Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: T2xEYR8SkNsKs/2Hy1+ReqE1GjxcX1Cq0TYN5PSNV08=
Subject key identifier: 43:02:17:81:EC:56:E2:B4:E0:52:46:74:EC:32:39:AA:D7:2E:F5:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0580584C744BD7760BA433CBB853A0414B0264E6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:17 +0000
ROA not before: Thu 21 Aug 2025 06:34:17 +0000
ROA not after: Thu 20 Aug 2026 06:39:17 +0000
asID: 2914
IP address blocks: 145.79.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:80:58:4c:74:4b:d7:76:0b:a4:33:cb:b8:53:a0:41:4b:02:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:17 2025 GMT
Not After : Aug 20 06:39:17 2026 GMT
Subject: CN=43021781EC56E2B4E0524674EC3239AAD72EF5F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:b2:de:a5:be:ff:b3:15:3a:3b:67:15:62:
69:9c:f8:53:53:c8:84:cf:50:22:1c:1e:d9:f6:67:
5c:d5:91:a4:ac:b2:43:02:6b:50:4f:82:70:09:19:
fc:d7:84:48:74:ec:5a:ff:09:68:8b:e0:74:d6:fb:
bd:f2:20:49:62:e6:1f:f1:29:32:73:87:d1:77:05:
b6:f9:c4:9a:9d:f8:43:07:74:86:99:da:90:f4:21:
07:cd:02:3c:2b:3c:ba:4e:d6:c7:71:fa:09:78:a4:
32:94:93:b1:3d:be:3b:48:63:9d:6b:b5:4b:60:03:
60:c9:01:7d:1d:b3:52:59:da:08:b2:84:f4:d0:bb:
dc:0a:56:ea:c4:76:84:21:1a:f1:5a:0c:eb:d6:15:
77:0f:b5:2c:8c:8b:f0:82:e5:7d:28:68:b7:e8:b8:
3c:b4:6f:bd:8f:d2:9c:c8:f8:76:11:4d:9a:41:54:
16:ed:81:d4:0d:71:be:68:8a:66:9d:f5:f4:8d:0d:
80:de:9f:26:27:4e:a4:6b:09:aa:95:c4:c2:90:07:
b0:14:4e:48:d2:ab:ad:f1:13:b8:8f:4e:aa:8a:d2:
5b:11:99:73:11:6b:a6:ab:51:ef:4c:f1:be:da:41:
fa:1a:80:7b:2e:72:13:6c:4c:cf:60:d7:b2:e7:69:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:17:81:EC:56:E2:B4:E0:52:46:74:EC:32:39:AA:D7:2E:F5:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d3:45:79:ec:14:a0:1f:d3:d4:d6:b8:c3:71:2f:cb:8d:b1:
82:6b:8f:5f:b7:ab:aa:08:42:e1:ba:ea:42:0f:b0:56:3d:8a:
3c:5f:31:0b:a9:a7:98:93:9a:ba:6f:b8:cc:26:d5:e3:15:cf:
b0:dd:25:db:93:d6:d6:44:cd:16:e7:3c:85:c9:3d:99:4e:46:
79:a3:59:82:38:46:ab:dc:2a:2b:1d:19:01:40:66:3b:f9:18:
19:64:55:f6:35:ff:fb:52:1e:f5:4e:66:78:65:be:36:ba:48:
b4:8a:83:a8:63:98:e4:8d:f3:aa:e6:90:28:eb:22:2d:74:e7:
f7:2f:08:6d:38:d2:55:b2:53:f2:f9:fa:dd:66:ae:7a:25:88:
fc:c6:1c:be:02:ba:0f:d8:c6:8f:e5:e7:8e:77:11:2b:4a:9d:
ce:33:1d:76:18:a3:db:cf:65:ab:00:da:69:3d:b5:21:36:c9:
c4:78:30:ba:26:1e:e0:48:b9:7a:74:96:96:54:c1:a6:8e:38:
82:88:8b:d4:79:29:56:fa:22:7e:95:3b:42:84:5f:69:d9:b3:
af:ee:85:2d:c5:c8:c4:c5:bf:80:e0:79:63:de:2d:d4:9a:fd:
1a:de:fa:0b:69:ea:81:af:80:86:6f:50:92:33:7c:10:9a:6c:
8c:33:1d:2b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUBYBYTHRL13YLpDPLuFOgQUsCZOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjEwNjM0MTdaFw0yNjA4MjAwNjM5MTdaMDMxMTAvBgNV
BAMTKDQzMDIxNzgxRUM1NkUyQjRFMDUyNDY3NEVDMzIzOUFBRDcyRUY1RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kLLepb7/sxU6O2cVYmmc+FNT
yITPUCIcHtn2Z1zVkaSsskMCa1BPgnAJGfzXhEh07Fr/CWiL4HTW+73yIEli5h/x
KTJzh9F3Bbb5xJqd+EMHdIaZ2pD0IQfNAjwrPLpO1sdx+gl4pDKUk7E9vjtIY51r
tUtgA2DJAX0ds1JZ2giyhPTQu9wKVurEdoQhGvFaDOvWFXcPtSyMi/CC5X0oaLfo
uDy0b72P0pzI+HYRTZpBVBbtgdQNcb5oimad9fSNDYDenyYnTqRrCaqVxMKQB7AU
TkjSq63xE7iPTqqK0lsRmXMRa6arUe9M8b7aQfoagHsuchNsTM9g17LnaXwBAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUQwIXgexW4rTgUkZ07DI5qtcu9fMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzOTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT2Ew
DQYJKoZIhvcNAQELBQADggEBAFzTRXnsFKAf09TWuMNxL8uNsYJrj1+3q6oIQuG6
6kIPsFY9ijxfMQupp5iTmrpvuMwm1eMVz7DdJduT1tZEzRbnPIXJPZlORnmjWYI4
RqvcKisdGQFAZjv5GBlkVfY1//tSHvVOZnhlvja6SLSKg6hjmOSN86rmkCjrIi10
5/cvCG040lWyU/L5+t1mrnoliPzGHL4Cug/Yxo/l5453EStKnc4zHXYYo9vPZasA
2mk9tSE2ycR4MLomHuBIuXp0lpZUwaaOOIKIi9R5KVb6In6VO0KEX2nZs6/uhS3F
yMTFv4DgeWPeLdSa/Rre+gtp6oGvgIZvUJIzfBCabIwzHSs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:21 2025 by rpki-client