Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e203133353337.roa
File: 3134352e37392e3132382e302f32342d3234203d3e203133353337.roa (raw, json)
Hash identifier: e8xYoYCneubLFaWwYr9nBSn7qsL2dZNcNNaTLPGbT3A=
Subject key identifier: 9A:7F:BA:F1:18:6F:61:D7:E3:96:84:13:2B:62:0D:5B:5D:C7:CB:F4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C8DB5F0CB91B5AC0E4288053EEF19C162D700D9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e203133353337.roa
Signing time: Mon 24 Aug 2026 09:38:08 +0000
ROA not before: Mon 24 Aug 2026 09:33:08 +0000
ROA not after: Mon 23 Aug 2027 09:38:08 +0000
asID: 13537
IP address blocks: 145.79.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8d:b5:f0:cb:91:b5:ac:0e:42:88:05:3e:ef:19:c1:62:d7:00:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:33:08 2026 GMT
Not After : Aug 23 09:38:08 2027 GMT
Subject: CN=9A7FBAF1186F61D7E39684132B620D5B5DC7CBF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:d6:c8:f3:7e:d2:aa:96:f5:cc:8c:0a:4b:
25:32:fd:0b:bc:da:46:b7:ae:42:21:0c:85:d6:8b:
b1:d1:fd:7b:5f:16:c9:cf:95:d5:b0:7e:ca:4c:08:
97:2d:66:94:79:43:c1:57:d1:46:a7:03:e5:d9:6a:
dd:8f:99:bd:e9:5d:56:53:c7:f5:a3:9e:1c:cc:44:
5a:fb:78:34:cf:20:c7:7c:0c:1d:7f:d4:43:66:23:
a8:f6:58:bc:11:18:e1:af:59:e4:ea:a9:ad:89:c1:
91:b5:e6:20:85:8b:e9:ed:98:f2:78:ba:4d:7c:e2:
2d:41:c2:c1:03:19:ca:ad:31:41:94:8f:41:bd:f8:
56:a2:52:b6:b7:93:f7:0d:b0:97:f6:b2:25:d3:22:
c7:41:78:a9:f6:e0:c5:16:9a:44:a7:56:77:d3:0e:
1c:54:e6:60:8b:a9:ba:ec:db:4e:88:2d:53:76:4c:
6f:6d:72:bc:34:d0:7c:f8:be:fe:92:6e:17:09:ef:
bd:da:18:0c:d7:c5:c3:6c:ed:d7:7c:6a:84:89:ad:
bf:ff:68:89:56:1f:7b:56:9d:04:6c:d0:20:96:05:
e3:3e:d6:39:93:e9:0b:f2:2f:57:cb:41:9a:51:69:
6c:a7:4e:d4:af:02:e6:34:d7:51:e0:fc:8f:b9:9e:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:BA:F1:18:6F:61:D7:E3:96:84:13:2B:62:0D:5B:5D:C7:CB:F4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e203133353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:bb:87:ae:17:9b:29:1e:f4:2f:7c:ae:3d:b6:4c:45:c0:b0:
e2:c4:b9:7a:39:be:93:64:11:58:4d:51:44:e0:60:9e:2c:04:
a0:53:32:99:97:dc:9a:13:d9:65:a7:b2:ed:9a:3b:18:35:8c:
71:41:e5:59:40:b0:c9:5d:84:f1:1d:6d:6b:4e:ea:39:44:07:
b6:78:a7:8b:77:87:bc:e2:bd:56:de:7e:5e:9c:0f:ee:ac:47:
e8:05:28:8f:35:14:1d:d5:ed:96:17:20:cc:c3:35:00:d7:50:
4c:41:8d:5f:89:3a:70:15:60:ae:95:4d:30:4d:8e:6d:4b:31:
22:4f:51:82:b2:fa:c6:d3:6e:ea:02:4d:49:a0:cf:07:63:3e:
a9:e3:2d:40:2c:4c:fd:ce:66:27:a6:2c:7d:fa:ae:65:2a:8f:
c6:3e:99:2f:93:09:a5:67:a0:47:e3:56:eb:aa:87:ae:ad:2f:
7c:3a:24:12:2d:fa:f3:68:fe:bd:22:7b:ca:16:f0:47:43:e1:
ed:2b:fa:f6:4f:6a:92:c6:01:30:eb:ee:37:e6:c2:ce:cd:d1:
fa:9c:76:7b:fa:98:e2:4d:33:7a:78:fa:06:af:59:e5:f3:1a:
45:c1:ff:1a:6e:b9:91:6f:4f:c5:10:85:96:2f:31:97:ca:3b:
96:66:ad:d9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDI218MuRtawOQogFPu8ZwWLXANkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjQwOTMzMDhaFw0yNzA4MjMwOTM4MDhaMDMxMTAvBgNV
BAMTKDlBN0ZCQUYxMTg2RjYxRDdFMzk2ODQxMzJCNjIwRDVCNURDN0NCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvNbI837Sqpb1zIwKSyUy/Qu8
2ka3rkIhDIXWi7HR/XtfFsnPldWwfspMCJctZpR5Q8FX0UanA+XZat2Pmb3pXVZT
x/WjnhzMRFr7eDTPIMd8DB1/1ENmI6j2WLwRGOGvWeTqqa2JwZG15iCFi+ntmPJ4
uk184i1BwsEDGcqtMUGUj0G9+FaiUra3k/cNsJf2siXTIsdBeKn24MUWmkSnVnfT
DhxU5mCLqbrs206ILVN2TG9tcrw00Hz4vv6SbhcJ773aGAzXxcNs7dd8aoSJrb//
aIlWH3tWnQRs0CCWBeM+1jmT6QvyL1fLQZpRaWynTtSvAuY011Hg/I+5nsw/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUmn+68RhvYdfjloQTK2INW13Hy/QwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU+AMA0GCSqGSIb3DQEBCwUAA4IBAQA6u4euF5spHvQvfK49tkxFwLDixLl6Ob6T
ZBFYTVFE4GCeLASgUzKZl9yaE9llp7LtmjsYNYxxQeVZQLDJXYTxHW1rTuo5RAe2
eKeLd4e84r1W3n5enA/urEfoBSiPNRQd1e2WFyDMwzUA11BMQY1fiTpwFWCulU0w
TY5tSzEiT1GCsvrG027qAk1JoM8HYz6p4y1ALEz9zmYnpix9+q5lKo/GPpkvkwml
Z6BH41brqoeurS98OiQSLfrzaP69InvKFvBHQ+HtK/r2T2qSxgEw6+435sLOzdH6
nHZ7+pjiTTN6ePoGr1nl8xpFwf8abrmRb0/FEIWWLzGXyjuWZq3Z
-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:29 2026 by rpki-client