Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203131343034.roa
File: 3134352e37392e3137322e302f32322d3234203d3e203131343034.roa (raw, json)
Hash identifier: oHZ8BtNdIe2TnIDwHp/xwpiCn3WkaJhmriH1BIedWRc=
Subject key identifier: B7:B4:68:CD:E6:C8:53:BE:33:55:23:75:06:B3:5D:A2:E1:20:28:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 31F195DB29727D6CC0A9191C84BD3A7594C18170
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203131343034.roa
Signing time: Tue 03 Jun 2025 19:59:40 +0000
ROA not before: Tue 03 Jun 2025 19:54:40 +0000
ROA not after: Tue 02 Jun 2026 19:59:40 +0000
asID: 11404
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f1:95:db:29:72:7d:6c:c0:a9:19:1c:84:bd:3a:75:94:c1:81:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 3 19:54:40 2025 GMT
Not After : Jun 2 19:59:40 2026 GMT
Subject: CN=B7B468CDE6C853BE3355237506B35DA2E12028C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:ca:39:29:cc:7b:42:ee:ce:8b:c7:0f:0a:
60:7a:b1:95:12:31:c9:81:bf:22:bc:57:ed:68:7c:
0f:f3:d7:a5:48:c3:1a:8e:69:4f:0a:b4:bd:54:50:
97:e2:74:14:bf:32:8d:54:1a:8c:2b:92:01:7d:9a:
5d:ad:98:2b:d5:2c:28:41:ca:a5:5c:49:2c:a2:70:
80:ed:cd:ec:83:6e:99:11:d7:61:c4:b0:67:e7:0f:
f2:61:52:45:da:69:fa:e6:b5:f0:94:db:8c:ac:24:
7a:ed:8d:56:60:29:f7:c4:f3:5e:8a:aa:c5:23:2c:
0b:d0:e7:96:08:8c:12:00:bb:33:e9:a8:98:95:54:
2c:1f:dc:cd:0c:b1:73:a2:59:5e:72:00:f7:df:1d:
d7:51:0f:eb:8e:b6:47:b3:b8:26:ec:9c:cf:e2:4d:
31:f5:b4:4b:cf:c7:a4:a4:72:ae:1e:78:51:84:1b:
c1:75:c6:13:b8:d5:c9:c3:e9:29:c6:ec:80:bf:cc:
62:56:00:20:34:70:a7:9e:31:ab:f8:3a:2a:6b:b3:
35:56:d6:f3:5e:d7:c1:64:2b:fc:34:c2:06:ca:bb:
f7:6e:15:d6:2b:10:23:7f:f3:5e:f2:8d:33:0c:91:
fb:fc:d5:02:dd:ec:ca:4f:90:a7:ad:c1:06:d6:25:
33:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:68:CD:E6:C8:53:BE:33:55:23:75:06:B3:5D:A2:E1:20:28:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203131343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
29:27:13:2a:78:b5:78:53:7e:db:f0:13:6c:13:b6:4d:77:cd:
33:c6:1f:6c:10:5c:38:d1:71:8b:82:b9:35:10:72:91:90:6c:
33:3a:a4:09:53:3b:4c:3c:db:82:bd:22:e0:7b:26:e0:88:0e:
a8:4b:a3:54:cc:93:4c:55:2f:bf:2f:1f:b2:2b:df:35:6d:2f:
5f:5a:4b:60:c1:5d:50:19:fd:f1:84:c8:f5:30:56:e4:5d:48:
a3:8b:af:0d:4b:4b:a8:76:69:6b:01:d1:76:16:74:bb:c6:3d:
f4:a6:1d:45:b3:f1:03:bd:f6:8e:50:59:e8:f7:96:0a:72:9e:
6c:59:c0:c2:79:a5:19:65:b0:35:39:de:aa:d4:ea:67:d5:8f:
e5:de:f4:74:f7:64:6d:d1:9f:27:a5:6a:83:18:7d:39:fe:0f:
74:e6:fe:88:11:38:e1:4c:07:ef:ad:c7:2f:e4:d4:6b:33:97:
10:43:04:d2:4b:65:89:41:90:32:c9:00:71:74:e4:90:01:ed:
f6:e6:5f:2a:6c:ce:d3:7e:dd:d2:c3:8d:6c:cf:c5:58:54:de:
39:3e:16:09:55:cb:56:40:8a:4f:e7:ee:af:77:4d:e2:73:ad:
e1:64:68:9d:42:10:b6:cb:11:b4:08:af:12:e4:ce:cb:6f:7f:
2c:74:2b:70
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMfGV2ylyfWzAqRkchL06dZTBgXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA2MDMxOTU0NDBaFw0yNjA2MDIxOTU5NDBaMDMxMTAvBgNV
BAMTKEI3QjQ2OENERTZDODUzQkUzMzU1MjM3NTA2QjM1REEyRTEyMDI4QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYco5Kcx7Qu7Oi8cPCmB6sZUS
McmBvyK8V+1ofA/z16VIwxqOaU8KtL1UUJfidBS/Mo1UGowrkgF9ml2tmCvVLChB
yqVcSSyicIDtzeyDbpkR12HEsGfnD/JhUkXaafrmtfCU24ysJHrtjVZgKffE816K
qsUjLAvQ55YIjBIAuzPpqJiVVCwf3M0MsXOiWV5yAPffHddRD+uOtkezuCbsnM/i
TTH1tEvPx6Skcq4eeFGEG8F1xhO41cnD6SnG7IC/zGJWACA0cKeeMav4OiprszVW
1vNe18FkK/w0wgbKu/duFdYrECN/817yjTMMkfv81QLd7MpPkKetwQbWJTOxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUt7RozebIU74zVSN1BrNdouEgKMMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMxMzQzMDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
kU+sMA0GCSqGSIb3DQEBCwUAA4IBAQApJxMqeLV4U37b8BNsE7ZNd80zxh9sEFw4
0XGLgrk1EHKRkGwzOqQJUztMPNuCvSLgeybgiA6oS6NUzJNMVS+/Lx+yK981bS9f
WktgwV1QGf3xhMj1MFbkXUiji68NS0uodmlrAdF2FnS7xj30ph1Fs/EDvfaOUFno
95YKcp5sWcDCeaUZZbA1Od6q1Opn1Y/l3vR092Rt0Z8npWqDGH05/g905v6IETjh
TAfvrccv5NRrM5cQQwTSS2WJQZAyyQBxdOSQAe325l8qbM7Tft3Sw41sz8VYVN45
PhYJVctWQIpP5+6vd03ic63hZGidQhC2yxG0CK8S5M7Lb38sdCtw
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:52 2025 by rpki-client