Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39392e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: f1mRTXa7tB6DQwfD3hAcbkt9BGVI8QTpW1SWYQ3Kw/4=
Subject key identifier: 43:05:E4:68:FB:8E:34:D7:44:81:A5:97:8E:30:12:AB:E9:2A:EC:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16317EEE6DECCC83E6C198485210CD48537E611D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39392e302f32342d3234203d3e2032393134.roa
Signing time: Thu 21 Aug 2025 06:39:16 +0000
ROA not before: Thu 21 Aug 2025 06:34:16 +0000
ROA not after: Thu 20 Aug 2026 06:39:16 +0000
asID: 2914
IP address blocks: 145.79.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:31:7e:ee:6d:ec:cc:83:e6:c1:98:48:52:10:cd:48:53:7e:61:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 21 06:34:16 2025 GMT
Not After : Aug 20 06:39:16 2026 GMT
Subject: CN=4305E468FB8E34D74481A5978E3012ABE92AEC47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:a5:25:29:5e:83:10:3b:72:7c:04:24:d6:
a0:82:cd:94:50:13:27:5f:8c:ee:fb:ee:f8:e4:75:
0b:34:67:c8:d2:55:54:f5:da:f5:c1:a2:8a:bf:0e:
ee:18:af:85:22:48:38:de:7c:a0:01:7c:16:94:a8:
a2:b3:c0:a2:85:de:61:c1:e1:0e:96:54:cf:e4:de:
0c:4a:28:4e:57:dc:4d:8b:57:8e:7e:64:bd:ab:d7:
3e:0f:49:46:1c:d6:f1:93:f4:63:21:ce:0c:54:81:
35:82:8a:84:e3:8a:91:f9:63:40:1e:a5:68:34:ae:
9d:71:69:7f:51:53:5b:07:07:52:19:00:bf:ea:e9:
61:3a:0d:0b:f5:19:d0:df:9c:56:63:5d:a8:49:0c:
15:69:65:f1:33:5e:0b:e9:6c:18:ce:95:10:c2:15:
be:6a:b1:11:cb:b5:f9:48:b3:68:fb:54:05:0e:29:
a2:ba:2f:89:01:7d:a9:6f:99:e3:68:1c:3f:56:e5:
2b:bb:8f:17:77:d7:67:76:27:81:9c:7e:5f:0d:47:
22:7e:a7:83:de:91:a9:95:21:5d:14:4b:27:5f:e8:
5d:17:3f:a9:ec:b8:1a:6f:b7:11:3e:4c:81:04:67:
bf:04:51:2d:52:5b:8d:21:4b:b0:83:57:cc:81:99:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:E4:68:FB:8E:34:D7:44:81:A5:97:8E:30:12:AB:E9:2A:EC:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.99.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9f:e3:48:c9:9e:27:34:27:f8:a8:34:a1:45:3e:6c:75:29:
ca:67:d3:0a:c5:09:cb:9c:c6:19:a8:c4:a3:b9:b2:0d:00:9a:
63:f6:49:4c:7f:c2:43:0a:4a:0f:3e:97:cf:21:6b:60:ab:c1:
29:70:db:68:3c:51:1c:78:fc:f9:55:6f:66:11:41:58:45:0b:
22:6a:aa:8e:0a:20:20:53:a9:0d:c0:3b:23:e7:49:b0:1a:7a:
45:b5:8e:a1:c7:8f:e1:e5:4e:90:e6:0e:b1:30:f3:62:ee:27:
46:ad:74:8b:bb:aa:60:7c:53:bf:ad:ea:66:66:40:13:11:cd:
44:4d:a5:0a:b7:13:5d:b8:4c:17:2c:77:6b:fb:e9:a2:79:24:
1c:22:18:da:e8:b2:8a:23:09:53:4f:dc:80:77:92:eb:20:66:
34:e3:e5:db:6a:7b:fb:5f:5a:28:d6:c4:a1:f1:82:98:43:ef:
ee:29:df:6e:a7:1b:2c:95:60:7d:54:35:57:df:95:f8:82:7c:
13:af:34:cf:06:32:f2:73:63:3f:19:f9:87:19:12:81:b5:f4:
ca:da:98:33:99:f7:dc:20:5d:c4:86:a8:b7:01:5b:fb:2c:dd:
a0:48:16:d7:bc:c4:0c:90:ee:42:0f:82:38:15:d3:f3:98:2f:
54:45:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:53 2025 by rpki-client