Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TrMEn5jNKkRjtVocgnkQRhp8Mxy/u+0fr1RbMlhuFY0=
Subject key identifier: 25:7C:49:E2:ED:A2:3D:6A:1D:C8:DD:85:9C:7A:9C:40:B7:AB:85:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 767B044FBE8BF5A434E52745D578A2786953FBDD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
Signing time: Mon 30 Mar 2026 09:28:25 +0000
ROA not before: Mon 30 Mar 2026 09:23:25 +0000
ROA not after: Mon 29 Mar 2027 09:28:25 +0000
asID: 834
IP address blocks: 145.79.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7b:04:4f:be:8b:f5:a4:34:e5:27:45:d5:78:a2:78:69:53:fb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 30 09:23:25 2026 GMT
Not After : Mar 29 09:28:25 2027 GMT
Subject: CN=257C49E2EDA23D6A1DC8DD859C7A9C40B7AB85EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:67:42:87:67:7a:8a:63:1f:19:24:d4:f9:
9b:84:61:f0:f2:74:c4:3e:7a:bc:50:6f:b5:9f:9b:
05:f3:f6:ec:ee:7c:4b:49:91:d8:b0:2f:4f:06:72:
67:a7:bd:60:05:08:ec:b0:49:82:58:57:4b:d1:02:
dd:11:2d:30:63:10:9b:13:a4:c8:33:c2:e3:8b:bb:
2a:7c:61:78:aa:89:87:59:a6:dc:ee:c9:94:e2:4c:
1d:ad:3b:14:b7:56:58:79:d4:06:10:d7:1e:07:c5:
ed:8a:e7:87:22:17:c2:36:05:9a:8a:54:fa:b6:b3:
77:c0:ac:97:b5:4e:59:47:74:30:20:59:ac:1d:e5:
f5:ad:b6:2b:1c:23:6b:82:82:3d:d8:c8:95:47:e6:
f1:1c:e5:3d:52:41:36:0c:31:de:41:65:b1:5f:4f:
a5:fb:fb:02:a1:ac:8b:80:7d:b6:99:d1:75:05:a1:
00:ad:20:3a:27:a7:78:70:a8:ff:fb:f5:71:ee:8c:
c4:15:e6:ef:6b:10:90:22:a3:25:c5:dd:0d:cc:12:
03:84:36:d4:c0:01:e1:f7:18:8f:42:20:28:ed:8a:
ac:7d:70:5b:85:f0:d1:52:9b:c8:29:9f:d4:a7:4c:
48:a0:25:5a:73:1b:8d:d8:41:0a:4b:31:99:d1:be:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:49:E2:ED:A2:3D:6A:1D:C8:DD:85:9C:7A:9C:40:B7:AB:85:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.128.0/24
Signature Algorithm: sha256WithRSAEncryption
74:49:31:81:9c:d2:b2:7b:a4:9d:73:12:ff:54:39:09:51:1a:
12:8d:74:8e:e6:6f:1d:be:d0:49:4c:65:0f:23:01:37:a1:33:
03:d8:77:c7:2e:db:11:e0:e8:81:85:2e:17:7f:8e:12:86:e9:
f5:71:cb:d6:fa:9d:43:34:5c:f8:e8:fc:5c:eb:fe:2b:05:f1:
d8:8f:3d:82:42:73:ea:7b:35:da:5c:68:e3:89:02:59:75:c6:
41:19:94:50:46:cb:e4:27:89:af:9f:01:91:35:4f:35:33:70:
7d:9b:57:74:fa:f9:31:25:39:ff:c8:48:6a:1e:85:0e:2e:8e:
37:97:50:e9:79:9d:8a:34:67:bd:a0:d2:2c:8b:42:6f:d1:db:
b6:c4:a9:2a:c3:c8:68:46:e1:b8:e8:9d:61:b6:12:91:b7:92:
0b:02:74:bf:1b:d3:cb:1a:1d:25:3e:c9:85:08:b3:85:54:d7:
de:a5:35:c5:ea:36:e9:db:56:d7:42:24:d1:71:06:05:5a:60:
a4:c1:00:53:de:5e:d7:f6:0f:2a:40:9b:d2:72:c2:91:dd:95:
d3:4e:ea:0a:97:c7:ca:b7:a9:da:57:0f:80:c3:62:38:ee:f5:
42:0a:15:57:3b:d0:01:71:95:8b:fe:de:e8:ef:c6:ec:70:df:
c1:37:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:24:00 2026 by rpki-client