Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3134302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 4t8heOqaST7U0J/v7jVyoDKbjUQNjCDQ4ObTICsIHBg=
Subject key identifier: C6:BD:D3:09:05:D0:7E:B5:7C:DB:C7:35:8C:FD:78:95:21:12:B3:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3C208E5612B22387E93B497E3EEE9AAC90555EC0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e2039333034.roa
Signing time: Mon 24 Aug 2026 09:37:52 +0000
ROA not before: Mon 24 Aug 2026 09:32:52 +0000
ROA not after: Mon 23 Aug 2027 09:37:52 +0000
asID: 9304
IP address blocks: 145.79.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:20:8e:56:12:b2:23:87:e9:3b:49:7e:3e:ee:9a:ac:90:55:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:32:52 2026 GMT
Not After : Aug 23 09:37:52 2027 GMT
Subject: CN=C6BDD30905D07EB57CDBC7358CFD78952112B305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:59:23:93:75:70:4d:96:cc:22:21:ab:70:
d5:33:ef:bb:41:66:98:41:2a:2b:93:e2:83:7b:58:
06:52:04:3d:1b:88:6b:0e:c0:c2:64:5c:50:0c:f4:
d7:72:2c:5d:d4:8b:8f:5e:83:11:fc:2c:84:28:dd:
67:0c:95:15:ed:91:77:d3:fb:ad:51:92:86:76:55:
6a:bf:0b:49:43:7d:24:23:63:42:1e:82:e1:39:79:
ed:78:d6:eb:22:49:5d:5e:6e:2e:a8:40:52:3e:d6:
2c:b3:91:43:3a:36:af:dd:27:e9:c0:a4:2c:68:b6:
2a:55:b5:52:37:dd:c1:e2:fd:2f:7b:22:94:dd:c5:
53:42:82:9e:dc:da:22:f5:75:f7:9d:15:aa:89:a3:
42:29:26:46:26:25:f4:fd:1a:b5:4b:3b:27:26:7e:
81:7f:52:3d:01:5e:97:b1:44:67:8b:6b:c5:34:0e:
1a:8b:56:88:03:52:b5:16:24:aa:fe:65:8f:96:66:
20:7c:08:b1:99:6e:c1:df:a8:5c:f4:f3:9b:24:73:
f2:64:ec:3d:50:0a:a9:59:59:bc:08:ac:32:ea:6e:
ba:36:13:55:ae:96:f3:3e:64:83:5b:79:70:c4:3f:
1f:32:bc:99:8f:f9:78:55:a3:65:0a:a0:14:c5:67:
e6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:D3:09:05:D0:7E:B5:7C:DB:C7:35:8C:FD:78:95:21:12:B3:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.140.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bc:89:e5:60:de:89:e9:43:21:f6:2b:38:03:15:18:48:65:
fc:96:48:f6:91:36:7c:43:3d:89:d5:e0:bd:e8:6e:75:a7:7e:
04:53:d4:e6:bf:8f:e2:13:9c:9e:fe:e8:2b:09:02:52:95:19:
14:14:83:20:63:f1:03:0c:e5:ed:a8:b6:67:57:90:d7:ac:d0:
81:3f:79:f9:04:77:dc:ba:a0:e0:66:90:c9:72:86:94:05:fb:
49:61:a0:e3:d1:cf:32:53:ac:ed:c5:c3:69:e4:98:d1:c3:19:
57:15:25:46:32:7d:fe:69:3f:66:f5:54:ef:fc:90:4a:90:87:
15:a8:ed:ff:02:29:f7:f9:68:ad:48:4c:84:8e:81:ef:9c:12:
7f:5f:c1:68:8c:72:1e:7d:c5:42:8f:95:61:43:3a:f0:a2:d7:
4d:1c:23:80:df:9e:9f:ce:b9:14:2a:87:d9:a6:76:53:ed:aa:
c5:71:d6:59:a0:df:a4:7b:29:42:8d:fa:4a:77:7f:01:01:66:
ba:6b:ed:e5:a3:34:30:14:da:5a:11:1c:e9:76:77:7e:8d:b6:
ae:37:48:e2:34:55:2d:b1:c7:af:4f:83:79:42:55:91:7a:78:
f9:08:9f:54:73:88:e8:03:6f:65:fc:01:d9:f5:64:aa:aa:e2:
ec:6e:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:41 2026 by rpki-client