Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e203330303432.roa
File: 3134352e37392e3134342e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: qZQv1VXgSIzbZ65TK0+FtffhNIPLXWYaSqgAvAifTLA=
Subject key identifier: 04:88:76:06:FD:67:D5:47:8B:38:C0:30:00:1C:D4:5E:7D:D8:FD:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C8E5F158C7E100C67ABB7787DA18834FFB455D0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e203330303432.roa
Signing time: Mon 05 Oct 2026 09:25:45 +0000
ROA not before: Mon 05 Oct 2026 09:20:45 +0000
ROA not after: Mon 04 Oct 2027 09:25:45 +0000
asID: 30042
IP address blocks: 145.79.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:8e:5f:15:8c:7e:10:0c:67:ab:b7:78:7d:a1:88:34:ff:b4:55:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:45 2026 GMT
Not After : Oct 4 09:25:45 2027 GMT
Subject: CN=04887606FD67D5478B38C030001CD45E7DD8FDFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:3a:eb:ae:34:ce:08:1c:bd:b5:20:5e:d5:
e6:76:5f:14:da:bc:6c:73:ef:cb:44:a6:30:c0:d8:
0e:fd:65:6f:96:52:77:46:d4:04:59:34:df:6e:59:
5d:9c:8b:63:98:ac:1c:cc:6c:02:b0:15:94:d8:92:
69:42:0a:51:3d:77:b5:35:ba:61:7e:72:54:8e:f5:
18:e1:11:5a:ce:bb:b5:3c:3f:02:ef:3d:55:d3:fb:
ab:34:34:46:8e:7d:0e:46:a3:53:0e:b6:de:01:03:
5a:15:7d:90:3b:f1:2b:32:01:a3:68:bf:c0:40:0e:
1d:37:13:e2:d4:4c:bd:74:bb:e5:1f:0b:bb:96:9c:
d3:32:f4:23:8a:c2:d1:a5:51:ea:2a:62:b3:3e:16:
58:0c:7f:93:d6:e7:5b:08:ca:25:57:e7:ee:9a:5a:
81:89:01:9f:9b:70:90:d8:d9:33:99:43:9b:cf:3d:
cf:7b:0b:cb:ad:68:ae:45:bb:9d:6c:a1:0b:10:b1:
93:70:5a:11:55:bd:7e:26:7b:38:de:4c:05:4a:5f:
d8:6c:f3:16:19:88:bb:dc:1c:96:80:4a:6a:d3:6f:
4c:a0:28:d6:b7:10:b5:9f:5d:bc:92:52:17:5e:2a:
a2:db:c7:fc:81:23:ca:32:63:ef:4e:d1:87:9a:df:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:88:76:06:FD:67:D5:47:8B:38:C0:30:00:1C:D4:5E:7D:D8:FD:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.144.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3a:d3:b3:12:0d:1d:e7:57:62:ee:ed:3e:e6:8a:9b:d2:41:
df:81:e0:ad:21:78:e9:35:cc:5c:83:03:f4:19:ae:98:e4:cd:
41:59:19:af:9a:71:e3:f3:ed:38:7a:88:62:c0:cd:c4:14:28:
7a:c3:b9:e6:20:32:77:32:64:fe:69:84:fa:d4:b9:cf:a8:17:
79:87:ad:09:de:b7:bc:13:27:36:9d:bd:59:e3:0a:5c:1e:cc:
ae:11:49:2d:ca:fd:de:68:fe:cc:6c:66:5e:4f:f9:9f:4c:8e:
4d:88:15:43:e1:ff:ce:93:23:54:0a:6e:7e:ee:41:1a:85:f7:
29:aa:ce:83:39:4e:7c:56:b2:3d:70:97:59:77:c9:31:50:44:
24:50:9e:c6:cf:a0:62:3d:1b:8b:76:50:14:37:07:09:7c:90:
93:0b:83:af:61:8c:c9:9b:ef:53:b4:c1:4c:48:63:72:9f:73:
68:77:d5:7c:97:c0:7b:d3:6e:c9:72:0c:c0:3f:d0:8d:00:d1:
d8:6d:62:89:b4:b6:01:1e:0b:94:68:d6:56:89:d8:0c:93:ab:
91:db:9d:59:69:6c:5e:65:8e:bf:f9:b9:e1:9b:c2:8f:e5:24:
a2:97:97:fe:43:05:0d:06:db:c5:29:17:68:47:6d:d9:b6:f1:
13:76:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:46:34 2026 by rpki-client