Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20323032303336.roa
File: 3134352e37392e3131352e302f32342d3234203d3e20323032303336.roa (raw, json)
Hash identifier: 1gkRTdqkl8eXLM9xVqf81bLlQDyb5tyvwXrCopYTysE=
Subject key identifier: EA:E5:2B:20:75:D1:9B:C7:10:92:BE:45:13:8C:31:A6:AA:17:00:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 553751FFA792F4C401C649195DDEF8FAC68F6136
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20323032303336.roa
Signing time: Tue 19 May 2026 18:24:12 +0000
ROA not before: Tue 19 May 2026 18:19:12 +0000
ROA not after: Tue 18 May 2027 18:24:12 +0000
asID: 202036
IP address blocks: 145.79.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:37:51:ff:a7:92:f4:c4:01:c6:49:19:5d:de:f8:fa:c6:8f:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 19 18:19:12 2026 GMT
Not After : May 18 18:24:12 2027 GMT
Subject: CN=EAE52B2075D19BC71092BE45138C31A6AA170000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:80:94:93:08:1b:31:55:30:7d:31:31:d9:
74:16:23:1c:50:d9:c5:5f:12:7b:dc:5c:7e:1d:fe:
88:2b:8b:81:f5:b4:78:9e:34:2b:23:14:1f:06:22:
e5:8f:00:1b:b7:ca:45:60:ea:ac:1c:cc:ca:cf:fe:
fc:51:79:8b:4c:a4:37:97:05:6b:25:5e:9f:8e:e0:
3b:55:35:5e:0b:19:9d:ef:56:97:eb:d5:9a:f4:7e:
33:43:18:f0:70:5c:73:7f:9b:91:9b:ae:7e:26:25:
53:1d:2e:68:74:0c:87:43:9b:6c:10:d9:1d:d9:e6:
aa:f8:b4:b2:93:5b:98:f7:a6:c8:9a:98:cd:4e:8c:
62:8d:42:6b:ff:e5:0e:61:e2:38:6a:b6:a2:7d:5f:
fa:fd:e0:d6:be:55:fc:9a:78:9a:c7:43:2c:3c:ef:
54:48:ea:d5:40:15:fa:ff:f9:62:88:e4:f9:7c:5b:
72:60:11:31:e4:8a:74:b7:12:56:50:83:74:b3:60:
c9:20:27:9a:ba:92:bb:ef:8f:25:e7:22:ec:20:f7:
e1:ca:03:a9:ef:5a:e8:fd:35:bd:5f:e4:6b:41:2f:
9e:d9:c1:31:e7:02:4d:2e:00:bc:ac:97:4c:77:d4:
65:5f:2a:09:36:ad:6e:d4:79:c6:36:a0:af:6d:6a:
c2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:2B:20:75:D1:9B:C7:10:92:BE:45:13:8C:31:A6:AA:17:00:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20323032303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.115.0/24
Signature Algorithm: sha256WithRSAEncryption
94:d2:1c:41:dc:c5:8d:80:8f:73:f2:e9:13:5b:37:3b:d9:d6:
f7:18:6b:49:95:23:2b:b3:39:b6:3a:74:13:52:b5:4b:92:16:
55:cc:59:b6:12:82:f1:5f:c6:a9:ce:e5:8f:6c:57:4f:e7:37:
84:4e:3d:3e:0e:ce:d3:e0:48:06:6d:fa:52:00:09:49:05:7b:
b1:7b:0e:1a:4d:a8:d8:d5:8d:2b:70:9a:af:97:55:2c:10:e8:
db:61:77:98:2b:d0:cd:d2:36:a5:5c:16:d8:4d:57:24:fd:a0:
a7:c9:c7:22:6c:e7:ad:fd:15:e2:f1:88:83:69:84:06:e6:2d:
eb:5d:b7:c8:11:85:e3:5f:68:c5:f7:3c:fa:be:c0:e1:0a:a9:
41:1f:78:69:97:f1:5b:6e:b5:5e:d0:58:a8:24:7b:62:1f:04:
2a:84:23:24:b5:06:be:b2:b3:81:b4:64:c2:e6:69:ea:51:0d:
7d:0e:d4:c3:e6:aa:71:9e:3a:0f:30:eb:05:ee:87:ae:28:4c:
96:64:37:42:d7:28:d1:5c:14:64:c9:c0:5b:45:b7:0b:96:c2:
0d:6d:94:6c:da:58:d0:2d:2b:77:f5:6a:3c:68:71:5c:d5:5a:
55:39:c0:68:c4:48:03:b5:b4:fe:3b:6f:30:9c:2e:2b:7f:0b:
25:de:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:01 2026 by rpki-client