Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20323032303336.roa
File: 3134352e37392e3131392e302f32342d3234203d3e20323032303336.roa (raw, json)
Hash identifier: tRBHdQkkwqBnB90+LTcdvrKXo0LxihQCGlWmRHYxVhk=
Subject key identifier: 0A:B0:51:3B:BF:47:80:67:37:F3:29:1D:DF:DB:A1:29:B8:FF:A7:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 158FEC6F50630E624B5E8F85B56C7757F677B575
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20323032303336.roa
Signing time: Tue 19 May 2026 18:24:20 +0000
ROA not before: Tue 19 May 2026 18:19:20 +0000
ROA not after: Tue 18 May 2027 18:24:20 +0000
asID: 202036
IP address blocks: 145.79.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:8f:ec:6f:50:63:0e:62:4b:5e:8f:85:b5:6c:77:57:f6:77:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 19 18:19:20 2026 GMT
Not After : May 18 18:24:20 2027 GMT
Subject: CN=0AB0513BBF47806737F3291DDFDBA129B8FFA701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:4b:f1:2d:90:43:a8:c6:60:0b:9f:dc:99:
8c:b3:8d:61:21:20:99:b6:98:ff:de:46:f3:2f:ce:
37:71:fe:85:b6:94:13:11:cc:e3:fe:35:4f:b3:9b:
35:4e:7e:e8:1f:28:ad:b3:69:c1:4b:11:76:af:4d:
a0:ef:c3:47:05:01:f2:f3:89:4f:c3:f2:2b:a6:e9:
0e:7f:e6:6d:5d:eb:35:21:7b:8e:e4:4a:a1:87:34:
5b:77:fe:45:28:1e:95:9a:9d:02:a0:75:c9:26:00:
dc:e3:d3:0e:48:47:99:3b:94:b9:d5:46:54:13:e7:
a5:4a:5c:81:dd:9e:51:f2:25:2f:04:73:11:76:f6:
07:dd:65:c3:92:0b:c0:47:86:05:07:dd:43:3b:ae:
cb:b8:24:57:41:5c:a7:b6:31:49:40:55:67:d6:88:
63:f7:1d:2e:fd:e4:97:39:fd:a6:63:6d:06:71:2b:
25:53:29:4f:d6:89:34:33:cf:67:13:e7:5c:40:65:
af:4e:52:02:69:f8:3b:7d:bb:a7:11:df:21:ab:7d:
30:1b:6d:3f:b0:98:a8:30:8c:20:44:b3:3d:39:79:
d3:8c:dd:a8:8f:37:45:c1:ff:c8:d1:d8:19:30:7c:
23:94:45:91:b3:a9:6e:6b:f5:7c:ad:5a:f9:ce:de:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:51:3B:BF:47:80:67:37:F3:29:1D:DF:DB:A1:29:B8:FF:A7:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20323032303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dd:93:93:a0:26:ee:39:8e:4a:a5:d3:5d:2b:57:b0:60:3e:
f1:fe:34:a4:95:b6:23:e6:ef:fc:64:44:bf:d3:5f:58:90:7a:
26:d1:81:e1:67:f1:87:00:cb:21:02:d8:45:28:27:c9:90:76:
0b:db:15:70:68:32:46:52:1b:09:6e:be:63:27:2a:56:fc:54:
ce:9a:25:11:3b:c9:7f:ca:c9:e6:cb:06:b9:ed:c8:5c:6c:20:
92:bc:cd:aa:da:c5:1c:68:b0:d9:c3:ec:89:54:b8:66:b5:8d:
fe:68:26:23:14:6b:bd:68:14:a7:f4:76:89:6f:b1:4b:44:9e:
e6:bb:c9:f0:e3:7f:c1:58:32:f6:27:ad:84:80:3c:f8:9c:94:
ed:10:48:ed:d7:45:ce:58:9b:2a:a0:fa:3a:71:1d:ba:b6:eb:
ac:2c:34:be:b6:31:86:34:a4:3d:f8:42:f4:7e:0b:c9:e4:fa:
f9:e4:1f:a1:f1:59:48:3c:5f:7d:ac:01:62:01:55:c6:af:85:
00:be:51:55:e3:f3:89:6b:75:36:dd:9b:a8:de:2c:a0:3e:9c:
20:77:21:bf:4c:b0:b7:ce:c4:8a:61:fb:80:42:53:74:9b:45:
7b:79:61:7e:18:7d:ad:97:24:70:84:8b:21:50:98:b6:b8:5b:
41:7b:2b:9b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFY/sb1BjDmJLXo+FtWx3V/Z3tXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MTkxODE5MjBaFw0yNzA1MTgxODI0MjBaMDMxMTAvBgNV
BAMTKDBBQjA1MTNCQkY0NzgwNjczN0YzMjkxRERGREJBMTI5QjhGRkE3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgkvxLZBDqMZgC5/cmYyzjWEh
IJm2mP/eRvMvzjdx/oW2lBMRzOP+NU+zmzVOfugfKK2zacFLEXavTaDvw0cFAfLz
iU/D8ium6Q5/5m1d6zUhe47kSqGHNFt3/kUoHpWanQKgdckmANzj0w5IR5k7lLnV
RlQT56VKXIHdnlHyJS8EcxF29gfdZcOSC8BHhgUH3UM7rsu4JFdBXKe2MUlAVWfW
iGP3HS795Jc5/aZjbQZxKyVTKU/WiTQzz2cT51xAZa9OUgJp+Dt9u6cR3yGrfTAb
bT+wmKgwjCBEsz05edOM3aiPN0XB/8jR2BkwfCOURZGzqW5r9XytWvnO3pv9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUCrBRO79HgGc38ykd39uhKbj/pwEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMx
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzMDMzMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT3cwDQYJKoZIhvcNAQELBQADggEBAIrdk5OgJu45jkql010rV7BgPvH+NKSV
tiPm7/xkRL/TX1iQeibRgeFn8YcAyyEC2EUoJ8mQdgvbFXBoMkZSGwluvmMnKlb8
VM6aJRE7yX/KyebLBrntyFxsIJK8zaraxRxosNnD7IlUuGa1jf5oJiMUa71oFKf0
dolvsUtEnua7yfDjf8FYMvYnrYSAPPiclO0QSO3XRc5Ymyqg+jpxHbq266wsNL62
MYY0pD34QvR+C8nk+vnkH6HxWUg8X32sAWIBVcavhQC+UVXj84lrdTbdm6jeLKA+
nCB3Ib9MsLfOxIph+4BCU3SbRXt5YX4Yfa2XJHCEiyFQmLa4W0F7K5s=
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:01 2026 by rpki-client