Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3133312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: keIpT33x5c+x4Yhu/pMNIpToKJqvoKiHUAs1dRqHyBg=
Subject key identifier: 5F:68:F9:34:D3:D8:26:5D:35:3B:8D:3E:2A:9C:6B:16:A4:DE:46:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E0FC6431A5471DB41C3F8979C990D62A9D680B8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e20383334.roa
Signing time: Mon 02 Mar 2026 11:40:42 +0000
ROA not before: Mon 02 Mar 2026 11:35:42 +0000
ROA not after: Mon 01 Mar 2027 11:40:42 +0000
asID: 834
IP address blocks: 145.79.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 09:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0f:c6:43:1a:54:71:db:41:c3:f8:97:9c:99:0d:62:a9:d6:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 2 11:35:42 2026 GMT
Not After : Mar 1 11:40:42 2027 GMT
Subject: CN=5F68F934D3D8265D353B8D3E2A9C6B16A4DE46AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:cc:be:49:f6:a5:f9:37:bc:70:2e:de:e6:
f7:f4:9f:5a:2a:0b:8a:7a:cd:7f:5e:f0:a2:da:32:
d8:ce:dc:08:a8:41:33:38:cf:77:1c:66:10:7b:99:
05:97:e1:d4:f5:56:62:d0:d2:5b:a1:e5:40:a1:65:
61:c2:25:76:6d:a4:ff:6b:1d:41:0d:0f:ec:66:45:
c0:b0:c9:42:89:71:95:db:f4:28:8c:df:00:a9:9b:
a0:41:47:23:bd:e3:af:f3:d2:f2:d3:12:34:fb:8f:
6a:b0:7b:5b:d8:1b:ba:1e:d2:52:2d:b3:ca:f0:c8:
da:d9:ee:49:72:fc:c5:4f:89:55:4d:26:0c:08:eb:
f2:f5:08:31:d5:40:2e:aa:1f:29:a8:8e:d2:f8:4b:
ca:ff:86:ea:6a:af:8e:dd:c3:57:25:12:eb:e4:12:
1d:55:01:98:0b:e6:74:fb:9b:bf:8d:1d:fd:41:88:
09:54:a9:3b:4b:4c:21:96:a9:7a:78:b8:28:3e:3c:
5b:12:79:69:92:65:a1:c6:c7:78:0d:a5:8f:53:37:
c8:09:dc:24:06:f8:e0:e5:b4:03:57:82:60:61:59:
3a:31:a1:73:9d:bd:83:4b:67:f8:ee:c4:82:8c:ea:
8b:a1:12:35:fd:9c:9f:c3:fb:22:e9:b4:d2:07:fd:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:68:F9:34:D3:D8:26:5D:35:3B:8D:3E:2A:9C:6B:16:A4:DE:46:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.131.0/24
Signature Algorithm: sha256WithRSAEncryption
93:37:13:99:d1:c7:48:59:e2:0c:71:0f:0a:da:b8:ea:f1:9f:
72:85:a3:7e:17:55:e8:98:10:be:3a:e6:cf:cc:02:d0:da:73:
96:c7:38:46:ac:66:8f:43:44:ee:7b:b8:61:d7:ed:bf:6c:63:
5c:7b:bf:e9:4a:81:54:95:5a:58:34:57:ca:8e:6d:5e:d0:41:
e1:57:ad:77:d1:32:73:fd:c1:6b:8c:6e:c9:07:5a:09:e8:ba:
d3:b7:85:04:71:d0:e1:e5:5d:70:77:85:47:78:ab:7f:af:ba:
12:ec:93:74:6b:d3:5a:f0:04:47:ff:75:c1:2b:42:23:bb:de:
65:75:77:a5:16:93:c5:26:5f:40:2b:ea:fa:1f:10:50:7e:cf:
65:ae:f3:fa:38:ba:60:46:ea:50:45:d8:cc:28:85:e1:a8:94:
db:2f:55:b6:f2:8f:62:94:e0:a6:eb:7d:13:ae:6c:60:a5:19:
dc:ae:98:c6:1e:df:d7:4f:95:36:9b:0f:35:24:4c:5d:ad:bd:
32:8f:e1:3b:0b:02:2d:fa:a5:8e:b6:21:46:8c:19:a5:1a:3d:
c3:0f:c7:51:64:20:b6:ef:27:c0:02:27:43:eb:41:ef:15:15:
0d:89:24:74:05:97:e0:bf:bd:c3:22:cb:84:85:3b:2c:3c:c4:
08:99:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:23 2026 by rpki-client