Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e20323135323836.roa
File: 3134352e37392e3134302e302f32342d3234203d3e20323135323836.roa (raw, json)
Hash identifier: bie8bW+MhL/R4dvhdqFGtvghYlzucZJ6K6LL1HhodcM=
Subject key identifier: 32:3A:CB:9A:33:48:67:7A:39:8C:BF:87:C1:64:6D:E9:6C:16:ED:76
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5AF026C91A9F9553465445931E6395741203BBEA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e20323135323836.roa
Signing time: Mon 05 Oct 2026 09:25:43 +0000
ROA not before: Mon 05 Oct 2026 09:20:43 +0000
ROA not after: Mon 04 Oct 2027 09:25:43 +0000
asID: 215286
IP address blocks: 145.79.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f0:26:c9:1a:9f:95:53:46:54:45:93:1e:63:95:74:12:03:bb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:43 2026 GMT
Not After : Oct 4 09:25:43 2027 GMT
Subject: CN=323ACB9A3348677A398CBF87C1646DE96C16ED76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:bc:2e:0c:6b:40:71:24:bf:ea:42:f2:68:
3c:22:24:fe:f8:b7:df:dc:d4:0e:40:7c:b8:b6:b9:
3a:2f:7c:e7:a8:a4:10:e2:71:63:d0:35:99:39:bc:
9d:a2:b8:6c:6b:d2:24:ff:c8:74:ce:24:08:78:4f:
90:07:88:26:c7:e5:89:9c:09:1f:ed:f1:49:de:8f:
1e:58:74:b6:a5:50:62:06:21:8f:e9:b9:be:fc:bb:
ce:fc:a7:a0:75:e5:b5:d3:c6:54:9f:26:c2:98:ac:
67:18:6c:10:19:f0:33:8f:f8:af:15:e5:47:f6:34:
85:56:d6:8e:d0:e1:df:fd:2d:eb:a7:d6:37:31:fd:
66:12:aa:d1:75:11:84:d9:b1:f6:01:a2:f6:f5:49:
cc:86:89:f3:ef:bb:3d:62:04:00:b6:2d:cc:73:71:
50:9d:66:d1:e0:1e:8e:cf:81:22:8f:b5:71:e4:1c:
4f:66:b9:db:5f:6c:77:25:bc:40:4c:2e:0c:8f:99:
47:18:ee:5a:6d:45:7b:c2:47:fb:a1:d9:8b:22:5f:
63:75:e5:ea:8d:bc:bf:67:2b:4f:00:c9:11:0a:30:
f3:1e:50:96:7a:02:f5:19:70:be:39:2a:b2:ad:08:
53:dd:de:a0:54:ff:50:57:90:45:ea:63:03:57:b2:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:CB:9A:33:48:67:7A:39:8C:BF:87:C1:64:6D:E9:6C:16:ED:76
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e20323135323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3d:8b:a7:55:7e:44:ca:aa:ed:d6:fe:df:31:ed:b1:c5:5a:
bf:70:20:95:b3:b4:56:4b:fe:fc:6d:52:42:25:7f:66:cc:ce:
94:bf:b2:98:dc:76:fe:08:d9:c1:6f:c6:67:64:d2:6a:1d:61:
cc:12:f6:f2:8a:ce:ed:56:fb:64:02:04:18:5c:82:7d:1e:b1:
3b:d4:6e:24:5f:77:2c:7a:a6:46:38:43:03:0b:b0:cf:e8:d6:
65:13:81:8e:e8:95:e9:22:ff:63:01:ba:a5:a4:0d:b2:32:fb:
0d:d0:df:6e:b7:13:75:77:fd:9e:18:b5:31:75:de:b4:a2:0a:
85:9c:dc:cf:f2:32:9a:57:86:1e:d0:18:1c:cc:9c:c9:81:f2:
00:93:ae:96:63:df:79:65:5a:bc:5f:14:46:95:45:94:12:43:
59:83:d4:5e:4b:77:56:28:49:a3:04:e5:02:e9:3e:ea:27:8c:
69:69:75:6b:b1:88:1a:e2:19:3f:0d:b8:8a:1d:ee:f7:cf:15:
45:d9:33:5f:56:63:dc:ba:13:c9:07:7b:4c:0f:de:da:d1:62:
17:7b:13:f5:f9:f7:d7:8c:58:c9:ce:95:9d:97:b4:86:5f:ae:
33:b7:b4:62:63:49:28:8a:5b:61:9d:2d:30:3b:82:0d:6a:6b:
ce:d0:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:14 2026 by rpki-client