Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e3130342e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: 3T1CD7Tn2cQrzYwZwhIcyEnhg2cQijtSz1p2gHUcfWw=
Subject key identifier: 0E:DD:E8:E1:F5:1A:08:A7:CA:82:C2:7A:11:97:0F:D2:57:26:41:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 64119FCB8EF3043CA464F508DAE8E8A42348220E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2035363530.roa
Signing time: Fri 14 Aug 2026 13:27:58 +0000
ROA not before: Fri 14 Aug 2026 13:22:58 +0000
ROA not after: Fri 13 Aug 2027 13:27:58 +0000
asID: 5650
IP address blocks: 145.11.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:11:9f:cb:8e:f3:04:3c:a4:64:f5:08:da:e8:e8:a4:23:48:22:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 14 13:22:58 2026 GMT
Not After : Aug 13 13:27:58 2027 GMT
Subject: CN=0EDDE8E1F51A08A7CA82C27A11970FD257264164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:60:4a:ef:d9:86:54:70:8a:6d:e6:b6:34:
7a:2c:9f:5b:f2:17:ea:cb:51:20:6e:ca:b0:54:42:
07:6a:5b:ea:08:b4:0b:85:b1:10:26:09:fb:a4:95:
62:31:47:9a:d5:0b:1e:84:96:3e:a5:d6:01:a2:ca:
c6:9c:5b:ca:01:a6:24:e1:62:d9:67:57:21:bf:e1:
6b:21:13:44:e0:4b:79:d4:0e:35:3b:42:dd:9d:c6:
87:e0:8d:6f:33:77:12:70:b6:5b:d4:da:09:6e:ad:
c8:a8:a5:38:0b:2e:93:1d:b5:74:da:e1:8a:9f:48:
41:4f:d8:a8:51:03:f0:9e:5d:d7:11:0a:13:e7:af:
6e:89:75:95:7f:93:70:8b:ee:e7:52:a2:7f:cd:9a:
0a:c2:ce:6b:a8:b2:a6:c2:2d:62:7e:30:4b:14:06:
c0:ce:94:e1:8b:cf:c7:b9:f4:5f:1b:65:d1:c1:36:
e6:45:4f:ad:e3:9e:d3:cc:34:c7:76:45:3c:a8:bf:
de:aa:f3:3c:db:06:ed:5d:ba:4b:36:a4:b9:a2:88:
e5:43:e6:2b:ef:91:96:c3:2f:15:c0:72:cd:f4:0e:
f8:8f:b1:f9:e9:64:a9:05:e8:01:d0:77:14:e4:bf:
6d:f8:6b:45:24:63:ff:3f:4a:6f:ea:b4:6b:f1:0f:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:E8:E1:F5:1A:08:A7:CA:82:C2:7A:11:97:0F:D2:57:26:41:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.104.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:e1:68:a6:5e:03:ea:a4:61:70:f1:c8:d9:dc:0e:25:33:b8:
cc:0b:46:ab:e9:b7:d0:ee:a8:26:ee:73:e3:b0:02:44:dc:f1:
3e:46:a3:5e:4f:69:08:72:2d:c4:18:1c:be:d1:ee:fb:a3:0a:
e3:49:50:1a:18:a8:82:dc:bd:a6:ab:db:f8:ab:85:30:3f:2f:
09:8f:9e:37:90:62:d6:99:25:71:45:31:53:f3:64:94:a1:50:
a7:27:1b:2e:7a:02:8d:2c:03:f7:97:94:5f:08:5f:5d:7c:9e:
a8:de:1b:8f:8b:92:86:0d:11:a1:db:a4:24:7c:1f:b9:03:89:
ce:77:75:06:ef:96:8b:43:46:81:f9:9e:f8:60:19:1c:e8:dd:
de:92:a0:7f:65:eb:97:ba:11:a3:51:12:83:41:01:1a:25:6b:
50:01:24:3f:23:c1:b4:f7:e8:1c:7a:68:a0:c8:b5:e9:9f:3b:
d5:0b:d1:30:0c:3f:47:4e:8b:c2:c6:b1:54:c2:9c:41:49:e0:
00:a5:4b:6e:c2:17:3c:1c:08:e7:e1:19:42:3c:b0:2e:b4:ad:
6e:15:e3:ff:ef:ab:4f:41:e6:0b:65:df:e2:2a:4e:fb:a5:18:
e8:8f:54:5a:65:a0:c5:b3:95:4b:74:7e:20:37:7b:8f:34:43:
ea:35:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:43:14 2026 by rpki-client