Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38352e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 8mXX3qQ66bomW57ktAHvmdhaZDpXm3st7zZcd7WO4YU=
Subject key identifier: 3E:0D:15:95:E7:34:07:5F:58:B0:E2:C8:F3:8D:FD:72:AD:E0:00:EF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C57C4085DB92A93FC77DA4AB223C285C13850C8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38352e302f32342d3234203d3e2032393134.roa
Signing time: Tue 29 Jul 2025 06:31:37 +0000
ROA not before: Tue 29 Jul 2025 06:26:37 +0000
ROA not after: Tue 28 Jul 2026 06:31:37 +0000
asID: 2914
IP address blocks: 145.79.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:57:c4:08:5d:b9:2a:93:fc:77:da:4a:b2:23:c2:85:c1:38:50:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 06:26:37 2025 GMT
Not After : Jul 28 06:31:37 2026 GMT
Subject: CN=3E0D1595E734075F58B0E2C8F38DFD72ADE000EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:71:43:0e:cc:21:71:36:43:c1:f1:99:63:
d2:cc:32:87:f4:ca:0f:25:17:44:c6:ac:42:d0:b1:
c8:00:80:f4:2c:db:0a:34:a6:14:5c:ba:72:22:75:
53:e9:de:1e:5a:23:e0:f8:8a:a7:40:a2:b7:04:65:
70:14:01:09:b6:5d:3c:04:8d:aa:01:2e:ab:f3:20:
2f:6d:d3:a1:f3:c1:f2:f4:33:06:8a:d6:a4:50:89:
eb:80:cf:53:70:ff:81:67:57:f9:a3:5e:0e:c9:3b:
7a:10:e5:8c:55:82:20:dc:a0:0a:97:89:cd:19:ac:
f4:a1:82:24:33:b7:24:21:84:cc:55:57:82:7b:05:
c6:06:65:6e:27:e6:16:09:e9:f7:c3:db:94:f2:37:
37:f9:c2:a4:80:eb:b0:2d:b0:70:cd:21:f4:bc:72:
0d:a7:6c:69:f0:e7:10:5a:90:95:8f:cc:75:cf:c4:
60:d6:eb:24:12:f2:81:53:53:b8:78:0f:5f:80:c3:
ff:89:a9:98:cd:6c:61:20:05:2c:c7:64:89:0e:27:
b3:5a:22:79:a1:f1:ae:1c:6a:43:77:73:71:40:f7:
ca:7b:1f:ed:04:c0:f9:22:dd:1e:86:fb:33:8e:ad:
fa:92:d9:e8:53:3f:97:1b:6c:94:1b:0e:ac:3c:fc:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0D:15:95:E7:34:07:5F:58:B0:E2:C8:F3:8D:FD:72:AD:E0:00:EF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3e:d4:67:86:ff:e7:c8:c1:bd:06:a9:ae:fc:1a:37:33:6b:
ef:94:2c:39:76:d6:35:27:7a:1f:d4:97:29:a7:20:8b:a8:fb:
58:ff:40:09:79:ee:b8:a6:df:f9:68:15:ad:e3:ce:55:6e:ed:
fd:26:f5:a0:a7:78:47:0c:1f:33:aa:5f:73:0f:e9:2c:fa:96:
e2:f0:9e:31:38:1d:c1:75:95:fe:af:aa:04:c3:20:4c:74:97:
29:9c:6f:1c:67:f0:20:7b:d5:c8:15:9f:da:2a:ea:89:d4:da:
30:d6:00:ea:ba:cb:12:f0:cc:b7:35:fb:03:dd:97:25:f2:3d:
66:ab:83:23:ba:94:a0:92:28:89:ab:e7:da:ac:af:f9:d2:5f:
d7:7b:8a:e8:6b:81:03:6b:30:20:e4:7d:04:b0:85:d3:2d:89:
ff:da:45:61:78:3a:16:be:5a:41:a7:32:5c:ad:7f:72:80:8c:
a4:14:ab:a7:85:ef:95:1a:f2:5a:03:59:19:f1:41:ef:58:9b:
bf:2a:43:f9:b0:5d:d8:20:62:df:71:78:27:25:b0:02:c2:6a:
ad:ae:a5:f9:7c:73:7a:61:58:86:f7:23:aa:ae:d4:3f:e5:51:
4f:c6:8f:71:39:7f:07:75:6d:9d:56:bc:87:6d:b1:52:b4:b5:
0b:bf:16:7a
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUXFfECF25KpP8d9pKsiPChcE4UMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MjkwNjI2MzdaFw0yNjA3MjgwNjMxMzdaMDMxMTAvBgNV
BAMTKDNFMEQxNTk1RTczNDA3NUY1OEIwRTJDOEYzOERGRDcyQURFMDAwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmTnFDDswhcTZDwfGZY9LMMof0
yg8lF0TGrELQscgAgPQs2wo0phRcunIidVPp3h5aI+D4iqdAorcEZXAUAQm2XTwE
jaoBLqvzIC9t06HzwfL0MwaK1qRQieuAz1Nw/4FnV/mjXg7JO3oQ5YxVgiDcoAqX
ic0ZrPShgiQztyQhhMxVV4J7BcYGZW4n5hYJ6ffD25TyNzf5wqSA67AtsHDNIfS8
cg2nbGnw5xBakJWPzHXPxGDW6yQS8oFTU7h4D1+Aw/+JqZjNbGEgBSzHZIkOJ7Na
Inmh8a4cakN3c3FA98p7H+0EwPki3R6G+zOOrfqS2ehTP5cbbJQbDqw8/ClTAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUPg0Vlec0B19YsOLI8439cq3gAO8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzODM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT1Uw
DQYJKoZIhvcNAQELBQADggEBAB0+1GeG/+fIwb0Gqa78Gjcza++ULDl21jUneh/U
lymnIIuo+1j/QAl57rim3/loFa3jzlVu7f0m9aCneEcMHzOqX3MP6Sz6luLwnjE4
HcF1lf6vqgTDIEx0lymcbxxn8CB71cgVn9oq6onU2jDWAOq6yxLwzLc1+wPdlyXy
PWargyO6lKCSKImr59qsr/nSX9d7iuhrgQNrMCDkfQSwhdMtif/aRWF4Oha+WkGn
Mlytf3KAjKQUq6eF75Ua8loDWRnxQe9Ym78qQ/mwXdggYt9xeCclsALCaq2upfl8
c3phWIb3I6qu1D/lUU/Gj3E5fwd1bZ1WvIdtsVK0tQu/Fno=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:49 2025 by rpki-client