Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35322e302f32322d3234203d3e203437353833.roa
File: 3134352e37392e35322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: QqWfC3gsA+5OKb5jpuDF1T7ffeJl2PMa1f40eeuisLE=
Subject key identifier: 09:84:C9:88:3E:76:53:7C:26:E4:D2:C4:14:9B:87:CB:FA:58:E1:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17B4644EB35AF431B31C65B864968179EE96D9C9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35322e302f32322d3234203d3e203437353833.roa
Signing time: Wed 29 Oct 2025 14:48:54 +0000
ROA not before: Wed 29 Oct 2025 14:43:54 +0000
ROA not after: Wed 28 Oct 2026 14:48:54 +0000
asID: 47583
IP address blocks: 145.79.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b4:64:4e:b3:5a:f4:31:b3:1c:65:b8:64:96:81:79:ee:96:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 29 14:43:54 2025 GMT
Not After : Oct 28 14:48:54 2026 GMT
Subject: CN=0984C9883E76537C26E4D2C4149B87CBFA58E121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:93:ba:d0:f7:36:09:6a:88:61:8e:52:ab:
4d:e4:b5:2a:4b:99:34:92:fc:0d:f6:b6:bb:dc:8c:
45:2d:52:a2:dd:12:28:af:11:2c:04:bf:21:05:26:
a1:3b:bc:3a:40:72:10:a6:ae:98:71:1e:fc:70:c9:
78:7f:b4:28:6b:e7:5c:c0:7d:72:76:d5:1e:d8:d1:
f5:ec:4b:a1:43:11:8f:e9:ad:e5:5f:20:7c:b1:d6:
75:ea:3d:42:3c:a4:94:97:6d:8b:6d:3e:6e:6e:0c:
d8:28:af:dc:c0:30:55:5d:7a:e5:c5:11:bd:78:f2:
75:d2:cd:d2:90:de:a4:b9:c5:1b:84:a3:5a:80:e7:
0c:8e:08:64:c1:58:a0:47:70:79:fb:74:66:c4:aa:
e0:f5:4d:53:29:aa:34:50:2a:7d:dd:2d:48:3f:72:
ac:6d:4c:5f:96:c5:bb:ab:f1:2e:db:6d:9e:84:f3:
7b:0b:20:74:b3:60:fc:8e:54:b6:8c:c2:65:b6:bb:
48:b1:09:8c:1e:20:43:03:b3:0d:85:95:83:d9:ea:
8c:30:07:11:91:16:b6:ad:4e:e7:bf:4e:fb:3e:e4:
87:fc:76:71:3b:ec:86:f7:ee:a4:58:9f:4c:f9:20:
e6:a8:e6:ae:04:5c:cc:4f:77:c1:6a:9d:3f:ed:16:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:84:C9:88:3E:76:53:7C:26:E4:D2:C4:14:9B:87:CB:FA:58:E1:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.52.0/22
Signature Algorithm: sha256WithRSAEncryption
35:e6:17:27:66:05:bf:83:7e:99:78:f7:08:94:43:f5:68:a5:
13:9c:6d:1a:b0:72:72:d1:9a:af:f1:9e:ea:8b:c6:3d:d3:db:
ae:2d:e2:88:96:c6:35:69:10:d2:09:17:a5:5b:bb:66:6e:a8:
91:1a:00:fd:14:97:82:8e:ca:73:74:f6:9a:f1:5d:56:4c:6d:
5b:21:80:c7:45:4e:1c:d6:d4:73:f9:35:e4:81:c2:e8:10:1d:
be:4a:2a:a7:7a:83:72:d2:50:4e:80:c3:47:45:75:44:87:05:
ee:a6:5f:5a:70:29:56:4e:2f:52:02:45:a6:d0:53:d3:62:a8:
b0:36:0c:9c:1f:14:67:02:fe:0b:8e:58:80:98:8a:e3:39:30:
41:3e:27:c8:35:41:db:ef:9e:db:0a:b2:7b:ac:68:56:97:26:
2e:0f:68:3e:1b:95:78:87:96:10:b5:8e:af:37:f2:8e:4f:76:
72:11:5c:2f:90:74:fa:db:80:8b:dc:e3:ee:49:ac:09:7e:e6:
8b:3d:20:06:75:38:76:57:87:15:dc:87:c2:ce:86:48:69:e3:
38:a8:d1:d9:71:54:25:93:f1:9e:34:41:f1:86:45:77:5d:03:
be:d0:70:50:7f:11:8d:fb:97:79:de:3e:b5:10:57:2a:ed:40:
21:6b:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:48:30 2025 by rpki-client