Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Vm+y2e3iXxMod2Gc1aVQVqpN6lCkGJQizrAwhgZGhsM=
Subject key identifier: 11:B6:35:9D:7E:0F:45:57:70:A1:78:8D:B6:A7:CF:2C:3D:44:97:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1B7925473391257C54B0DAD5F31C082D24897590
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e2032393134.roa
Signing time: Tue 29 Jul 2025 06:31:35 +0000
ROA not before: Tue 29 Jul 2025 06:26:35 +0000
ROA not after: Tue 28 Jul 2026 06:31:35 +0000
asID: 2914
IP address blocks: 145.79.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:79:25:47:33:91:25:7c:54:b0:da:d5:f3:1c:08:2d:24:89:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 06:26:35 2025 GMT
Not After : Jul 28 06:31:35 2026 GMT
Subject: CN=11B6359D7E0F455770A1788DB6A7CF2C3D44977C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:9d:11:33:cb:5a:38:aa:4f:ff:6b:5e:dc:
85:bd:58:94:3c:1b:f1:36:8b:43:e7:26:8f:4b:f5:
e0:73:3a:06:0f:5b:a3:0c:07:38:41:1b:42:2e:fc:
7a:dc:97:09:f2:fc:ff:03:39:a2:03:6b:93:66:a2:
80:3b:fd:97:3b:fe:28:2c:52:c1:be:e5:f9:52:20:
8a:e2:f3:f1:fe:0c:7d:a9:8d:c4:06:d7:cd:7c:da:
48:55:28:fb:b1:1c:0e:96:1a:1a:68:05:d1:84:d8:
9a:d5:ed:ea:8d:3a:6b:92:14:6b:8a:67:ab:6f:ce:
9e:f8:ed:05:de:84:95:92:0f:06:c2:02:13:1f:6f:
3f:ff:3d:41:fc:6f:42:5f:73:d1:c3:12:d7:ca:29:
cd:e4:30:9c:6d:f0:0a:29:46:fa:8a:c9:46:e8:c3:
17:a5:d5:2b:97:bc:fc:1a:df:e1:88:0d:08:8b:b5:
89:8d:38:df:ed:51:d7:30:59:ab:46:56:19:e8:61:
22:ee:3b:19:bb:b8:93:f6:c8:71:6c:3c:84:d9:af:
ec:7f:73:0e:59:53:6d:08:27:84:b1:97:cf:24:4b:
55:5b:88:de:64:71:fa:6a:96:5a:a8:db:fb:b1:81:
43:da:a1:bd:36:66:96:f7:2e:2b:18:77:51:06:e5:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B6:35:9D:7E:0F:45:57:70:A1:78:8D:B6:A7:CF:2C:3D:44:97:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.86.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7a:93:20:98:08:6a:a0:97:7a:e1:48:b6:37:30:54:20:58:
94:37:70:32:7b:73:ab:a7:11:76:e3:eb:5f:4b:ef:ff:80:a2:
3d:26:64:49:00:58:e8:3c:87:60:cd:ab:a2:32:a4:a0:af:76:
a0:50:a0:2a:6d:2d:c4:19:ea:21:cd:87:be:40:f2:57:6f:f0:
b5:9c:98:63:33:48:34:cb:1a:e3:86:f6:c5:49:f8:c2:6f:d2:
a7:f2:bf:c3:89:87:e5:6d:7a:23:ee:fc:01:e9:95:ec:0f:59:
07:e4:10:f2:9b:4a:ab:84:15:4e:b8:1f:7d:ef:ba:71:78:2c:
f9:63:38:02:3b:3c:e7:9b:92:04:82:94:17:38:2c:43:88:77:
d9:61:c7:32:00:c1:9d:45:c5:05:26:0c:32:f1:7c:7d:e9:55:
0e:b8:41:7b:a2:a7:c2:be:ff:7b:ef:97:d3:23:cc:6d:ac:38:
33:3a:28:64:13:9c:8b:fa:52:38:36:bf:e0:49:31:9f:b1:a1:
7f:63:53:58:e8:67:b5:7b:1e:51:6a:4a:d8:48:ec:df:b9:05:
d4:a7:99:95:1f:cb:fd:1b:4d:45:27:92:6a:1c:1d:17:51:77:
8d:cb:45:2b:ab:1e:e2:cb:de:87:68:e9:08:68:5d:89:b3:6e:
60:30:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:03 2025 by rpki-client