Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136302e302f32342d3234203d3e20323132323338.roa
File: 34352e39352e3136302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: NZ421gmv0+4EptqnqaUOhZ5fqeW7rbOglXXH28IEFF8=
Subject key identifier: 82:77:C3:CB:E9:C0:F2:A8:97:9E:0E:DB:CA:7F:B9:FE:14:9D:63:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03BC8B53EF9A8D344FFE631447338668151570B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136302e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 27 Jun 2025 11:54:23 +0000
ROA not before: Fri 27 Jun 2025 11:49:23 +0000
ROA not after: Fri 26 Jun 2026 11:54:23 +0000
asID: 212238
IP address blocks: 45.95.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bc:8b:53:ef:9a:8d:34:4f:fe:63:14:47:33:86:68:15:15:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 27 11:49:23 2025 GMT
Not After : Jun 26 11:54:23 2026 GMT
Subject: CN=8277C3CBE9C0F2A8979E0EDBCA7FB9FE149D6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:55:4e:4a:10:9c:ab:a7:6f:b6:99:7d:ba:
47:30:3b:65:9f:08:ec:36:9c:bc:2e:5c:2c:db:f5:
9b:19:89:df:d5:bd:55:02:76:a4:38:b3:9d:1c:f7:
12:49:16:87:54:90:8d:b3:cc:ee:3c:a9:71:f2:55:
41:c8:ee:d3:a7:5a:6b:8b:25:da:b6:dc:39:98:12:
39:c2:ba:04:ba:7d:c4:5a:31:82:ac:9c:87:fe:c6:
94:da:8a:80:3f:b1:9c:f2:9d:6e:e7:c4:77:42:8c:
fd:90:8d:a9:26:f7:6f:ef:4a:64:69:73:b8:08:c1:
fe:30:af:69:76:ed:39:00:02:94:8a:cc:12:08:6a:
c1:d7:56:b6:df:9b:49:0c:ef:87:f0:f3:82:c0:4a:
39:52:fc:e6:63:06:0c:64:c8:42:4e:2e:12:27:03:
29:09:89:e5:84:ed:38:fd:9b:88:03:7b:1f:1d:21:
88:55:7b:e4:f2:2d:2c:c1:08:4d:52:c0:10:06:e7:
08:8d:09:8f:2c:e2:b2:85:98:a5:79:41:48:72:48:
92:1c:4b:6d:58:03:c4:40:1e:c0:db:3a:05:77:e8:
cb:8e:85:99:9b:3d:da:67:ef:48:07:54:00:10:68:
36:e7:e9:53:b5:f2:c8:c8:16:a2:d3:d8:2f:92:b3:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:C3:CB:E9:C0:F2:A8:97:9E:0E:DB:CA:7F:B9:FE:14:9D:63:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.160.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ac:ff:48:f3:7f:ec:6e:ec:d8:5e:e4:e1:47:08:87:6d:9b:
e4:2c:70:cd:07:d7:de:80:1a:7a:c7:e5:2a:53:fc:f9:15:c7:
d9:de:6a:0e:cf:99:e8:57:00:b3:07:e1:5e:60:ad:75:d1:1c:
19:60:46:77:3a:3f:35:a8:64:c6:b1:03:20:17:96:e2:3d:04:
ad:dd:ae:cd:df:d7:ad:81:21:9a:a2:b7:08:13:9c:80:69:bd:
cb:dd:17:c8:24:42:78:27:09:75:91:83:cd:2d:96:f8:f0:53:
81:f4:28:1d:f3:c4:13:c5:0c:60:d8:2c:33:ca:63:b6:85:48:
a4:63:e5:e7:fc:cd:b4:21:62:ab:42:3a:ca:37:dc:b1:f8:5d:
11:9c:89:19:f4:b4:f9:08:ef:6c:59:e9:58:cc:79:24:eb:2c:
57:ef:88:0e:9b:f1:52:d5:45:35:d5:64:e2:a7:7c:11:b1:77:
c0:80:02:94:3b:90:c5:0d:7a:a4:a6:2a:3e:0b:bc:e4:3f:f4:
1d:a3:b7:c8:de:31:2c:67:88:00:09:31:e8:95:f7:5a:50:27:
4c:b7:bd:32:cc:bc:d8:f8:aa:d0:4c:01:4f:91:10:4a:f2:a6:
53:8a:b8:13:66:fe:3e:2e:22:20:5b:31:35:16:69:64:df:02:
03:3b:72:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:01:02 2025 by rpki-client