Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38372e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e38372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: xDVgctXW4v9Y1CkDmes3bwSdNqdAJgX03jhR2PVcZv8=
Subject key identifier: BD:E2:63:D5:71:09:0F:10:46:23:3A:E4:1F:39:C2:16:7D:19:25:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A024D286D0F7B48541552280BF53038D3D7313E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38372e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 06 Aug 2026 12:27:45 +0000
ROA not before: Thu 06 Aug 2026 12:22:45 +0000
ROA not after: Thu 05 Aug 2027 12:27:45 +0000
asID: 214143
IP address blocks: 145.79.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:02:4d:28:6d:0f:7b:48:54:15:52:28:0b:f5:30:38:d3:d7:31:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 12:22:45 2026 GMT
Not After : Aug 5 12:27:45 2027 GMT
Subject: CN=BDE263D571090F1046233AE41F39C2167D1925BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:54:25:a4:db:3b:88:3c:d3:4b:ee:aa:ed:
d0:65:27:9a:cc:c6:fd:ba:87:d5:07:1e:b2:12:81:
02:23:87:43:d6:b2:d3:6a:82:5b:7c:b0:e4:d4:88:
0b:8b:a5:1e:e7:b9:46:0a:d2:73:d5:cd:6d:45:03:
d4:4a:47:a9:a0:94:cb:de:c4:66:28:21:d4:ac:8b:
2d:50:82:23:91:75:b0:9d:81:22:66:65:3a:a8:e8:
ee:72:be:e5:98:33:78:ed:80:6c:1f:3b:3a:e9:b0:
cf:1f:1a:c7:c4:b1:26:7e:85:44:f0:f4:eb:32:74:
c7:5f:97:4b:8b:41:a5:4e:c2:fd:fd:5a:36:71:dd:
93:33:8c:d8:5e:fb:e9:42:6e:4a:a1:fa:6e:ed:fe:
ea:f4:cf:31:86:66:c5:f0:d4:3c:12:f0:a3:2c:f8:
e4:fc:1a:e4:b0:ef:43:43:1f:52:93:2a:96:17:a5:
9a:68:4a:bd:84:e8:07:9f:90:ff:7a:20:d6:08:12:
0b:eb:a2:63:59:6d:09:f4:80:be:0d:9d:5c:49:53:
9b:f6:25:2c:dd:4b:dd:e3:9b:49:73:25:22:08:c6:
a7:82:ad:4c:67:e4:91:a4:45:44:cf:cd:9f:94:71:
f8:a6:18:64:96:44:62:8f:13:66:20:57:68:1a:84:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:63:D5:71:09:0F:10:46:23:3A:E4:1F:39:C2:16:7D:19:25:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38372e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:78:45:11:6e:b8:9c:03:ca:79:f4:b8:f0:fb:40:6f:ba:e8:
02:ce:ff:3d:2a:87:b1:60:8f:e4:72:5c:53:aa:35:62:66:ed:
65:49:1e:55:dd:da:a5:7e:9b:c0:af:07:ff:6c:48:08:af:46:
8e:c9:d0:52:90:d9:bd:a7:0e:f3:4a:e1:13:e1:8b:5e:61:77:
65:22:0c:55:d8:02:25:9b:27:30:f4:fe:4f:5e:ce:1a:ef:46:
6d:a7:65:dd:f7:f7:e7:f1:b2:67:dc:c2:a8:33:40:62:6f:46:
cf:d1:b3:b5:52:be:24:b1:01:e8:29:d1:70:76:48:d3:e7:97:
30:f1:fe:dd:70:9e:ea:bb:5d:94:b0:e2:a5:69:2c:55:c0:7a:
57:70:dc:7f:a5:84:80:6b:be:17:fb:6f:8c:af:5b:50:84:8e:
4b:ec:c2:49:37:ac:79:0d:d7:62:0c:ad:7b:73:5e:de:98:2e:
81:1c:cf:68:19:46:b1:96:98:c1:84:57:70:93:00:85:be:22:
40:f0:d8:1d:e4:e9:9e:f2:cc:ff:fe:b8:d2:48:f8:e8:7d:63:
a4:07:99:b5:84:59:6d:0a:0c:43:1d:09:30:8c:08:da:43:51:
8d:e0:f7:23:05:85:b0:35:45:e3:6f:d5:b3:40:7d:f1:d3:10:
31:98:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:47:43 2026 by rpki-client