Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: P5cMw394LAqMzX9n5WN+u68SpZWeQO+MyJ298t5ceOE=
Subject key identifier: F5:E9:B7:8B:F0:D3:60:93:C1:93:88:E1:D9:A2:A9:C2:9D:39:3E:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F29317CC76207C208B7C053927162DBE154C5D4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 06 Aug 2026 12:27:43 +0000
ROA not before: Thu 06 Aug 2026 12:22:43 +0000
ROA not after: Thu 05 Aug 2027 12:27:43 +0000
asID: 214143
IP address blocks: 145.79.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:29:31:7c:c7:62:07:c2:08:b7:c0:53:92:71:62:db:e1:54:c5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 12:22:43 2026 GMT
Not After : Aug 5 12:27:43 2027 GMT
Subject: CN=F5E9B78BF0D36093C19388E1D9A2A9C29D393EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:12:09:87:e9:3d:53:5e:84:6b:10:2f:a9:
cf:90:5f:3b:22:72:06:a0:4f:ce:31:d7:f7:e9:5c:
f3:c0:10:61:03:d3:fd:85:06:53:6e:42:ca:71:06:
13:37:6d:3b:50:54:74:45:18:27:2f:81:b8:5b:16:
9b:ef:0f:a7:82:a1:9c:5c:4d:e5:45:c4:d1:d1:c7:
24:df:39:e7:a7:bc:44:77:d1:44:b9:87:a9:f4:ae:
fd:53:10:2b:6d:1d:e3:61:1c:25:38:8f:f5:c2:9e:
03:11:be:71:23:6b:60:cf:02:23:04:21:8f:48:0f:
cd:8c:1a:c8:ed:63:c9:d7:47:45:06:2e:51:14:22:
2a:d3:04:0f:64:f3:7b:4f:a8:af:20:87:33:19:c4:
00:da:e7:86:17:00:d9:dc:e6:36:b0:66:e7:e0:dc:
b1:a0:da:ee:b9:6b:74:83:6c:8f:7b:49:5e:47:c8:
f2:7c:ca:ca:41:86:2a:33:22:52:5c:24:b7:95:8e:
dc:d9:9d:65:e7:15:3d:ad:eb:f2:8a:1b:bd:22:4b:
98:f0:34:0f:b2:c9:74:7f:8b:9e:30:ae:ff:c6:76:
5d:62:83:4b:21:27:73:35:54:db:ed:c7:15:85:d2:
4f:d2:df:6e:40:48:39:36:7a:de:23:62:2d:8a:4f:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:B7:8B:F0:D3:60:93:C1:93:88:E1:D9:A2:A9:C2:9D:39:3E:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132312e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:42:af:19:d9:d9:6c:09:82:56:fa:27:5a:81:fc:d0:df:99:
c2:d1:89:e6:28:d3:4d:8c:6c:fe:e1:b4:43:35:af:e5:df:11:
c2:a0:36:2b:51:db:2f:f5:2c:8f:8d:e6:09:da:1c:f1:d9:ef:
ef:71:00:22:3a:51:e1:b4:45:2e:06:15:9f:00:19:25:f2:9b:
97:4e:d4:f6:41:06:f2:d6:a8:48:21:44:c5:9c:41:d8:bc:cd:
88:8d:b2:d1:6f:b9:b6:ed:3e:80:1d:e8:e7:38:42:1d:52:c6:
07:7b:7d:5a:87:47:73:cb:64:b2:64:9d:7c:5e:a8:de:07:30:
e8:33:08:de:a8:93:12:e7:1b:37:82:2a:9f:e3:20:ba:dd:10:
a2:3f:aa:2b:54:80:3e:bb:66:50:ff:89:75:da:6e:6e:cb:e5:
c1:92:d5:18:b0:8e:44:6e:f4:a0:71:87:9f:d7:32:1e:30:d8:
7e:71:65:ff:91:96:f4:85:c0:07:ab:b0:6b:28:5e:1f:ef:a4:
14:66:33:fb:eb:55:35:81:0d:bc:bd:b7:d0:6f:91:c3:ba:39:
78:9a:c2:a6:b6:4e:0c:18:09:0a:92:08:72:25:a0:ed:24:7b:
11:37:95:0b:46:d2:8c:e6:38:9a:d8:68:18:94:1f:69:89:58:
32:e5:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:57:07 2026 by rpki-client