d:23:cc:2f:be:3d:09:45:e8:93:
ac:35:ca:29:47:2e:f0:06:36:c2:75:4b:a1:0d:ca:
69:5d:b0:5f:3a:54:91:4e:fd:72:ff:16:49:d6:a9:
3e:69:75:b3:62:2a:62:1d:91:32:13:24:56:1b:60:
c7:15:ba:a1:7f:41:6c:24:fa:ec:35:dd:7c:33:1a:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:47:B7:EA:1C:C8:2E:5D:0E:46:D2:F6:BC:F3:B9:DA:A8:00:92
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:29:79:4b:74:c2:b2:bb:ac:c4:fe:a4:eb:24:e0:c7:bb:53:
4d:b4:db:52:1e:8a:d5:85:a8:5c:31:e9:21:49:31:8a:d4:50:
61:1f:93:55:71:d4:1f:d5:13:c8:1e:1e:15:f0:a9:29:ba:bb:
2d:2c:d2:03:fd:3f:c7:b3:e7:fc:fe:9c:f3:29:97:19:43:bc:
eb:1a:cb:6b:28:57:21:1f:32:a2:70:93:6a:91:a1:5e:c9:31:
3f:1f:5b:a2:6e:46:1a:18:89:a7:40:f6:84:21:c6:fb:4f:e9:
37:51:66:62:43:fc:d8:1f:09:da:01:64:88:cb:bd:0a:cf:a4:
08:3c:3c:79:0a:50:11:30:cf:6a:7b:8a:49:21:a7:66:db:a4:
2d:6b:8d:a8:0b:c5:10:73:8f:05:f5:d9:05:1d:06:f4:86:cb:
1b:e5:38:bc:19:7d:ca:e9:4a:ff:bb:f8:d2:41:2b:07:27:a3:
25:8c:ec:20:a0:50:d5:8e:c3:53:57:31:96:0a:d3:b8:e5:39:
46:ae:d7:96:61:c5:26:b0:93:ca:e0:e9:91:4c:49:12:c8:78:
48:86:83:5e:02:5c:cb:a0:6d:85:0f:85:f6:d0:12:16:6f:de:
1f:86:56:e1:d9:f0:50:e9:21:1d:e2:72:bc:1a:03:8d:8d:60:
e0:f2:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:52 2025 by rpki-client