Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133322e302f32342d3234203d3e2035303635.roa
File: 3134352e37392e3133322e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: /EMsfV6PvuPleUqDVOIJkZPfii8a2nwq2/iSjHhae3g=
Subject key identifier: 83:6D:8E:9F:95:38:76:40:15:8B:BD:20:FC:A4:35:A7:5B:B8:B2:B7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E127CE4C743BE1F17B485FC75917E566A762DA5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133322e302f32342d3234203d3e2035303635.roa
Signing time: Fri 15 May 2026 05:24:12 +0000
ROA not before: Fri 15 May 2026 05:19:12 +0000
ROA not after: Fri 14 May 2027 05:24:12 +0000
asID: 5065
IP address blocks: 145.79.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:12:7c:e4:c7:43:be:1f:17:b4:85:fc:75:91:7e:56:6a:76:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 05:19:12 2026 GMT
Not After : May 14 05:24:12 2027 GMT
Subject: CN=836D8E9F95387640158BBD20FCA435A75BB8B2B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:81:2d:90:26:99:3f:2b:c7:5a:4b:8e:ef:
1e:18:ed:c6:aa:8d:f4:f1:0d:6f:2f:ae:a4:65:68:
56:f2:78:a1:bd:6a:9a:aa:c7:55:21:ae:59:7e:b5:
7e:cf:f8:4e:d0:25:cc:f6:2b:65:f9:35:a6:e0:ca:
0b:cb:3d:76:26:68:16:0b:d2:1b:08:f2:6a:13:0b:
ce:86:4f:70:59:1b:f6:97:35:30:e8:b5:33:61:98:
ca:bb:da:12:26:c2:cc:27:ea:ad:cf:ce:87:94:fd:
e3:fa:b0:aa:e1:9d:f1:fc:d0:be:99:13:e6:62:2c:
84:7d:bd:15:e4:62:82:b7:96:89:fd:f8:e8:d3:44:
ea:c0:86:7c:bf:9e:d0:58:54:69:c1:c8:79:7c:ad:
a2:75:bb:84:3e:1b:0a:dd:1b:41:81:84:e0:35:03:
1a:1f:5f:c2:09:37:83:e8:08:e7:1a:68:c8:b2:f1:
c0:c0:1f:07:d9:c6:94:3b:83:44:eb:1e:ce:2b:0c:
36:e1:75:f2:39:87:1c:77:a3:4e:0b:d0:23:11:b2:
a4:e6:86:82:ba:19:a3:3d:71:4d:36:eb:cd:f8:92:
b3:03:62:bb:60:35:6a:2b:d1:3e:20:c2:e1:81:24:
95:41:47:11:2b:05:f4:96:2e:db:f7:bb:8d:4d:6d:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6D:8E:9F:95:38:76:40:15:8B:BD:20:FC:A4:35:A7:5B:B8:B2:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133322e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.132.0/24
Signature Algorithm: sha256WithRSAEncryption
01:49:27:0f:be:80:3d:8c:f2:e2:c7:f4:a3:ac:d9:7c:c6:03:
80:1c:e6:ef:90:e1:dc:d0:d6:1e:c2:cc:5f:f4:12:f4:5f:d7:
a0:74:8a:0a:2a:ad:d6:5c:a7:e0:ce:0d:13:b0:ad:78:ed:c0:
c3:58:8d:e1:4a:f2:b8:22:0e:f5:f9:01:88:03:8e:a6:f6:da:
f0:34:e9:ea:2f:63:6b:b7:28:40:92:f8:18:c1:97:7b:98:d8:
af:ba:16:e4:24:4b:da:43:b6:30:27:61:88:bb:d0:e0:7d:47:
28:25:bb:fa:6a:49:e2:77:18:71:42:01:ec:19:20:23:05:97:
c1:4c:7c:07:d0:74:b3:2c:42:89:cf:a1:05:f9:14:15:44:0f:
55:22:78:98:c6:5b:90:36:90:f8:74:65:63:8f:5e:30:a1:69:
be:e4:99:cd:36:34:92:3d:95:b2:62:07:eb:02:e7:06:20:83:
7c:4b:15:69:ca:d3:e2:38:5f:08:4f:84:a6:bc:b0:a4:5c:12:
29:f1:87:e1:bb:05:e0:05:b9:6b:96:c9:16:a5:24:e3:e5:3e:
34:10:03:31:92:4e:75:4b:68:85:37:fb:b8:b0:75:31:53:4e:
d3:05:fc:94:6b:51:47:a9:2a:0d:f2:17:19:d9:e7:20:55:b0:
52:a2:0f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:16:09 2026 by rpki-client