Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133302e302f32342d3234203d3e2035303635.roa
File: 3134352e37392e3133302e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: FlkHaYUabECj6BLipswlD4DQUpI5X4yjo6haRCn0G84=
Subject key identifier: C0:90:EB:B4:5C:DF:E4:D8:B1:E3:C6:CE:D0:FE:E4:29:D7:57:01:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B85974014DB08327731ACBD6098B9A5BC833365
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133302e302f32342d3234203d3e2035303635.roa
Signing time: Fri 15 May 2026 05:24:12 +0000
ROA not before: Fri 15 May 2026 05:19:12 +0000
ROA not after: Fri 14 May 2027 05:24:12 +0000
asID: 5065
IP address blocks: 145.79.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:85:97:40:14:db:08:32:77:31:ac:bd:60:98:b9:a5:bc:83:33:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 05:19:12 2026 GMT
Not After : May 14 05:24:12 2027 GMT
Subject: CN=C090EBB45CDFE4D8B1E3C6CED0FEE429D75701C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:d1:0e:92:c6:1b:f9:44:0c:64:d3:22:47:
c2:ed:ec:34:d9:2d:bd:aa:7b:99:00:43:43:c9:06:
54:29:82:c2:cd:cf:48:53:45:e0:35:c4:11:04:0b:
bb:63:d6:50:31:34:0c:e7:e7:8e:f3:1a:53:f0:74:
35:ea:65:17:af:8e:70:7e:6f:2c:3f:91:a1:7b:a8:
74:e4:4b:d4:4e:05:61:80:d9:11:8f:d6:f3:94:7c:
ae:3f:7b:7c:7d:c9:98:54:7b:3b:5b:a0:60:a2:46:
d8:f2:6d:a2:27:f0:78:33:29:3f:6d:c5:86:5f:9f:
b5:2a:b8:7f:c5:26:6c:37:0a:d8:a1:39:10:59:56:
f4:f9:04:b7:ed:92:0b:16:46:cd:0e:40:76:f7:98:
10:e1:8e:32:22:ac:d0:7c:22:76:61:69:f4:4b:4d:
3e:2e:cc:b8:1e:7b:0a:c2:47:88:45:f7:67:df:5f:
73:48:3f:10:fe:39:b5:52:d0:f1:dc:22:70:f3:8b:
85:7f:1e:e3:c8:72:18:ad:10:d9:00:48:7e:f9:3f:
38:dd:5e:21:4b:fc:98:6c:04:d7:50:3f:e6:e4:ec:
0f:eb:50:97:5b:6c:cd:63:3d:32:6f:ba:d3:c7:23:
11:2e:5c:6f:08:c9:94:b8:92:d7:75:46:c9:81:38:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:EB:B4:5C:DF:E4:D8:B1:E3:C6:CE:D0:FE:E4:29:D7:57:01:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133302e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.130.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2f:27:e3:99:16:eb:e3:73:30:47:4a:1c:17:2c:d2:49:97:
c5:ff:b1:fa:cf:f4:67:49:81:44:11:78:2a:89:e7:c3:1c:a7:
8d:1c:e7:6e:81:4b:4d:ca:49:d5:49:d6:20:19:e0:48:1d:2c:
1d:8a:cd:16:19:a9:3e:7a:67:fc:69:ad:92:36:18:48:e6:ed:
77:f9:74:73:bf:33:d9:a6:03:c0:c2:83:2d:2a:4f:8f:62:26:
dc:c5:4f:74:d9:d4:3f:b2:26:5f:c1:99:ed:55:fc:72:96:c0:
b5:67:a8:5c:9e:e5:f5:69:e9:6f:c8:fc:e7:b1:26:59:4b:08:
57:32:e5:8d:0b:a1:4a:62:fe:cf:e0:3e:0e:ea:8a:54:cd:45:
80:ed:3d:42:a6:05:ff:e4:b1:7e:d3:76:10:e4:6f:cd:23:6f:
7d:aa:1d:db:72:4f:5b:fa:dd:5d:fd:5b:55:1f:02:e6:dc:d7:
26:e5:2a:4e:e2:1b:5e:a5:0b:c8:b4:18:ca:ed:2b:89:0b:63:
4b:cc:14:ee:58:e9:89:c1:3b:16:61:2a:eb:df:16:fb:d3:39:
9b:e7:fd:29:cb:4d:2a:77:ca:2a:1c:87:b3:81:e8:fd:e3:6a:
6f:d4:3b:48:ed:5f:59:fc:6d:7f:75:56:44:c1:80:89:51:3f:
50:43:c5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:16:08 2026 by rpki-client