Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E72SAj2Veo2qvB4VaD93lByheIp3BZNGRJ0j8BVFwv4=
Subject key identifier: CA:E5:CF:7F:F1:AF:F6:6F:48:D5:F8:F1:3B:99:13:CD:28:08:5B:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 14A7FAC1001E6533E5DB83DB40F9156C25F03390
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 17:09:36 +0000
ROA not before: Tue 04 Nov 2025 17:04:36 +0000
ROA not after: Tue 03 Nov 2026 17:09:36 +0000
asID: 834
IP address blocks: 145.79.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a7:fa:c1:00:1e:65:33:e5:db:83:db:40:f9:15:6c:25:f0:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 4 17:04:36 2025 GMT
Not After : Nov 3 17:09:36 2026 GMT
Subject: CN=CAE5CF7FF1AFF66F48D5F8F13B9913CD28085BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:96:87:c4:6a:1a:8f:81:e1:d3:8d:3e:3f:
b7:26:49:8b:45:18:29:6c:22:f9:a5:9f:44:91:a9:
ee:20:5c:ce:5d:41:9a:f9:45:b9:3b:60:b1:17:10:
f1:28:b2:67:db:e2:86:c3:99:b8:cd:5b:20:25:80:
25:98:05:43:6b:c5:a4:a1:cc:48:7f:20:1e:b9:ff:
c8:e7:8d:f7:c9:1c:4c:c2:2d:47:3d:53:d2:20:fc:
8f:ac:1c:10:8a:77:40:7a:67:c6:6d:84:ef:66:7b:
e0:28:57:a7:fe:79:82:93:2a:cf:cf:6e:0a:ff:3a:
af:e0:68:59:38:3b:f6:bc:ba:59:3f:bd:83:b7:fd:
b3:54:c0:65:ab:bb:a4:05:d7:e2:47:dc:5c:20:73:
f9:99:0e:c7:d6:7e:b3:b6:df:bb:40:64:92:bf:28:
50:59:a1:17:01:0c:73:33:f1:15:84:8b:f6:7b:13:
60:72:02:eb:6d:47:f4:b8:09:bf:01:dc:22:a7:43:
9f:cb:2e:27:65:d4:dc:95:a1:68:f9:d5:66:26:9e:
ef:d3:c7:29:f2:35:e0:b7:38:f7:b1:07:0a:df:61:
99:40:48:da:2c:91:9b:cf:4f:a2:dd:65:be:65:cb:
de:af:4a:08:53:85:83:f9:22:5d:94:f8:de:b5:71:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:CF:7F:F1:AF:F6:6F:48:D5:F8:F1:3B:99:13:CD:28:08:5B:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:82:6f:d6:f0:a9:52:ae:77:e8:44:dc:e1:54:23:c9:49:0e:
44:88:e5:04:24:4b:5d:45:30:72:23:65:2f:c4:55:8b:12:91:
ac:d1:af:43:9c:b6:d8:ea:b0:82:78:2c:eb:70:89:f5:5b:e3:
f0:3d:11:2e:75:90:f2:fa:32:dd:67:77:d2:3a:0d:cb:7b:35:
94:10:39:16:8b:bc:f3:ca:c1:f3:20:20:8b:4c:87:d8:67:8b:
bc:f9:8b:58:82:ec:af:a0:04:1d:99:14:28:b6:7c:cd:39:50:
38:4c:b3:bf:55:ba:bb:88:9b:0e:55:f7:ec:c6:cc:7a:df:a9:
aa:e9:bc:cb:ad:28:61:fa:21:e0:b2:1e:31:4d:5e:a9:7e:34:
7a:fd:d2:60:f1:b6:3c:b9:f3:3d:b7:ae:f1:62:c6:c1:9d:af:
7d:b1:65:37:bc:d2:20:04:3b:3c:d4:29:d7:c6:58:a8:63:bd:
8b:0d:e1:81:f8:c5:2f:2a:97:67:c9:d8:9d:c1:8a:f8:f2:a0:
d3:a7:05:d5:0f:a2:6a:db:ea:a6:89:4e:0e:e7:8d:38:30:9d:
f1:f7:c2:53:08:a9:cd:bd:da:53:a2:97:af:7e:c9:eb:10:89:
bb:a4:cd:6b:50:c5:f3:49:f9:b3:cd:78:1c:ee:08:56:b6:c9:
e1:bb:fd:da
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUFKf6wQAeZTPl24PbQPkVbCXwM5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTExMDQxNzA0MzZaFw0yNjExMDMxNzA5MzZaMDMxMTAvBgNV
BAMTKENBRTVDRjdGRjFBRkY2NkY0OEQ1RjhGMTNCOTkxM0NEMjgwODVCQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo25aHxGoaj4Hh040+P7cmSYtF
GClsIvmln0SRqe4gXM5dQZr5Rbk7YLEXEPEosmfb4obDmbjNWyAlgCWYBUNrxaSh
zEh/IB65/8jnjffJHEzCLUc9U9Ig/I+sHBCKd0B6Z8ZthO9me+AoV6f+eYKTKs/P
bgr/Oq/gaFk4O/a8ulk/vYO3/bNUwGWru6QF1+JH3Fwgc/mZDsfWfrO237tAZJK/
KFBZoRcBDHMz8RWEi/Z7E2ByAuttR/S4Cb8B3CKnQ5/LLidl1NyVoWj51WYmnu/T
xynyNeC3OPexBwrfYZlASNoskZvPT6LdZb5ly96vSghThYP5Il2U+N61cSXRAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUyuXPf/Gv9m9I1fjxO5kTzSgIW6YwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM3
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT6ow
DQYJKoZIhvcNAQELBQADggEBAJyCb9bwqVKud+hE3OFUI8lJDkSI5QQkS11FMHIj
ZS/EVYsSkazRr0OcttjqsIJ4LOtwifVb4/A9ES51kPL6Mt1nd9I6Dct7NZQQORaL
vPPKwfMgIItMh9hni7z5i1iC7K+gBB2ZFCi2fM05UDhMs79VuruImw5V9+zGzHrf
qarpvMutKGH6IeCyHjFNXql+NHr90mDxtjy58z23rvFixsGdr32xZTe80iAEOzzU
KdfGWKhjvYsN4YH4xS8ql2fJ2J3BivjyoNOnBdUPomrb6qaJTg7njTgwnfH3wlMI
qc292lOil69+yesQibukzWtQxfNJ+bPNeBzuCFa2yeG7/do=
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:42 2025 by rpki-client