Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37322e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: wQ3pgI+B3HzWBEpxrI4PRH1TDGcpLBkQ/zOmR8Ds2lc=
Subject key identifier: 09:02:A8:68:FE:77:95:A9:61:22:0A:C4:8B:D5:01:44:09:D3:9B:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22B1F9C53D8045C64885CB97600316B9DE97018E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37322e302f32342d3234203d3e2032393134.roa
Signing time: Tue 29 Jul 2025 06:31:40 +0000
ROA not before: Tue 29 Jul 2025 06:26:40 +0000
ROA not after: Tue 28 Jul 2026 06:31:40 +0000
asID: 2914
IP address blocks: 145.79.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b1:f9:c5:3d:80:45:c6:48:85:cb:97:60:03:16:b9:de:97:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 06:26:40 2025 GMT
Not After : Jul 28 06:31:40 2026 GMT
Subject: CN=0902A868FE7795A961220AC48BD5014409D39BF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:00:54:49:91:f6:fb:c0:f0:77:30:2f:e3:
18:cf:23:27:1b:89:44:8e:85:ce:0a:73:14:77:2c:
2d:7a:9f:a6:85:b9:fc:d6:3d:81:7b:f0:54:8f:8d:
12:d2:5f:d1:3e:df:ef:85:ce:99:aa:d1:67:e7:a3:
ae:05:76:39:53:a8:64:5e:2c:ff:ac:10:db:66:38:
8c:b1:0a:e4:ac:90:54:00:63:3b:5a:8e:6b:5b:66:
36:cc:f6:12:f8:3c:ff:e7:99:26:26:be:3c:cb:88:
cc:ea:9a:f6:f5:6e:fb:0b:05:81:fc:7c:87:db:53:
bc:e1:9e:2f:f5:a2:07:00:24:fb:b1:51:cc:63:60:
52:39:5f:98:be:39:7d:44:03:8e:85:56:3a:0a:29:
8b:6e:4d:dc:51:a2:f3:49:b3:d8:36:c5:67:3a:58:
86:18:72:6e:9f:b0:9b:8a:39:69:be:e9:04:27:27:
9b:a4:66:08:f7:cf:9a:2b:be:34:42:ae:a1:23:59:
63:98:c4:2e:b6:65:e6:70:71:6a:36:9c:1c:d1:d0:
05:56:82:7d:3f:d9:3a:1f:71:1a:6a:47:08:50:11:
4a:fe:7d:5d:74:c9:15:ad:a6:be:7d:ed:b4:6a:d4:
7f:aa:c1:f1:b4:e3:0b:9f:d4:9f:6b:c1:c8:1b:ec:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:A8:68:FE:77:95:A9:61:22:0A:C4:8B:D5:01:44:09:D3:9B:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.72.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2a:88:19:94:b1:5b:d8:c6:9d:13:55:bb:35:42:77:8b:3d:
2f:b7:1b:fc:fd:af:6a:e8:c0:f3:a6:ef:fd:01:fa:ec:14:7a:
e8:63:97:7d:61:c9:43:33:50:bc:25:60:44:8c:b2:5e:9f:cb:
66:46:e0:43:ff:7a:77:bc:02:3a:d5:71:2e:e5:e4:25:17:b8:
ca:cb:42:6f:8e:32:2d:76:48:c1:26:46:03:4b:23:9f:52:fb:
c2:63:ff:5f:ee:ab:af:5c:32:de:98:84:81:b0:e6:73:54:84:
06:42:fe:37:54:ba:d4:45:6c:c7:de:4a:76:02:a3:14:b3:24:
b7:02:91:33:8a:f0:1d:a8:0f:fb:fc:59:7a:7e:13:92:b1:8f:
98:70:37:cb:57:49:c8:85:eb:04:38:3c:77:fc:a1:d3:bc:f2:
b4:7b:6c:04:75:eb:38:68:01:9d:3c:e0:e0:96:f5:40:40:0f:
23:fa:52:d2:a9:bc:dc:65:5f:e3:c2:c7:1d:37:3a:c4:10:51:
6a:e8:c9:67:2d:cf:5e:f0:7f:cc:01:90:8f:17:3c:3a:3f:36:
03:f2:77:e3:4a:85:e4:00:5b:9c:3a:fe:71:8b:1f:73:f6:0b:
b3:b0:c1:a6:63:55:1c:dd:91:60:d7:93:a9:1c:0f:1c:7c:39:
9a:09:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:33 2025 by rpki-client