Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133302e302f32342d3234203d3e2035303635.roa
File: 3134352e37392e3133302e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: acPV/bbpYEd+vDpvclZgqoq+wcV7j+i6RdCuM0mqRN0=
Subject key identifier: 6B:5C:BA:D9:0A:52:84:03:76:B8:56:28:F3:80:F2:01:79:B0:E4:0B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0125964186EFE31C704F1D7D61A8DA661F60431B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133302e302f32342d3234203d3e2035303635.roa
Signing time: Fri 13 Jun 2025 05:03:14 +0000
ROA not before: Fri 13 Jun 2025 04:58:14 +0000
ROA not after: Fri 12 Jun 2026 05:03:14 +0000
asID: 5065
IP address blocks: 145.79.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:25:96:41:86:ef:e3:1c:70:4f:1d:7d:61:a8:da:66:1f:60:43:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 13 04:58:14 2025 GMT
Not After : Jun 12 05:03:14 2026 GMT
Subject: CN=6B5CBAD90A52840376B85628F380F20179B0E40B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:98:a0:75:76:d5:80:53:21:89:3c:27:54:
35:b7:b9:55:ff:4b:ed:01:6b:ef:ee:08:dd:5e:3d:
1f:5b:9c:4e:cd:1e:40:62:c8:bc:03:ff:1a:61:96:
9f:0f:0d:65:2b:87:dc:9a:de:29:48:81:68:c6:82:
b8:61:10:df:c6:26:a7:a8:c4:a2:f5:4c:e8:05:f8:
b6:d0:61:86:98:68:3a:ed:18:09:67:5d:4b:aa:62:
39:c3:cb:d5:e5:74:dd:5d:23:80:8d:3f:ae:6b:5b:
98:ef:75:fe:09:51:50:11:a5:64:ec:2d:b1:c0:cd:
cc:df:e4:6a:be:38:e3:d8:3d:4b:7f:4f:09:b2:e4:
99:57:38:18:64:10:df:bc:28:9f:12:81:4c:b3:1e:
e4:ad:4d:bb:94:ad:70:f6:53:9e:79:0f:90:a4:c6:
25:93:d6:57:db:55:69:e8:c4:e9:3b:f6:f6:70:cd:
97:b8:87:97:18:f5:51:cf:5b:aa:0d:c8:ed:ff:0e:
67:f5:78:d3:02:98:bb:a5:8e:9d:09:b1:b8:1f:37:
28:ff:47:75:41:1e:17:3d:89:4a:82:a5:77:d2:2a:
dd:a6:4f:54:ca:ab:10:af:35:ad:cb:fb:b8:35:cf:
6e:ec:48:c3:d4:4f:d4:88:e8:cf:86:42:eb:67:d7:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:BA:D9:0A:52:84:03:76:B8:56:28:F3:80:F2:01:79:B0:E4:0B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133302e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:15:f6:74:1f:fa:60:d4:e0:29:06:2f:6b:3a:59:bc:5b:e2:
18:d9:af:fa:86:bc:55:54:d9:f4:93:f3:83:90:0a:89:c4:c7:
9b:90:49:7c:74:1b:43:6e:fb:f1:94:06:4f:c0:92:97:79:87:
cd:d8:27:ce:6c:3b:94:ac:7a:fe:07:f4:b9:0f:4d:b4:af:d9:
5f:3e:e7:ec:e9:a4:29:e6:82:1e:f4:43:12:73:1a:af:20:f0:
ee:98:16:d5:40:37:d2:00:45:1b:6b:a7:56:31:78:dc:19:49:
c0:33:23:de:8a:ed:d5:25:15:cb:ae:8a:55:5e:8c:fd:f8:9f:
6d:06:9d:bb:5a:66:93:3e:0c:92:51:83:ae:4e:c3:86:e5:d4:
ab:61:4a:45:e8:49:03:85:fe:53:9c:8d:7b:cf:cd:66:25:98:
8b:5a:cf:d1:a8:4a:37:e9:6b:6e:1a:1c:e8:a7:f1:de:da:95:
55:20:45:23:19:c3:63:9f:ee:26:7c:bd:14:2c:e2:d5:95:a2:
b0:99:32:3b:b9:13:1e:16:3c:76:d8:45:2b:62:bc:e7:50:d1:
a9:cf:80:98:e3:c1:c0:3a:80:d7:b7:e6:e5:4f:87:c4:62:7b:
65:4c:1c:35:3d:b1:ef:f1:e3:29:28:e6:60:e1:36:e6:a8:56:
a5:21:4c:df
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUASWWQYbv4xxwTx19YajaZh9gQxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MTMwNDU4MTRaFw0yNjA2MTIwNTAzMTRaMDMxMTAvBgNV
BAMTKDZCNUNCQUQ5MEE1Mjg0MDM3NkI4NTYyOEYzODBGMjAxNzlCMEU0MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBpigdXbVgFMhiTwnVDW3uVX/
S+0Ba+/uCN1ePR9bnE7NHkBiyLwD/xphlp8PDWUrh9ya3ilIgWjGgrhhEN/GJqeo
xKL1TOgF+LbQYYaYaDrtGAlnXUuqYjnDy9XldN1dI4CNP65rW5jvdf4JUVARpWTs
LbHAzczf5Gq+OOPYPUt/Twmy5JlXOBhkEN+8KJ8SgUyzHuStTbuUrXD2U555D5Ck
xiWT1lfbVWnoxOk79vZwzZe4h5cY9VHPW6oNyO3/Dmf1eNMCmLuljp0JsbgfNyj/
R3VBHhc9iUqCpXfSKt2mT1TKqxCvNa3L+7g1z27sSMPUT9SI6M+GQutn1/gPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUa1y62QpShAN2uFYo84DyAXmw5AswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMz
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
gjANBgkqhkiG9w0BAQsFAAOCAQEALBX2dB/6YNTgKQYvazpZvFviGNmv+oa8VVTZ
9JPzg5AKicTHm5BJfHQbQ2778ZQGT8CSl3mHzdgnzmw7lKx6/gf0uQ9NtK/ZXz7n
7OmkKeaCHvRDEnMaryDw7pgW1UA30gBFG2unVjF43BlJwDMj3ort1SUVy66KVV6M
/fifbQadu1pmkz4MklGDrk7DhuXUq2FKRehJA4X+U5yNe8/NZiWYi1rP0ahKN+lr
bhoc6Kfx3tqVVSBFIxnDY5/uJny9FCzi1ZWisJkyO7kTHhY8dthFK2K851DRqc+A
mOPBwDqA17fm5U+HxGJ7ZUwcNT2x7/HjKSjmYOE25qhWpSFM3w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:28 2025 by rpki-client