Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e20343031373833.roa
File: 3134352e37392e3130312e302f32342d3234203d3e20343031373833.roa (raw, json)
Hash identifier: 4/ojbv0qWnDWQuz2cT1ivYlskad6L86NHzBkO7X3S6I=
Subject key identifier: 66:0F:93:D7:13:33:54:7E:58:2D:28:45:23:B8:85:F4:9F:1A:61:B6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39C43131E6285785422795674A2D078F46A7E294
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e20343031373833.roa
Signing time: Wed 04 Mar 2026 12:17:44 +0000
ROA not before: Wed 04 Mar 2026 12:12:44 +0000
ROA not after: Wed 03 Mar 2027 12:17:44 +0000
asID: 401783
IP address blocks: 145.79.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c4:31:31:e6:28:57:85:42:27:95:67:4a:2d:07:8f:46:a7:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 12:12:44 2026 GMT
Not After : Mar 3 12:17:44 2027 GMT
Subject: CN=660F93D71333547E582D284523B885F49F1A61B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:cb:90:92:7f:60:f7:6f:35:64:eb:54:d4:
a1:14:a5:cc:a0:4a:23:f3:b1:12:4b:9e:a8:8f:26:
f5:e1:1f:d3:2c:67:86:93:7d:6b:9f:d1:74:d4:0f:
a8:c7:8c:c5:f7:9d:75:b0:94:2a:a7:37:6a:1a:95:
5f:8d:ed:bb:51:6e:07:0a:f8:9d:85:a1:40:45:8a:
c9:f8:7a:eb:8e:76:b7:5a:47:da:dc:25:8d:fc:28:
89:7b:f3:30:c1:1a:86:fb:5e:dd:e4:8c:ce:24:06:
0c:5e:1b:d2:39:58:af:cc:1b:29:30:37:ee:6c:bb:
52:2b:e3:b4:68:be:65:d1:77:0a:ee:e4:a9:2f:dd:
33:bb:62:f6:f8:10:22:8e:8f:af:8b:72:ac:3d:dc:
7d:40:fe:a1:d0:c2:db:28:78:d1:91:bb:b2:39:12:
c2:9c:0e:9b:2f:17:87:1e:fe:2b:58:1b:25:df:ec:
79:92:84:1c:d6:82:26:cf:56:12:c6:95:ae:5b:46:
e5:a1:a6:95:9b:93:9d:93:3a:f0:1d:58:ca:ed:3f:
98:48:05:68:5e:4c:74:a6:5b:b5:93:7e:28:17:45:
78:d4:d2:c7:a1:9e:a7:e6:91:cc:75:b7:ac:65:95:
21:ce:e8:46:b7:44:b6:cf:8a:a5:9c:94:32:21:57:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:93:D7:13:33:54:7E:58:2D:28:45:23:B8:85:F4:9F:1A:61:B6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e20343031373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.101.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ba:00:f8:ac:88:87:44:96:70:01:5d:26:fa:4a:b9:49:03:
81:16:82:7d:db:47:48:ef:8f:9b:3c:3d:97:c5:58:27:c8:83:
9a:c9:db:d3:f8:42:2c:57:e3:e8:8f:d7:bd:38:ee:7d:0d:07:
ab:6f:92:1c:f3:40:57:43:ab:0c:62:3d:75:de:13:e0:36:32:
0e:37:ec:6f:5d:7b:96:2b:5d:16:45:6a:ec:bb:7b:be:e8:cd:
bc:e5:bd:6a:76:74:b5:51:c3:8a:b4:03:e6:ae:36:73:3f:f9:
2f:32:90:a1:37:f0:db:50:92:46:15:b3:1f:1f:a3:54:79:e2:
14:14:96:2a:c8:9b:44:fd:79:02:78:e0:0d:15:db:5c:bb:6a:
24:85:2e:b9:b5:8b:1e:48:9d:f5:33:64:8f:d3:94:1d:41:0f:
7d:31:49:06:94:7a:b5:08:5f:03:22:15:b8:bb:70:ff:b3:04:
8d:4b:e6:42:96:78:36:46:5f:c2:12:3a:1b:b0:78:e1:c1:7b:
ab:83:8a:1c:8d:2c:a1:27:18:46:0c:06:8f:43:43:4d:d3:d6:
aa:b2:78:cb:b7:20:6a:fa:b6:af:e9:d5:3e:c4:47:83:9f:04:
96:23:5e:45:45:ee:79:77:c9:08:22:41:e6:f7:a6:70:77:e5:
2e:38:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:01:37 2026 by rpki-client