Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e20313734.roa
File: 3134352e31312e38382e302f32312d3234203d3e20313734.roa (raw, json)
Hash identifier: yzefiMpOp3iK7ICGe6YgBxC30q0VBSsSZZ6a4MS5kps=
Subject key identifier: FE:EF:46:77:CF:1A:79:38:C2:E5:61:77:C8:4F:99:7C:E0:12:CF:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74CF2CDAB8A3839D1B62D9EBB3EB6ABD0C345DEA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e20313734.roa
Signing time: Wed 05 Aug 2026 09:50:44 +0000
ROA not before: Wed 05 Aug 2026 09:45:44 +0000
ROA not after: Wed 04 Aug 2027 09:50:44 +0000
asID: 174
IP address blocks: 145.11.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:cf:2c:da:b8:a3:83:9d:1b:62:d9:eb:b3:eb:6a:bd:0c:34:5d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 09:45:44 2026 GMT
Not After : Aug 4 09:50:44 2027 GMT
Subject: CN=FEEF4677CF1A7938C2E56177C84F997CE012CFAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:09:11:f5:fb:e1:f4:bb:1b:c1:5d:6d:07:
53:b7:f8:3f:61:f5:e8:4e:4f:b6:8c:a1:3f:84:1f:
fa:f6:e5:46:84:5f:a5:fa:27:89:c9:0b:58:b0:7e:
de:00:87:74:9e:14:be:cf:de:eb:93:ff:32:f1:95:
1d:51:42:a8:d3:8b:a2:7c:42:dd:3b:a3:77:3b:db:
68:5c:00:21:ea:a3:63:66:08:0d:f1:39:1a:1b:56:
fe:10:2e:61:bc:56:63:f9:ac:6d:a5:ca:96:26:9b:
00:fd:96:96:87:b0:e7:47:99:84:a0:8b:99:73:fa:
f1:b4:68:28:b1:fc:d8:0d:6d:8d:ee:01:b1:70:fd:
bf:9d:3b:6a:6d:40:1c:82:35:5c:c8:56:59:d3:22:
58:81:65:cd:b6:67:c1:e5:b9:9e:32:92:00:50:ca:
55:d2:b4:ca:ef:d7:55:35:5d:d8:d6:fc:32:d8:5b:
d8:ec:bc:f9:f5:55:6e:43:a2:ee:05:17:c9:31:6e:
6b:06:87:90:9e:1a:f0:a4:ea:95:9e:21:f1:c0:ad:
61:34:0a:4f:c8:66:50:7e:53:77:44:1d:55:98:37:
97:90:54:b8:73:3f:87:32:a4:67:b2:d5:73:b4:c2:
a5:4e:9c:f9:4d:ec:f3:9a:c4:f1:0c:ae:11:3f:38:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:46:77:CF:1A:79:38:C2:E5:61:77:C8:4F:99:7C:E0:12:CF:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.88.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:1a:13:05:7e:14:95:15:5c:35:e0:2a:2d:a9:8c:9b:42:a2:
00:eb:73:e1:dc:c2:b2:39:b5:12:99:b4:66:c9:94:6f:32:2d:
ce:16:1a:65:52:28:08:f5:ed:76:ed:e8:9a:b6:32:be:4a:c8:
fe:d8:35:bf:94:5a:d2:23:2f:12:af:a7:8c:6a:05:32:0e:66:
92:7b:ff:e6:02:7f:59:72:3d:40:57:76:6b:df:e6:0b:23:ca:
c1:82:11:64:47:c3:7e:c3:6d:dc:66:af:71:37:49:19:57:96:
2f:31:5c:ac:7b:5f:3a:c2:5a:1a:50:fb:32:cd:50:66:51:cc:
e6:15:5b:be:b0:9f:61:88:38:2c:0a:54:4e:3d:52:35:30:ad:
ad:4e:b4:00:7b:3e:fa:86:52:a2:4a:9f:70:cf:79:2b:ff:8f:
53:fb:43:20:ff:04:eb:9a:71:c3:79:34:02:86:7e:25:be:ad:
6f:31:90:a3:64:bf:2a:b9:fa:07:2a:9e:93:6f:99:87:47:3a:
bb:76:62:85:0f:8c:45:c2:93:61:8a:d8:9c:5c:c4:26:41:d1:
19:dd:e0:78:12:6d:13:ae:0b:32:a5:c0:04:1b:80:b8:cf:aa:
8b:f7:d9:29:12:09:ba:e0:e8:ae:e3:91:c1:d0:9f:ce:52:6f:
f5:f5:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:55:43 2026 by rpki-client