Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e39362e302f32312d3234203d3e2035363530.roa
File: 3134352e31312e39362e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: 3SQ9sVyLDJIZxpsFjBzA7mRaBtYfu+X4jeaUd5wkJuA=
Subject key identifier: 08:CA:4D:C3:2B:FD:62:1A:50:9D:75:F8:03:C5:C8:78:DD:F1:7E:29
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3EBFDBB12AA7CE12AAEC17A209DD48D632D8952B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e39362e302f32312d3234203d3e2035363530.roa
Signing time: Fri 14 Aug 2026 13:27:59 +0000
ROA not before: Fri 14 Aug 2026 13:22:59 +0000
ROA not after: Fri 13 Aug 2027 13:27:59 +0000
asID: 5650
IP address blocks: 145.11.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:bf:db:b1:2a:a7:ce:12:aa:ec:17:a2:09:dd:48:d6:32:d8:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 14 13:22:59 2026 GMT
Not After : Aug 13 13:27:59 2027 GMT
Subject: CN=08CA4DC32BFD621A509D75F803C5C878DDF17E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2c:fd:fc:9b:2d:0b:17:db:29:c9:ca:64:d6:
e5:43:7d:ce:a5:86:59:db:ab:93:c7:56:f7:fe:01:
10:18:42:2c:bc:cd:60:e9:96:19:38:21:1c:16:fa:
d2:d1:5c:a2:f9:3b:05:36:a0:92:90:e7:6b:41:7a:
6c:38:c9:5b:d5:62:e9:7e:78:c0:04:f2:77:08:89:
c5:d5:0d:ad:03:6a:a7:fd:c7:d8:c8:59:2b:4c:33:
24:73:b2:7e:fa:63:58:f1:3c:78:8c:04:45:dc:04:
91:4d:5e:0b:e7:c2:91:e7:2e:71:0b:4d:3a:8e:01:
e3:82:19:0c:65:76:3d:b5:77:0f:d4:c2:ee:b6:3c:
39:6a:cd:f4:7d:1b:9d:c7:4f:0c:4b:03:db:70:16:
63:0c:d4:4f:1c:14:ac:14:00:88:b5:e4:e1:e0:2b:
78:d1:31:4d:6b:52:5f:40:cb:5c:55:2e:62:fe:1d:
12:e4:72:ac:9b:7c:33:bb:ee:34:d8:d2:d0:55:f6:
c5:80:78:4f:b5:1c:44:74:e7:e3:db:10:33:83:fa:
d4:29:06:91:6b:f4:64:02:27:b5:d4:21:d6:10:ae:
12:db:dc:a7:50:e9:98:06:38:6f:4c:c7:c1:15:bb:
7a:22:cc:ca:0a:c0:65:c2:e7:5d:77:7c:47:d2:4a:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:4D:C3:2B:FD:62:1A:50:9D:75:F8:03:C5:C8:78:DD:F1:7E:29
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e39362e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.96.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:d1:2d:a3:17:c4:18:85:21:d1:91:99:e4:62:b8:78:8e:4d:
ca:55:b6:1f:69:ab:fa:2a:53:74:65:44:f4:2f:dd:a4:e9:a2:
67:95:02:13:46:f7:25:7d:5b:3d:62:ea:2e:34:9b:b4:16:3f:
d5:45:a4:07:88:aa:25:0c:2a:2c:5d:02:23:6b:db:29:eb:e0:
ca:0f:09:ce:44:2a:f7:f2:0d:b3:17:24:3a:f1:b3:e2:af:25:
3f:b4:00:1a:6f:8d:ba:9f:96:a7:fb:45:55:6c:d5:79:82:f4:
5e:30:db:7e:c5:4e:de:fb:d3:0d:80:b6:eb:85:cd:1c:84:ba:
94:df:43:5b:5a:f2:b5:0a:a7:06:be:53:c4:91:c1:3a:34:4b:
d2:40:0f:a4:03:21:a2:75:42:f3:24:1a:1f:59:cf:53:6c:53:
d4:7b:68:b8:d0:f4:a4:59:5f:2a:b3:5c:61:0c:e8:61:89:8e:
3a:cc:11:67:99:ec:18:6d:b5:8f:96:1d:fe:a9:9d:5e:6a:7a:
9a:a2:c2:6e:a2:5d:ca:c8:02:95:9e:69:93:df:ad:b6:d7:bd:
d8:8d:ae:43:9f:72:0a:84:b8:3b:82:f7:23:0c:c6:43:16:a6:
be:48:da:8e:57:ff:bc:bf:98:8b:b4:f8:c4:cc:9b:5a:b8:0b:
00:a4:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:31:22 2026 by rpki-client