Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32332d3234203d3e20383334.roa
File: 3134352e37392e3134302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: uhuVsbkSiWlhxFPooCK5LEJkCJ7d6w9UHnGxfpAubuI=
Subject key identifier: 9B:DA:44:DC:61:08:51:B4:C5:1C:9A:ED:96:EA:33:CA:00:99:3C:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15C3BB02174CDFDEEC3C96D0D68F77B9E9F7F1A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32332d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 17:08:28 +0000
ROA not before: Tue 04 Nov 2025 17:03:28 +0000
ROA not after: Tue 03 Nov 2026 17:08:28 +0000
asID: 834
IP address blocks: 145.79.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c3:bb:02:17:4c:df:de:ec:3c:96:d0:d6:8f:77:b9:e9:f7:f1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 4 17:03:28 2025 GMT
Not After : Nov 3 17:08:28 2026 GMT
Subject: CN=9BDA44DC610851B4C51C9AED96EA33CA00993C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:da:b6:23:45:6e:b4:ec:a5:c3:e3:9e:8b:
6f:92:32:43:a1:5f:f9:43:7a:5a:98:83:56:bb:bc:
c2:ef:34:1e:2a:fe:37:f2:a4:33:28:ec:7b:2c:6f:
2a:2a:b4:78:62:ba:48:6a:cb:df:ae:96:08:f5:03:
16:ec:48:6e:ce:76:bd:6f:d7:85:e2:f4:a6:ea:5a:
80:0b:7b:7d:0b:2f:8f:55:30:78:bb:c8:35:fa:2d:
09:7b:a9:f4:19:6f:d4:b7:a7:2b:8c:2c:6d:7b:23:
f7:25:e6:c0:55:1e:30:f3:bf:42:03:69:c3:40:97:
53:5c:f0:e4:0c:ad:17:67:5e:3f:84:f3:84:4e:40:
06:4b:10:67:24:24:1e:8f:9a:37:93:74:b0:47:1a:
4d:76:d6:53:10:cf:9e:56:cd:14:33:08:34:13:4b:
37:0d:fb:d5:30:7a:89:38:a2:e4:61:0f:a8:6d:ee:
89:b7:91:02:0e:07:ac:af:8d:1c:46:1e:34:33:6d:
70:6a:78:c4:43:44:37:ea:7e:92:af:3c:f8:64:45:
5c:f2:bb:36:20:0b:d8:72:f3:44:f5:fc:27:d8:f7:
fd:d2:b4:7b:d2:3b:24:42:2d:e4:ad:52:8d:a4:d8:
46:8c:27:86:cb:6c:b4:09:51:39:0c:04:96:83:54:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:44:DC:61:08:51:B4:C5:1C:9A:ED:96:EA:33:CA:00:99:3C:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:c1:fb:90:12:62:e9:79:67:3f:89:15:b7:01:61:7c:42:c4:
8d:93:0b:c2:40:34:da:9a:a7:25:cf:ed:9f:92:24:a0:6f:93:
25:be:c4:0b:ea:9b:dc:9f:49:d2:3d:46:4c:1c:f3:30:72:68:
8f:3a:90:8b:58:28:fe:de:88:d9:d2:02:f5:6f:f8:59:88:6a:
37:fd:46:f6:30:0e:11:df:70:33:76:43:33:30:50:10:9a:4d:
2b:68:b9:6d:8b:e4:88:4b:2c:2b:9f:11:23:2f:51:a6:31:f1:
62:92:07:b2:d7:8d:d7:0d:22:90:eb:8b:81:dd:e8:e3:ce:7e:
a5:fe:17:d5:04:f7:2d:71:da:11:63:ff:53:b0:96:db:dc:fd:
5d:62:44:fa:91:30:f0:86:77:3b:69:59:d5:15:b1:9a:ca:d0:
17:f0:29:17:55:76:eb:a0:e9:95:92:15:2d:b6:92:03:2c:ad:
7b:04:1d:a8:de:30:79:58:83:18:83:d2:6c:85:e1:5e:d0:7b:
b2:64:e3:f8:16:da:fa:8f:87:fd:8c:fd:82:3e:c0:79:c5:85:
c3:06:24:3f:ee:fc:c5:0a:e3:95:e3:17:73:84:44:e8:8a:55:
34:38:3e:17:c3:44:8c:ca:ad:83:0f:04:26:de:81:e4:a4:49:
a2:d6:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:41 2025 by rpki-client