Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20323034313730.roa
File: 34352e3135322e34352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 039PcKRbjFKYDeFmLDAetP+Nk+Jp8qTBlsBGzDJKezs=
Subject key identifier: 30:E5:EF:7B:F7:3E:87:D7:A7:42:D8:E9:CF:AA:28:1F:19:5B:25:87
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7F296B4D739E1943D8ABCFEF1D56659E14E26C4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 27 May 2025 22:46:29 +0000
ROA not before: Tue 27 May 2025 22:41:29 +0000
ROA not after: Tue 26 May 2026 22:46:29 +0000
asID: 204170
IP address blocks: 45.152.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 15:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:29:6b:4d:73:9e:19:43:d8:ab:cf:ef:1d:56:65:9e:14:e2:6c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 27 22:41:29 2025 GMT
Not After : May 26 22:46:29 2026 GMT
Subject: CN=30E5EF7BF73E87D7A742D8E9CFAA281F195B2587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:24:b0:57:b2:ba:a3:06:5a:67:54:8a:39:
75:8b:8e:28:48:0c:ed:8c:7d:b7:c7:57:fc:06:15:
c9:0e:a4:e8:c5:7b:ad:77:eb:6e:19:e6:ed:b0:cb:
af:ec:7e:1f:ce:74:9c:66:43:d5:bc:aa:10:ea:95:
8a:0e:9f:18:be:bc:a7:f7:30:1f:2c:76:4f:fb:43:
d2:bc:63:d1:9a:0b:c2:99:8e:d5:ae:de:bd:b6:10:
2c:35:20:90:66:8a:4f:07:8e:4f:ca:e0:d2:64:8e:
bb:74:d0:2c:06:af:b9:00:02:94:44:5b:de:b3:62:
67:30:30:9b:80:b0:54:e0:8f:f5:37:73:29:45:03:
82:a1:a6:c0:13:80:f5:bc:1a:63:82:1e:90:37:ff:
f4:71:f2:78:3b:14:91:01:2d:ea:29:da:db:46:af:
8d:b4:d1:82:4d:35:96:49:21:29:ed:91:53:24:8d:
3c:1d:d6:a5:e9:61:11:fd:57:41:25:21:1a:d9:5c:
0a:96:86:b2:c7:8b:e6:66:d0:3a:b2:5d:14:57:cb:
de:96:68:33:a0:d1:56:e6:df:2c:97:16:a3:7d:65:
02:d2:66:6d:a6:04:58:16:e8:b7:14:af:76:e4:ea:
44:a2:d9:ce:7f:83:be:a5:8c:84:7a:be:49:d0:a2:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:EF:7B:F7:3E:87:D7:A7:42:D8:E9:CF:AA:28:1F:19:5B:25:87
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.45.0/24
Signature Algorithm: sha256WithRSAEncryption
54:cc:44:d8:63:a9:b0:c3:c0:11:07:ae:7e:da:af:f2:94:05:
ab:80:af:31:8a:1b:a9:12:d2:8c:05:b9:cc:9e:f1:37:a6:24:
5e:6c:52:f0:33:ba:23:5a:4d:fe:af:35:e1:a9:1f:7c:d0:16:
a2:6b:08:d1:d2:ed:36:e5:14:5e:c0:4f:48:b2:95:d6:e4:62:
da:0e:d6:bb:fb:54:28:fd:69:1d:52:77:c8:52:ac:7a:26:50:
ca:bf:79:ef:42:d0:b2:d1:b8:e8:f8:15:33:d8:d3:06:63:28:
8b:8a:b5:cc:78:57:2a:2a:00:6f:91:5c:93:ba:67:b4:ac:90:
9e:59:c9:0b:8f:b5:dd:6d:8f:eb:b8:65:f5:3c:97:42:7d:7d:
25:2c:4d:6d:a9:4c:1b:5a:fe:fa:9e:e8:21:5a:7b:63:82:ab:
2f:0a:cb:67:a7:a8:cd:72:3b:cc:02:0e:11:fb:e1:87:d4:78:
23:7d:48:ab:54:27:d9:32:b8:d6:4d:fc:92:27:18:c9:d7:18:
4a:c4:6c:7b:be:ea:5d:f2:72:34:56:c1:fd:c5:74:d6:91:d3:
f5:5e:7d:c2:ae:be:9b:03:0e:90:b3:b4:a5:e9:56:a5:7a:35:
f7:1b:73:d6:40:6b:94:64:64:1a:1b:8b:8b:ab:87:ad:40:10:
09:5c:47:a1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfylrTXOeGUPYq8/vHVZlnhTibEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA1MjcyMjQxMjlaFw0yNjA1MjYyMjQ2MjlaMDMxMTAvBgNV
BAMTKDMwRTVFRjdCRjczRTg3RDdBNzQyRDhFOUNGQUEyODFGMTk1QjI1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQySwV7K6owZaZ1SKOXWLjihI
DO2MfbfHV/wGFckOpOjFe613624Z5u2wy6/sfh/OdJxmQ9W8qhDqlYoOnxi+vKf3
MB8sdk/7Q9K8Y9GaC8KZjtWu3r22ECw1IJBmik8Hjk/K4NJkjrt00CwGr7kAApRE
W96zYmcwMJuAsFTgj/U3cylFA4KhpsATgPW8GmOCHpA3//Rx8ng7FJEBLeop2ttG
r4200YJNNZZJISntkVMkjTwd1qXpYRH9V0ElIRrZXAqWhrLHi+Zm0DqyXRRXy96W
aDOg0Vbm3yyXFqN9ZQLSZm2mBFgW6LcUr3bk6kSi2c5/g76ljIR6vknQokeHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMOXve/c+h9enQtjpz6ooHxlbJYcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzNTMyMmUzNDM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZgtMA0GCSqGSIb3DQEBCwUAA4IBAQBUzETYY6mww8ARB65+2q/ylAWrgK8xihup
EtKMBbnMnvE3piRebFLwM7ojWk3+rzXhqR980BaiawjR0u025RRewE9IspXW5GLa
Dta7+1Qo/WkdUnfIUqx6JlDKv3nvQtCy0bjo+BUz2NMGYyiLirXMeFcqKgBvkVyT
ume0rJCeWckLj7XdbY/ruGX1PJdCfX0lLE1tqUwbWv76nughWntjgqsvCstnp6jN
cjvMAg4R++GH1HgjfUirVCfZMrjWTfySJxjJ1xhKxGx7vupd8nI0VsH9xXTWkdP1
Xn3Crr6bAw6Qs7Sl6ValejX3G3PWQGuUZGQaG4uLq4etQBAJXEeh
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:46:55 2025 by rpki-client