Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: tzGeWZKqznPb3NaTTND0faW93P/sdlGJcDgeh9jk2rI=
Subject key identifier: 67:9C:0B:D3:99:25:C3:79:19:73:2D:F8:B3:85:46:13:F8:0B:D1:F0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6ADD628C01668A5DCD68ACB7F2B9EA796BC0DF87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39312e302f32342d3234203d3e2032393134.roa
Signing time: Tue 29 Jul 2025 06:31:33 +0000
ROA not before: Tue 29 Jul 2025 06:26:33 +0000
ROA not after: Tue 28 Jul 2026 06:31:33 +0000
asID: 2914
IP address blocks: 145.79.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:dd:62:8c:01:66:8a:5d:cd:68:ac:b7:f2:b9:ea:79:6b:c0:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 06:26:33 2025 GMT
Not After : Jul 28 06:31:33 2026 GMT
Subject: CN=679C0BD39925C37919732DF8B3854613F80BD1F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:54:db:28:51:24:aa:04:10:1a:c2:e1:58:
2e:7f:30:c6:06:97:f2:38:0e:5a:0d:14:51:85:dc:
2e:e3:5f:0d:ce:c5:d0:20:a0:5d:8f:26:fd:27:34:
ec:96:93:f6:ef:e3:79:b8:05:ee:8d:76:df:bf:ec:
b5:e7:37:e9:53:5f:40:8e:76:d7:b5:20:7b:43:84:
e1:d8:2d:9b:30:a1:11:87:55:d0:21:e8:d2:c1:70:
ac:f1:f2:e0:33:8f:d2:e2:ce:92:88:c5:63:47:89:
e7:09:59:ad:67:5a:c9:52:30:ed:53:4c:63:ef:ce:
e5:78:8e:b8:eb:69:b3:39:7e:54:b3:51:f8:19:f9:
ed:de:74:96:5e:0e:5a:77:3d:5d:11:d6:cd:66:d9:
79:70:29:13:6d:44:0b:fc:5e:bb:1d:46:24:82:5e:
e3:b8:eb:75:72:f5:bf:6d:b9:db:49:00:c9:90:4a:
64:e5:87:c5:ab:02:00:28:08:73:3c:15:18:0d:3d:
1e:46:a0:c5:c6:6f:cc:83:b4:d2:aa:8d:52:2d:e0:
c1:0d:46:b8:0a:51:9e:12:53:73:0c:4a:0b:7e:e6:
8c:ed:18:54:2a:bc:12:2d:29:0d:bd:20:65:1a:bc:
69:87:a7:39:c3:0e:57:08:96:2a:03:51:61:10:08:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9C:0B:D3:99:25:C3:79:19:73:2D:F8:B3:85:46:13:F8:0B:D1:F0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.91.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0a:80:8b:f4:83:0d:b9:5e:90:7d:0e:ee:27:96:97:c3:5e:
e6:de:41:60:f8:e3:4d:3e:ee:1b:4b:d1:61:fd:75:0b:38:d7:
4b:1f:94:f8:69:86:4d:7f:86:d7:06:a4:d7:ea:a6:97:c9:c9:
6a:bc:06:d2:6c:be:fe:df:59:2e:aa:b1:99:ba:da:a1:6e:21:
12:92:ef:c5:b2:ae:83:cc:1d:d6:ce:81:0a:52:db:c0:12:d5:
79:e8:c4:7c:41:2c:cb:f5:b2:7b:51:a5:74:1a:9b:01:2d:ef:
0f:03:30:37:46:34:47:50:ae:07:9f:99:ad:f9:0c:2a:52:a0:
45:42:93:50:f1:fd:47:cc:68:c4:85:3e:0e:c2:6b:a0:f6:43:
2f:9e:74:2c:6f:1f:89:68:af:8b:e7:d3:0a:1c:1d:4f:4f:35:
73:32:49:44:4b:cd:f7:87:f8:11:02:f4:e5:f1:61:ae:18:23:
49:03:d2:08:1c:b3:80:e8:0a:1f:69:57:e0:93:5e:e4:0f:33:
25:b1:f9:f7:a1:c9:7a:5d:51:5f:90:74:a8:02:d5:38:85:02:
ad:62:75:35:00:18:fa:38:f3:91:27:1b:fb:05:17:5a:a8:fe:
12:fd:b4:86:06:84:70:90:68:9a:9e:22:ff:dc:75:2f:55:d3:
be:cd:b8:d2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUat1ijAFmil3NaKy38rnqeWvA34cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MjkwNjI2MzNaFw0yNjA3MjgwNjMxMzNaMDMxMTAvBgNV
BAMTKDY3OUMwQkQzOTkyNUMzNzkxOTczMkRGOEIzODU0NjEzRjgwQkQxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC971TbKFEkqgQQGsLhWC5/MMYG
l/I4DloNFFGF3C7jXw3OxdAgoF2PJv0nNOyWk/bv43m4Be6Ndt+/7LXnN+lTX0CO
dte1IHtDhOHYLZswoRGHVdAh6NLBcKzx8uAzj9LizpKIxWNHiecJWa1nWslSMO1T
TGPvzuV4jrjrabM5flSzUfgZ+e3edJZeDlp3PV0R1s1m2XlwKRNtRAv8XrsdRiSC
XuO463Vy9b9tudtJAMmQSmTlh8WrAgAoCHM8FRgNPR5GoMXGb8yDtNKqjVIt4MEN
RrgKUZ4SU3MMSgt+5oztGFQqvBItKQ29IGUavGmHpznDDlcIlioDUWEQCMCbAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUZ5wL05klw3kZcy34s4VGE/gL0fAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzOTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT1sw
DQYJKoZIhvcNAQELBQADggEBAHEKgIv0gw25XpB9Du4nlpfDXubeQWD4400+7htL
0WH9dQs410sflPhphk1/htcGpNfqppfJyWq8BtJsvv7fWS6qsZm62qFuIRKS78Wy
roPMHdbOgQpS28AS1XnoxHxBLMv1sntRpXQamwEt7w8DMDdGNEdQrgefma35DCpS
oEVCk1Dx/UfMaMSFPg7Ca6D2Qy+edCxvH4lor4vn0wocHU9PNXMySURLzfeH+BEC
9OXxYa4YI0kD0ggcs4DoCh9pV+CTXuQPMyWx+fehyXpdUV+QdKgC1TiFAq1idTUA
GPo485EnG/sFF1qo/hL9tIYGhHCQaJqeIv/cdS9V077NuNI=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:30 2025 by rpki-client