Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20323134343833.roa
File: 3134352e37392e3136392e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 1YtzpfIEkNOKRrmEhto6clxmS9yvYE/g9dvC6hC4viE=
Subject key identifier: AA:5E:86:AD:43:B8:9B:CF:88:D6:B8:CE:1E:18:89:73:15:73:2A:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70FEA9C12D0C329A51F728746BD2BF6B5E7AFAB8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 30 Jul 2025 19:18:39 +0000
ROA not before: Wed 30 Jul 2025 19:13:39 +0000
ROA not after: Wed 29 Jul 2026 19:18:39 +0000
asID: 214483
IP address blocks: 145.79.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fe:a9:c1:2d:0c:32:9a:51:f7:28:74:6b:d2:bf:6b:5e:7a:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 19:13:39 2025 GMT
Not After : Jul 29 19:18:39 2026 GMT
Subject: CN=AA5E86AD43B89BCF88D6B8CE1E18897315732A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:99:43:4c:43:3c:e0:c3:31:00:a1:bf:ea:
9b:79:68:33:91:e6:8e:60:1d:44:c8:69:cf:67:02:
f7:df:9a:2d:b9:50:ed:e1:ba:0b:49:b2:38:df:3b:
86:c9:2f:55:15:e5:b9:c4:73:d6:0b:33:77:9b:46:
86:5e:29:65:2a:4e:6d:be:40:1c:1e:60:3e:bc:3e:
d1:ca:04:94:49:e6:2d:48:20:22:fc:b8:69:96:c8:
eb:b7:b5:aa:bd:3a:79:3e:02:be:7a:72:30:fc:fe:
28:c9:02:e6:66:f1:f1:87:be:5d:9f:95:36:9a:2a:
29:7a:2f:e6:76:c3:7f:d7:ed:e9:fb:96:e9:ac:59:
43:84:c9:46:b9:2f:43:97:2d:9f:e4:2d:ca:ff:a3:
d8:46:78:31:47:70:0f:5d:ea:e0:60:58:3d:36:71:
d3:79:55:94:4f:29:ad:80:11:76:72:bf:7c:26:5e:
ff:3b:94:c2:18:56:dc:23:1e:3a:41:d2:c3:d1:ca:
5d:02:26:0c:3c:1a:75:5d:ca:ed:7e:8b:b5:88:2a:
a5:39:82:7f:6a:5c:a9:b8:a7:34:ad:b6:fa:6c:5e:
4f:4f:f2:3a:39:9f:d5:79:16:30:9b:78:49:c5:9d:
3c:60:6f:58:1e:ad:73:9f:aa:6d:fd:a6:bb:0c:fa:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:86:AD:43:B8:9B:CF:88:D6:B8:CE:1E:18:89:73:15:73:2A:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6c:e1:1d:ce:66:78:58:d6:e1:ca:09:26:c0:f4:15:92:50:
1a:28:f1:60:44:8c:3e:53:07:5d:88:4a:b0:31:b2:ce:72:ab:
8b:c2:25:19:74:4f:8b:a5:b8:78:50:7d:12:de:a1:e1:16:ab:
98:76:6b:ec:c4:ce:35:f0:12:c5:cd:98:3c:e5:9c:14:96:6e:
92:24:02:f6:54:7a:43:bf:b0:42:05:62:96:90:87:2f:f4:22:
9e:ab:f6:32:9d:de:05:65:bc:c2:64:af:02:f7:66:72:e7:4e:
4f:4b:ba:3a:f4:1b:9f:c9:27:b6:0e:7d:d5:b2:e6:99:65:cd:
11:9c:ec:ff:bf:6e:f2:26:66:20:01:2c:1d:4a:1f:3b:eb:6f:
9f:25:e5:91:d8:93:4b:ed:0b:ee:aa:7f:f6:2c:59:00:a8:3e:
3b:90:87:6e:00:eb:90:89:db:8e:d0:e2:7d:ae:86:12:65:1d:
33:7f:1d:a2:4e:2e:79:00:5f:76:01:86:37:d5:6a:d8:b9:24:
f6:a5:12:67:25:82:58:b0:7c:1a:d2:85:08:58:ca:9a:df:7e:
6d:b4:17:1b:ce:fc:97:2f:25:3e:dc:e2:db:7e:b2:d6:e9:be:
93:c0:fe:64:84:d5:98:ae:ab:ef:22:1c:a0:a6:3b:66:28:60:
b0:38:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:00 2025 by rpki-client