Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e20323032373336.roa
File: 3134352e31312e38382e302f32312d3234203d3e20323032373336.roa (raw, json)
Hash identifier: L5aptRz/5A5xGBph2S2uR0qVHL9ThztnkVPvTHjv38M=
Subject key identifier: E3:B3:C2:26:18:53:15:36:AA:59:0E:98:5A:4F:5E:C9:A0:83:33:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C4D13F123718DF60D30C6A032A5A260D1A7E20B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e20323032373336.roa
Signing time: Wed 05 Aug 2026 09:50:42 +0000
ROA not before: Wed 05 Aug 2026 09:45:42 +0000
ROA not after: Wed 04 Aug 2027 09:50:42 +0000
asID: 202736
IP address blocks: 145.11.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4d:13:f1:23:71:8d:f6:0d:30:c6:a0:32:a5:a2:60:d1:a7:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 5 09:45:42 2026 GMT
Not After : Aug 4 09:50:42 2027 GMT
Subject: CN=E3B3C22618531536AA590E985A4F5EC9A08333B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:4f:b2:ef:01:88:fd:74:e2:e3:72:f1:39:
17:8a:0d:f2:87:07:f9:de:17:8e:6a:4b:ff:16:4a:
71:97:15:48:3d:67:df:f2:f6:ce:60:84:82:f7:73:
5e:5a:15:c0:fa:02:c8:1b:d9:4f:dd:e6:95:f5:90:
74:4d:a0:ef:e3:5b:ff:64:c5:25:7c:ea:8b:03:fb:
8b:3f:7a:40:06:35:0c:79:fc:31:63:33:98:e9:a4:
8f:65:ca:04:f1:71:cc:a7:aa:a1:12:10:ef:93:7c:
bf:59:69:97:df:60:f2:0b:8c:33:e6:9c:8c:d7:e2:
15:6a:e9:85:9c:5d:20:ae:7a:36:68:e4:56:7e:c3:
bd:1b:16:7e:8b:ba:3f:36:60:d0:05:17:12:ce:87:
59:d2:dd:67:08:9b:fa:6f:9b:08:30:86:18:b9:39:
30:b6:32:e4:43:62:eb:cf:c3:79:d4:6c:b1:1f:2b:
65:ef:ee:4b:0f:db:43:c3:ae:ba:df:45:1d:83:59:
03:c1:b8:2d:ce:b1:d9:12:ce:95:c1:86:c2:0f:16:
2b:24:75:83:6b:6c:f3:0d:11:aa:c4:a1:42:ce:0f:
45:b0:f5:35:b9:f0:e4:74:21:21:29:b0:d5:e9:b1:
b6:c9:9d:db:9e:9e:d4:ae:3c:e7:5a:64:90:94:48:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:C2:26:18:53:15:36:AA:59:0E:98:5A:4F:5E:C9:A0:83:33:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e20323032373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.88.0/21
Signature Algorithm: sha256WithRSAEncryption
30:bf:d3:39:24:7e:ba:37:e7:71:71:15:7b:bd:7a:83:95:2e:
d7:92:4b:60:17:ef:68:7a:e8:a0:52:f7:cd:6d:0a:52:08:17:
6b:57:a5:05:9c:38:67:86:e7:3a:59:04:be:57:58:33:5b:6e:
ec:bf:cf:be:50:2a:9b:6b:65:2f:c7:db:44:d7:05:85:89:13:
33:77:80:0d:d3:14:5a:b0:c0:c0:1d:a9:09:84:74:ef:68:6b:
45:69:a7:07:cd:66:56:fc:e7:fc:76:f4:49:57:49:f4:26:64:
b5:12:2a:60:89:6e:02:ae:18:f0:e6:f7:73:ab:a8:28:af:1c:
d5:c1:bd:86:c3:3f:b0:3b:3c:be:6f:83:84:dc:46:81:ef:89:
09:3c:43:fd:73:ac:e2:26:03:fe:21:68:81:4f:95:85:0e:fa:
30:2f:5e:8e:7f:19:06:28:a3:d0:e6:d2:f1:fc:43:69:88:77:
2a:85:9e:a7:2c:bd:bd:be:33:57:bf:ef:28:7b:cf:a4:47:35:
5c:67:2a:93:be:b2:d7:3b:99:64:d7:75:27:38:53:db:de:1d:
3f:b8:11:20:d3:62:e7:c4:d0:a9:de:cf:1e:c4:2c:69:ac:9e:
b2:e0:b2:5b:0e:23:f8:a4:8c:9c:bf:8b:58:bd:df:88:f4:a5:
11:8e:59:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:14 2026 by rpki-client