Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e37322e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e37322e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: lQaRne2Zsbn9z989FGMOPeu7/4VaFyrE9tS6PSVGq5M=
Subject key identifier: 54:22:64:CE:18:D9:1B:84:D8:45:41:30:ED:FA:B5:3B:F0:12:36:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 624D3B0D729EDD6DF1B6EDC980DEFC3F22E87B98
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e37322e302f32312d3234203d3e2035363530.roa
Signing time: Fri 14 Aug 2026 13:27:58 +0000
ROA not before: Fri 14 Aug 2026 13:22:58 +0000
ROA not after: Fri 13 Aug 2027 13:27:58 +0000
asID: 5650
IP address blocks: 145.11.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4d:3b:0d:72:9e:dd:6d:f1:b6:ed:c9:80:de:fc:3f:22:e8:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 14 13:22:58 2026 GMT
Not After : Aug 13 13:27:58 2027 GMT
Subject: CN=542264CE18D91B84D8454130EDFAB53BF012364B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:80:6e:ba:58:9e:fd:61:18:90:fe:c1:87:
bc:9f:2a:f9:e2:2a:59:64:ba:d1:f6:cb:01:3c:d5:
d4:08:ea:9e:ee:00:e3:14:97:ac:69:b5:26:04:b5:
f2:40:b1:b7:80:9e:12:cf:48:a7:6e:50:e7:8f:5a:
13:dc:a8:f9:29:21:97:3c:ea:b2:03:d8:c2:76:90:
54:3d:4c:3f:21:20:80:ca:65:a8:26:a9:ce:4b:b1:
7a:59:96:a0:f3:60:b2:81:c8:b9:f5:94:4f:f2:e5:
3b:74:c5:81:d8:1c:36:d2:94:fc:59:40:f9:a2:d2:
8c:a0:e5:68:c3:2f:29:0f:3d:ba:7d:65:08:f3:e8:
28:f7:c4:f4:f7:37:51:de:cf:77:04:e4:4c:8e:12:
03:2c:57:27:ce:8d:94:33:94:f9:94:8d:81:82:43:
0e:d2:63:f5:66:e2:5f:ed:a6:85:ab:aa:fc:f7:43:
c9:77:a8:bd:63:52:fe:10:7d:74:3d:df:21:b8:87:
63:40:05:69:2e:1b:c8:06:08:c0:e9:48:e1:69:ea:
01:47:d2:52:3c:00:4b:d8:6e:10:73:1f:a5:01:62:
bb:f6:27:bd:b4:ff:9b:4e:51:78:f7:26:7f:f6:de:
b1:c2:d7:31:40:d2:d8:bb:7a:22:87:95:0c:03:24:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:64:CE:18:D9:1B:84:D8:45:41:30:ED:FA:B5:3B:F0:12:36:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e37322e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.72.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:b5:63:82:21:0e:06:58:5a:52:87:cf:21:70:86:cf:e6:ef:
d1:08:c3:59:ac:c4:57:c9:6a:a9:30:00:33:6b:ee:e9:e2:47:
c0:5f:17:7d:62:e5:a7:d9:74:f7:9a:30:f3:d6:87:cc:cd:d2:
2b:9a:c3:55:b1:ee:99:4d:aa:11:fd:12:0d:84:cd:dd:9d:90:
d4:41:e4:77:33:38:33:8c:38:0e:c7:b5:98:9d:e8:0c:08:d7:
23:2d:c7:eb:f9:25:ca:b3:53:57:57:93:cd:b6:e3:3a:f9:19:
83:c8:b2:e4:c9:0a:f0:3d:e3:58:bb:3d:49:c7:37:5a:c6:64:
92:e9:a4:26:a0:10:bd:f6:ba:24:7a:17:b5:10:92:47:ec:2b:
b2:cb:93:31:fd:a1:4c:21:21:a4:85:da:25:26:fd:c1:da:2d:
d3:a6:85:34:4a:8a:d6:a3:fc:c6:b3:f9:3d:b6:4e:2e:8d:03:
8b:fa:e0:15:f8:b5:25:61:d8:bc:04:a7:05:51:3d:3f:e6:be:
51:1b:50:2c:5c:d7:0c:ab:21:dc:32:d7:39:4e:e7:24:ca:42:
1b:ff:0b:3d:b8:6f:45:1a:6e:7d:01:0b:5b:4c:0a:65:41:5b:
ad:30:27:b6:68:96:bd:a9:b7:2c:da:e4:f3:ab:da:00:c5:8e:
84:3f:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:31:39 2026 by rpki-client