Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
File: 34352e31342e3139342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ipYn7TaLvWUw9MF+q3oKIr7EQK37UqhJWy3WeD+3cGs=
Subject key identifier: 3E:E0:09:B4:7E:1C:42:10:E4:E7:85:18:35:6B:CD:7B:27:D3:D9:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 191BBFC81AB9B2BED3CC321DB85AAE4D6C0ECFF7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
Signing time: Wed 30 Jul 2025 14:47:01 +0000
ROA not before: Wed 30 Jul 2025 14:42:01 +0000
ROA not after: Wed 29 Jul 2026 14:47:01 +0000
asID: 51167
IP address blocks: 45.14.194.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1b:bf:c8:1a:b9:b2:be:d3:cc:32:1d:b8:5a:ae:4d:6c:0e:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:42:01 2025 GMT
Not After : Jul 29 14:47:01 2026 GMT
Subject: CN=3EE009B47E1C4210E4E78518356BCD7B27D3D984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:da:e1:a7:5e:ce:91:e2:4a:f8:c8:ca:47:
55:1b:a6:03:97:58:76:d5:86:92:31:0b:ee:96:a7:
37:9d:0d:d6:6d:38:ba:2d:61:0d:d2:0f:94:9c:5c:
6d:3e:17:84:33:36:35:98:14:2b:23:4a:25:14:0c:
56:43:14:3d:8a:30:e5:66:7e:89:a8:b5:c5:ac:c9:
2b:33:de:3d:56:fd:af:ad:38:42:df:11:5b:01:8c:
7d:14:dc:37:1d:e3:50:44:70:a3:83:a9:ae:0c:4b:
86:96:1c:c2:e3:c1:1a:c9:dd:09:4f:b0:1a:a2:f3:
a8:f1:48:4b:77:a2:3e:47:20:35:ea:c2:d5:f7:bf:
b0:f4:1a:8f:6b:e1:98:38:3e:a6:ca:ac:28:e2:92:
66:73:1a:99:31:a0:88:bf:e7:b1:1b:9d:7f:0b:fa:
54:2a:77:34:58:01:fb:0a:09:68:d4:ef:58:45:25:
a9:d2:38:c5:cb:91:c6:a6:52:d6:1f:ba:24:0c:6e:
61:b6:94:12:00:7c:7f:92:f5:af:3b:55:05:e6:28:
86:3c:29:c8:13:b5:eb:f9:40:8d:80:52:cb:15:cf:
d4:ff:9c:de:30:22:b3:73:5d:b4:87:2e:ab:51:ac:
b7:44:5e:a7:37:17:4e:2a:09:2d:49:30:a4:29:93:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:09:B4:7E:1C:42:10:E4:E7:85:18:35:6B:CD:7B:27:D3:D9:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.194.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e2:ca:41:f3:b8:8c:6f:b2:81:c2:51:d1:21:14:56:b1:d1:
21:2d:da:99:62:3f:6a:2e:5b:34:e9:14:94:29:d0:ee:d2:af:
0b:75:4c:06:b4:4b:e9:f6:55:3f:63:a8:99:17:1b:6e:11:2b:
91:12:e2:d5:ad:0f:86:5a:25:5b:da:c0:d8:ef:bb:3c:e7:c8:
98:92:47:75:12:ce:16:b2:b9:58:46:67:2b:5f:eb:40:ba:38:
f3:89:0b:30:2e:07:dd:01:49:c0:41:33:92:77:95:27:8e:f0:
a6:77:71:83:82:fb:1b:2e:a5:dd:3a:a2:3d:ab:12:f3:63:e4:
2d:e8:1e:b2:df:b6:b0:e7:ad:c5:d0:72:d4:ea:38:6d:e8:d9:
eb:43:9d:3f:85:13:e9:50:3e:d9:1e:32:ee:bc:a6:06:4a:da:
e8:63:42:0b:58:43:2d:bd:94:73:30:52:f8:94:44:78:df:85:
de:90:ab:01:59:ef:c7:5c:9f:4d:0e:a5:af:08:b7:0e:53:a8:
42:f4:dd:d8:64:0d:9f:90:bd:f2:20:91:9f:55:25:85:0d:75:
15:ac:45:ac:49:10:39:36:63:d2:0c:da:b7:4d:f7:8e:bf:ec:
b9:3e:48:34:30:39:bc:fa:93:b2:2a:86:6a:fc:14:f9:3f:42:
db:7c:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:13:56 2025 by rpki-client