Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20313336353537.roa
File: 3134352e37392e3135342e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier: J9sH+6Pqbf0IVBZVgNMAzXv75ALPQuIq4Y9GJ4/TmSM=
Subject key identifier: 81:EC:70:80:1B:6C:1F:B5:43:36:80:03:56:AB:2A:24:D2:4C:4E:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4756540BB98E8F387594F8071C8609F47D136B1D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20313336353537.roa
Signing time: Thu 30 Oct 2025 16:57:20 +0000
ROA not before: Thu 30 Oct 2025 16:52:20 +0000
ROA not after: Thu 29 Oct 2026 16:57:20 +0000
asID: 136557
IP address blocks: 145.79.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 19:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:56:54:0b:b9:8e:8f:38:75:94:f8:07:1c:86:09:f4:7d:13:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 16:52:20 2025 GMT
Not After : Oct 29 16:57:20 2026 GMT
Subject: CN=81EC70801B6C1FB54336800356AB2A24D24C4E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8e:c0:71:36:ce:d2:a4:1c:ca:37:ae:d3:ea:
a9:e5:83:d6:7c:cd:93:4b:77:f9:32:ca:9a:bb:20:
f8:e3:c0:86:cd:ce:2f:a5:c0:88:94:94:28:fd:13:
1c:ce:78:d4:0a:f2:bd:a0:f8:d5:d8:6a:e7:78:3b:
7d:6b:90:2a:1a:b2:7d:db:2c:2d:ee:aa:98:2a:77:
a3:87:fe:a5:74:75:7d:37:d8:b7:ec:63:50:74:5b:
02:b4:70:17:f2:d6:82:a6:3a:e3:6a:75:24:77:4f:
10:ee:85:72:3f:c4:7a:a2:c4:9d:de:e4:49:ab:db:
51:ad:4a:d8:c8:42:99:e8:87:a0:bf:3b:c3:75:bd:
8e:5b:73:f4:3d:03:12:3b:da:b8:eb:62:54:44:e3:
b1:a1:74:af:69:71:04:d4:2a:74:fc:11:9f:d5:bd:
25:b1:3f:93:08:41:9b:aa:8f:bf:5c:95:a3:d5:06:
29:a8:db:e3:1a:a2:9f:1f:0e:d0:28:b3:7e:80:03:
cc:b4:43:64:ef:e8:99:7a:2c:73:45:8a:e5:f9:6e:
99:8d:3c:5f:a1:74:1b:95:cb:15:35:7d:e0:0c:03:
ee:ca:2b:4c:cb:d6:56:c5:07:5f:4f:04:57:8f:6b:
0a:35:96:9f:ad:8c:e9:b3:6a:c6:65:f3:91:b2:bc:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EC:70:80:1B:6C:1F:B5:43:36:80:03:56:AB:2A:24:D2:4C:4E:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20313336353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:e4:ad:03:ef:b8:e0:aa:f3:75:3d:52:68:15:1b:9a:41:
ce:77:1f:49:d0:e8:18:f8:59:29:b5:1b:f1:d6:58:59:cb:50:
0b:89:35:7b:32:3d:9d:53:e0:2e:35:b5:84:43:79:a6:e2:69:
35:e4:aa:0d:74:5e:08:13:30:52:f5:f6:0a:02:99:ec:93:d7:
fe:54:90:3a:fe:cf:da:9b:74:7a:a5:1e:58:27:aa:44:55:da:
fa:93:3f:b3:fa:cd:31:e1:20:ff:e5:c0:a1:0e:44:09:fb:bc:
79:30:e4:2c:55:e5:10:87:30:5a:ea:db:0a:1b:4c:c5:11:23:
ec:8b:ba:45:e3:b1:33:22:e6:4a:06:bc:22:73:37:3b:44:a5:
e1:1e:f6:62:0f:e1:74:88:75:8c:d6:b5:68:d4:3c:6d:c8:50:
f2:fa:56:14:10:85:d9:01:b4:bb:22:30:a9:f9:9c:4e:17:08:
c8:f7:b1:61:d3:25:12:ba:d3:92:98:fd:c6:ec:fc:53:63:b6:
a6:14:2f:a3:7d:70:3d:6a:b9:4e:87:05:10:2a:e2:f1:b7:61:
35:bd:3c:fb:67:7b:d0:4c:c0:9e:40:9f:c9:b4:74:58:5f:4b:
a5:73:60:ea:26:bd:38:18:a0:42:ba:85:6c:26:8c:1b:9c:70:
d0:d1:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:48 2025 by rpki-client