Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133382e302f32342d3234203d3e20323132363039.roa
File: 3134352e37392e3133382e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: xmGyw7nuLltUjTyTIwytYbVkQLl1ZDzsutEx0Nx4ALE=
Subject key identifier: 45:5F:25:B5:C7:2E:57:9E:19:60:E1:FB:D1:A1:E0:8C:A4:2B:01:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C6E409C42DE3CC4882EC628A6C9E1E6454222DA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133382e302f32342d3234203d3e20323132363039.roa
Signing time: Fri 15 May 2026 05:24:13 +0000
ROA not before: Fri 15 May 2026 05:19:13 +0000
ROA not after: Fri 14 May 2027 05:24:13 +0000
asID: 212609
IP address blocks: 145.79.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6e:40:9c:42:de:3c:c4:88:2e:c6:28:a6:c9:e1:e6:45:42:22:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 05:19:13 2026 GMT
Not After : May 14 05:24:13 2027 GMT
Subject: CN=455F25B5C72E579E1960E1FBD1A1E08CA42B01F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:f4:6d:64:28:08:76:42:31:bf:c0:3a:f5:
41:29:69:91:b3:14:34:4c:3a:2d:7a:c5:5b:4c:f9:
62:d4:61:1c:99:c7:e6:aa:be:d4:50:f7:b7:7e:49:
ba:2d:7f:31:18:66:dd:32:d2:ed:53:ad:87:74:08:
10:7e:21:16:69:d9:3f:4e:a0:d0:a5:a9:32:62:de:
b1:ab:1b:e2:d0:d6:21:9e:6e:6f:8d:f1:e2:95:ff:
23:0a:68:cc:bb:43:62:53:0b:43:66:05:bb:b2:61:
37:e1:d7:85:0d:51:fb:66:ff:0e:66:51:2a:18:43:
5b:f3:ae:e5:61:7c:a8:36:99:ec:98:5b:32:74:b3:
7b:b6:4d:e5:ad:6b:63:5d:1b:de:44:ca:61:84:38:
f8:d7:24:a3:03:9c:89:4a:59:3f:c4:b0:46:70:c6:
cd:6b:68:39:ad:64:cc:e3:70:86:ef:c9:44:9a:89:
02:1e:0e:67:51:8f:39:c6:8f:5d:0a:05:77:e0:31:
b1:3a:8f:e7:a0:a0:a0:81:04:38:23:47:5b:f3:a9:
58:60:b7:43:f7:0b:04:19:43:60:15:e2:01:0d:8a:
0e:6b:ac:73:8e:a3:f2:71:d5:8b:41:fb:d6:f3:8d:
1e:63:8c:7b:ee:4c:d3:02:5e:be:cc:ba:f6:db:a5:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:5F:25:B5:C7:2E:57:9E:19:60:E1:FB:D1:A1:E0:8C:A4:2B:01:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133382e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ea:5c:3a:b4:c4:39:7b:03:59:a4:a0:85:54:b8:7b:57:d6:
58:db:5b:f7:82:d3:8d:a8:69:ab:f8:e5:be:df:16:af:15:15:
07:b5:72:4a:7e:ff:50:e2:45:0b:fb:bc:bb:79:d4:43:31:ac:
21:e1:aa:c3:68:23:b7:90:c5:c4:c7:aa:84:03:4c:be:a0:70:
f6:6a:97:31:85:8f:86:84:4f:2f:b7:ae:44:7f:58:e2:36:ee:
b5:50:a8:96:4f:36:08:c0:85:74:e3:4c:de:e7:99:3e:72:4a:
56:02:3e:f4:d4:61:f9:c4:b8:6a:b4:25:74:1c:26:7c:06:ad:
85:14:2c:bb:66:d7:42:77:af:be:11:4d:74:a0:9d:00:7a:55:
76:4a:c4:14:0b:54:e1:c3:1a:99:a8:3e:e9:7e:12:74:9a:95:
5f:25:e5:5e:ab:a8:18:f6:92:3f:2c:9c:82:9b:b1:e5:25:da:
dd:91:6f:b7:78:ae:06:6c:79:bf:74:12:46:c8:06:ab:c7:38:
ff:05:bc:91:de:b3:98:f3:07:56:9b:51:c6:5c:9a:2c:6d:96:
63:6a:de:f6:e3:0f:0b:4b:74:fb:fc:e8:66:60:b6:c7:d6:a4:
2b:92:0b:bb:63:ee:4d:09:3d:72:a5:e2:e8:1a:35:ba:42:41:
5e:ba:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:23:43 2026 by rpki-client