Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3132312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: l+xjgb3Xy4R1tSIZ6u6Sn+2LJkCEtFI20tXPudjo7SU=
Subject key identifier: A1:68:17:4D:A5:1F:DA:02:E6:15:03:E2:78:7F:2C:AD:5E:CD:04:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27EB2D8FD7B9D25A38BA044FD188154499DD7B06
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e2032393134.roa
Signing time: Tue 29 Jul 2025 06:31:34 +0000
ROA not before: Tue 29 Jul 2025 06:26:34 +0000
ROA not after: Tue 28 Jul 2026 06:31:34 +0000
asID: 2914
IP address blocks: 145.79.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:eb:2d:8f:d7:b9:d2:5a:38:ba:04:4f:d1:88:15:44:99:dd:7b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 06:26:34 2025 GMT
Not After : Jul 28 06:31:34 2026 GMT
Subject: CN=A168174DA51FDA02E61503E2787F2CAD5ECD0496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:5c:c4:02:42:2a:1f:51:9c:be:73:ce:7d:
09:a1:b8:80:a0:ac:55:8e:f3:40:18:e3:8b:d6:c9:
15:01:c2:9e:90:5e:af:ff:38:1d:73:6a:9f:d6:40:
a1:e8:f8:96:0d:c1:b3:16:ff:d1:7b:60:51:03:64:
f6:19:39:24:4f:19:36:29:5e:8b:83:5a:89:a4:1d:
c6:2d:09:98:e1:49:dd:e3:56:70:bc:40:9c:cc:9e:
9a:90:37:24:94:bb:14:0d:cd:a7:3f:05:fc:bd:63:
4e:b1:20:2a:c2:39:1f:19:c9:aa:f2:1d:d5:1f:5a:
f3:e2:d7:2e:4f:98:d2:a6:51:a3:d9:08:2d:cc:14:
77:e3:a6:79:58:0e:0b:85:6a:f1:54:ff:f7:77:dd:
b7:b0:53:94:0f:59:46:18:b3:1d:e4:e8:b1:77:40:
34:de:21:19:fb:24:c4:d0:e0:e5:b0:13:c1:d5:36:
67:cc:91:f5:14:d0:dc:72:b7:c8:9d:60:18:1e:98:
23:58:46:f8:b2:df:d5:82:8c:f3:b8:06:39:6a:6d:
47:fc:67:12:44:26:98:b0:14:a6:31:3f:fe:fd:36:
2f:ab:70:c1:c9:81:58:d2:44:33:bd:fb:45:36:ab:
b8:92:f0:a5:d5:16:25:c4:a7:78:d0:a0:3d:b5:80:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:17:4D:A5:1F:DA:02:E6:15:03:E2:78:7F:2C:AD:5E:CD:04:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a6:24:ed:1b:48:ea:a5:54:59:68:83:b4:92:4d:9c:74:8c:
31:f6:35:9f:f1:7f:4a:1a:c7:5f:fa:05:e3:d9:97:74:34:c2:
8d:4f:7e:4f:d0:e1:c4:29:31:57:8d:b5:68:e1:53:2c:4a:4d:
b5:ee:d5:cf:fc:e9:f5:48:91:54:bb:e4:a7:0c:ab:87:81:de:
5a:4b:41:34:dc:0a:d6:29:16:a1:26:43:c7:90:ee:04:73:96:
2d:5e:05:66:bd:23:91:6a:31:db:79:71:18:53:63:9a:1b:a6:
dc:c2:d1:a9:98:91:51:35:50:1d:25:85:07:71:cd:f1:37:56:
82:ef:a9:19:c0:ca:03:e4:2c:fa:99:5c:90:07:98:af:bc:ec:
6c:d9:71:81:0e:82:28:b4:a8:20:b7:c8:d5:db:2f:fa:67:10:
6a:36:de:ac:8e:d9:b6:73:27:98:e4:b6:79:df:10:fd:be:fe:
ac:4d:67:42:fd:ce:7f:54:9e:54:16:57:7b:68:ff:01:40:12:
dc:f4:9f:f4:c0:4a:b7:ef:65:7b:11:3e:ea:ab:40:93:a1:0c:
20:e2:ad:39:67:89:cd:d0:cb:98:3a:7f:f1:d9:6f:43:ce:0c:
e9:89:01:43:73:bb:08:87:4a:c6:be:0c:4e:6f:a1:4b:8e:14:
6c:64:1a:8c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJ+stj9e50lo4ugRP0YgVRJndewYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MjkwNjI2MzRaFw0yNjA3MjgwNjMxMzRaMDMxMTAvBgNV
BAMTKEExNjgxNzREQTUxRkRBMDJFNjE1MDNFMjc4N0YyQ0FENUVDRDA0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsilzEAkIqH1GcvnPOfQmhuICg
rFWO80AY44vWyRUBwp6QXq//OB1zap/WQKHo+JYNwbMW/9F7YFEDZPYZOSRPGTYp
XouDWomkHcYtCZjhSd3jVnC8QJzMnpqQNySUuxQNzac/Bfy9Y06xICrCOR8Zyary
HdUfWvPi1y5PmNKmUaPZCC3MFHfjpnlYDguFavFU//d33bewU5QPWUYYsx3k6LF3
QDTeIRn7JMTQ4OWwE8HVNmfMkfUU0Nxyt8idYBgemCNYRviy39WCjPO4BjlqbUf8
ZxJEJpiwFKYxP/79Ni+rcMHJgVjSRDO9+0U2q7iS8KXVFiXEp3jQoD21gGA3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUoWgXTaUf2gLmFQPieH8srV7NBJYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
eTANBgkqhkiG9w0BAQsFAAOCAQEADqYk7RtI6qVUWWiDtJJNnHSMMfY1n/F/ShrH
X/oF49mXdDTCjU9+T9DhxCkxV421aOFTLEpNte7Vz/zp9UiRVLvkpwyrh4HeWktB
NNwK1ikWoSZDx5DuBHOWLV4FZr0jkWox23lxGFNjmhum3MLRqZiRUTVQHSWFB3HN
8TdWgu+pGcDKA+Qs+plckAeYr7zsbNlxgQ6CKLSoILfI1dsv+mcQajberI7ZtnMn
mOS2ed8Q/b7+rE1nQv3Of1SeVBZXe2j/AUAS3PSf9MBKt+9lexE+6qtAk6EMIOKt
OWeJzdDLmDp/8dlvQ84M6YkBQ3O7CIdKxr4MTm+hS44UbGQajA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:49 2025 by rpki-client