Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e203232373733.roa
File: 3134352e31312e3131322e302f32312d3234203d3e203232373733.roa (raw, json)
Hash identifier: Z+ZdD2ojoAxARywfgiBnCH3ZV80v8AzyP6GuVYavaJ4=
Subject key identifier: 44:93:BE:40:3F:2C:0F:33:F1:2F:97:A5:7D:D3:CD:AC:D8:4C:B1:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 27A4B29B8C97B9229B9FED78C2BFE4C2BB79B38E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e203232373733.roa
Signing time: Wed 04 Feb 2026 06:35:30 +0000
ROA not before: Wed 04 Feb 2026 06:30:30 +0000
ROA not after: Wed 03 Feb 2027 06:35:30 +0000
asID: 22773
IP address blocks: 145.11.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 14:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a4:b2:9b:8c:97:b9:22:9b:9f:ed:78:c2:bf:e4:c2:bb:79:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 4 06:30:30 2026 GMT
Not After : Feb 3 06:35:30 2027 GMT
Subject: CN=4493BE403F2C0F33F12F97A57DD3CDACD84CB102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:e2:86:2d:6f:b1:3d:3f:87:5d:a0:ac:b2:
b2:64:9e:cf:85:45:21:fe:c8:55:98:ad:c5:37:4b:
24:05:1c:94:ad:5d:69:5e:80:9e:f4:91:9f:7b:ac:
07:17:8c:04:e4:82:62:c6:e7:e4:67:ba:5e:33:bd:
58:75:52:e2:ba:0b:b4:f2:17:d3:d4:43:4d:fc:e9:
47:09:73:d4:f5:fe:ce:4d:7d:fd:dc:9d:7f:7d:65:
6a:b9:01:62:ad:82:55:23:47:1a:72:df:e9:a3:b0:
7e:d4:0b:87:c7:05:f9:f3:8e:f2:c6:8b:d9:36:15:
ba:26:91:c3:57:cb:6d:eb:cc:1d:0d:70:e8:8a:d2:
31:7d:29:13:6a:e6:51:ad:29:21:94:2d:ab:ea:09:
5a:0b:0f:c2:13:15:52:2f:c1:48:1d:6b:a2:df:ea:
99:75:ec:04:60:b7:26:7e:3d:27:ba:07:9b:e1:63:
e0:d5:37:76:75:e1:4a:46:e1:52:c8:03:80:9c:c2:
dc:16:63:aa:03:95:54:d6:9a:36:3e:27:d8:b7:e4:
b5:ef:c7:94:30:d9:68:52:9d:9f:cd:2d:9a:0c:87:
d5:4c:09:d6:cf:80:a3:25:f7:c1:5f:b3:fd:ee:8f:
11:26:8d:42:59:82:2f:99:bf:6f:c9:d9:a0:10:11:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:BE:40:3F:2C:0F:33:F1:2F:97:A5:7D:D3:CD:AC:D8:4C:B1:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.112.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:f3:80:c1:3a:6f:41:61:25:b3:4d:95:b8:c8:d6:f0:04:af:
a2:df:55:ad:b9:0f:b1:e7:62:06:84:84:19:34:90:16:77:57:
0a:94:0d:18:f0:c5:02:ba:50:92:56:94:2d:a0:03:43:bf:78:
90:99:ad:6f:c5:a6:3a:c4:b9:13:be:38:43:05:b9:bc:5e:ad:
3b:6c:0d:82:44:e6:84:aa:17:d7:a5:00:6d:da:c2:c4:f9:0d:
49:d6:cc:05:b6:19:d9:2b:3f:a8:d8:f8:6d:57:29:20:7a:63:
30:e9:01:11:2a:43:16:06:7b:6a:6b:e0:19:47:1d:15:05:81:
7a:50:fa:d4:19:ad:c9:58:f9:b8:4d:c0:ec:60:18:4d:b1:59:
54:2c:73:3e:7f:48:55:1d:62:33:57:e6:c3:53:ac:dd:5d:3b:
a0:d6:10:3c:f1:48:bc:8d:be:27:f1:69:f3:c7:38:25:c0:91:
ed:16:67:48:67:38:a1:7a:23:cb:cb:14:d8:94:47:97:2b:d4:
11:54:e5:e0:98:91:68:87:83:67:fd:ad:d3:6b:e9:db:b1:d2:
4a:3c:b1:18:b9:1b:3d:e8:d7:9c:aa:11:c8:12:c4:1f:81:8c:
6a:18:5e:0f:84:e5:c9:2c:3c:d7:13:fe:10:09:00:50:d0:09:
3a:25:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:29 2026 by rpki-client