Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135352e302f32342d3234203d3e20323134343833.roa
File: 3134352e37392e3135352e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: DOr5A9VKKqXBkvdReNDk+zVDD3FyG3/1/t07j4YVHdY=
Subject key identifier: 38:0A:BC:20:0F:A6:98:03:FD:37:84:D8:F8:1D:1C:B6:53:7F:D2:78
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2823768868885EBFE834B0B77B66F77FA69F62C7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135352e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 30 Jul 2025 19:18:29 +0000
ROA not before: Wed 30 Jul 2025 19:13:29 +0000
ROA not after: Wed 29 Jul 2026 19:18:29 +0000
asID: 214483
IP address blocks: 145.79.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:23:76:88:68:88:5e:bf:e8:34:b0:b7:7b:66:f7:7f:a6:9f:62:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 19:13:29 2025 GMT
Not After : Jul 29 19:18:29 2026 GMT
Subject: CN=380ABC200FA69803FD3784D8F81D1CB6537FD278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:34:6a:b1:76:58:99:81:74:e7:88:8a:a0:
f2:20:d6:18:af:3d:65:dc:69:6d:9b:a1:c4:0e:64:
47:88:40:64:16:de:53:97:09:dd:46:1b:94:a3:59:
bf:ad:08:8b:57:77:2d:6e:76:38:01:cd:a5:9d:38:
2f:49:94:fb:cd:5a:9d:69:42:f8:2a:c4:d0:7b:54:
f8:2d:75:72:18:ec:1f:dd:07:7c:4f:4b:72:60:da:
99:0d:d3:22:01:21:71:ba:18:95:09:46:c2:83:e3:
3f:5e:5f:33:f0:28:5b:d5:36:c0:ac:9a:b7:43:a0:
e2:35:73:2d:5c:76:c7:88:4d:fb:ee:0e:fe:0c:88:
d5:fa:b2:49:42:46:d4:79:8b:d7:92:dd:61:b9:48:
54:28:61:cf:0c:be:0b:de:60:57:a1:03:5f:33:b8:
e8:4a:d7:6a:12:a9:55:60:d5:d2:38:6b:2d:d9:a2:
3d:3a:c6:96:48:06:f2:23:ef:11:c9:a2:a3:9d:e7:
8e:9a:ac:91:bc:46:73:8c:19:46:6b:30:45:43:ed:
ea:0e:18:57:aa:1c:b1:33:fa:ca:a2:80:62:ea:51:
0d:4e:25:ee:46:f8:ef:c8:c8:f3:55:8d:32:ef:5e:
41:a4:14:32:f3:f6:3e:f0:14:81:71:47:b6:dc:7c:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:BC:20:0F:A6:98:03:FD:37:84:D8:F8:1D:1C:B6:53:7F:D2:78
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135352e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.155.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f7:37:59:3e:f9:a3:de:37:e9:20:a6:b6:4b:a1:13:49:cd:
d2:93:6d:2c:01:b5:3e:52:cf:a8:92:bb:44:4e:ba:91:63:d5:
3f:5d:d7:9f:15:95:57:db:6c:25:0f:e9:eb:d7:a2:4d:b7:8e:
02:24:77:31:f6:5c:f8:50:08:54:a3:52:bb:a0:30:ad:75:e5:
7f:fa:93:d7:8f:63:e2:1d:26:fd:55:64:6e:72:ae:ae:aa:b0:
9a:16:50:7e:54:a2:e4:9f:14:ce:0b:5e:0d:d8:5d:11:fc:81:
85:fd:d2:5e:6d:a8:da:b5:85:85:7a:8d:91:b1:a8:8c:dc:0a:
d7:fa:c6:3a:ee:f9:3f:d1:39:15:8b:d2:e4:d7:34:27:f8:26:
ba:30:8c:9f:1e:3e:89:0b:db:00:15:cf:52:27:3b:17:39:64:
b6:04:69:78:ca:ce:44:c6:67:b3:10:8b:fc:2e:c1:f1:64:5f:
90:fe:9f:38:55:a5:09:51:1d:ea:86:2c:bb:07:e6:ce:e6:3d:
b0:59:b7:bb:c3:8e:fa:e3:c5:76:2d:c6:fa:09:9d:1c:26:3e:
9f:d6:f0:b2:3c:c6:bf:43:d8:6e:1a:45:d7:f1:36:44:5a:89:
a2:da:62:07:f6:4c:12:4f:83:5f:27:ea:15:3a:2b:b1:cc:45:
37:9d:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:03 2025 by rpki-client