Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
File: 34352e31342e3139322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: 5V4UvdsLC17EWYPeg78dBU2aAM9hMLMnRwSjA7fghWI=
Subject key identifier: 4D:90:61:64:81:BC:7D:74:20:BA:D7:37:CB:93:8C:EE:64:76:EE:9E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B3D06497B82912DC54EE51724036633D205397F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 30 Jul 2025 14:47:01 +0000
ROA not before: Wed 30 Jul 2025 14:42:01 +0000
ROA not after: Wed 29 Jul 2026 14:47:01 +0000
asID: 207137
IP address blocks: 45.14.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3d:06:49:7b:82:91:2d:c5:4e:e5:17:24:03:66:33:d2:05:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:42:01 2025 GMT
Not After : Jul 29 14:47:01 2026 GMT
Subject: CN=4D90616481BC7D7420BAD737CB938CEE6476EE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:e7:0c:c0:5b:47:a1:fe:e7:45:5f:6d:7c:
de:58:48:e2:53:b3:30:3e:84:ea:2a:a0:cd:c6:88:
44:47:fc:3e:6b:a5:38:3a:85:65:2f:cd:cf:c1:53:
10:8e:42:bd:98:4b:cb:70:cb:71:e5:9a:4c:15:c4:
77:b1:9f:94:e6:a2:1a:2d:a9:62:38:20:b3:8c:22:
3e:c3:c9:6c:1c:22:24:f7:f5:f8:3b:98:65:e1:69:
f4:4a:60:83:0e:0f:31:26:9a:bd:b1:42:ac:60:1d:
28:e1:d5:51:9a:ba:d3:00:ba:4a:a4:f9:21:6e:7a:
2a:f6:ff:8c:5a:7b:f0:1a:1f:cb:9c:7e:cf:43:7c:
99:bf:13:b9:d0:a8:53:2f:de:c8:3c:7a:5a:60:15:
f0:4e:f6:a6:12:b8:51:bb:b3:89:8a:3a:f6:ff:1f:
3c:4b:64:45:f1:d4:94:ef:5e:75:20:2c:a1:24:20:
5b:10:52:36:ce:f1:d9:c2:c0:0f:80:64:f0:d9:9a:
76:95:a5:3f:b5:ff:cc:29:0f:fd:16:84:15:68:c8:
8a:9c:66:f1:d2:37:5a:95:2d:dc:7b:a3:4f:2b:9d:
19:03:db:43:b7:d2:45:ff:f2:a5:cd:15:6b:eb:9b:
47:36:9b:f0:ed:1f:7e:be:ab:f4:ab:b3:b7:de:71:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:61:64:81:BC:7D:74:20:BA:D7:37:CB:93:8C:EE:64:76:EE:9E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:08:46:2d:c9:12:92:75:ad:71:42:a5:fd:ba:77:3b:5d:35:
f2:b0:c0:fa:ac:bc:3f:1d:38:25:25:62:02:3d:34:f6:88:33:
c5:de:c1:09:3d:b4:1d:77:5d:41:7a:50:cf:c0:81:f0:b6:05:
32:5c:75:43:01:ea:22:d4:70:27:3a:ca:01:f4:4d:bb:42:0d:
66:37:0a:5a:51:97:c4:bd:99:f1:12:4f:d2:96:c1:9c:ff:1b:
a7:a0:11:c3:bd:ba:d0:ef:1d:19:9c:b2:c5:54:5c:a9:cf:ad:
6b:91:f9:e5:4f:e7:f8:ad:1c:25:3f:49:f3:f2:4d:fe:74:5c:
a2:2e:8d:61:45:70:72:59:a3:3c:d6:ae:a7:64:f6:f2:60:9d:
2e:0a:19:97:b3:fc:e7:63:90:ba:8b:f0:02:12:ff:f8:cc:c4:
0d:c0:2a:ea:78:5e:7f:d9:94:78:78:c7:aa:2e:72:02:61:63:
96:b4:67:76:e5:f8:6c:ce:d1:2b:43:27:e2:e2:a7:f8:96:33:
2a:1a:c3:66:de:89:df:3c:75:71:eb:a8:4f:94:1e:bc:f4:c0:
17:5e:17:a3:f4:7c:01:51:5b:29:c5:3c:d9:b6:76:eb:5f:f3:
21:fd:18:88:5c:71:3d:2b:f6:32:f8:ab:4b:3e:2b:15:73:26:
80:03:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:27:54 2025 by rpki-client