Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3134342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: bdfY95EHILhzNsbUe8efLq8sLBn7azDEXMfxVMJcpew=
Subject key identifier: 6E:73:50:FD:BF:6A:CC:AD:DF:83:C6:BC:96:3E:67:52:2B:B0:16:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D9CE94AF6F6B6EB03DB5347E304C0E3D466F04F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e2039333034.roa
Signing time: Mon 24 Aug 2026 09:37:57 +0000
ROA not before: Mon 24 Aug 2026 09:32:57 +0000
ROA not after: Mon 23 Aug 2027 09:37:57 +0000
asID: 9304
IP address blocks: 145.79.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9c:e9:4a:f6:f6:b6:eb:03:db:53:47:e3:04:c0:e3:d4:66:f0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:32:57 2026 GMT
Not After : Aug 23 09:37:57 2027 GMT
Subject: CN=6E7350FDBF6ACCADDF83C6BC963E67522BB01610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:81:53:1d:e7:b2:1d:c0:e4:56:4a:60:a0:
a6:e5:48:e7:3e:fb:29:8d:27:b3:df:6a:9d:aa:a8:
b1:34:38:2b:62:49:90:75:2e:0a:6c:39:46:43:fb:
21:68:8c:5e:c1:ea:ec:25:16:09:ea:ea:3f:d8:f4:
73:d8:08:21:89:09:2c:f6:c2:4b:8c:02:08:65:a3:
7d:d5:eb:c3:30:de:89:34:da:e7:e2:67:5c:56:f1:
a1:da:f4:bb:3c:39:84:58:c6:8f:9c:0d:2a:d7:99:
c1:de:a4:e9:77:e3:a6:f6:a7:bc:93:ad:8d:ea:96:
7b:ed:4d:2a:16:2e:70:a0:2f:82:f7:00:9b:83:ea:
5c:aa:07:37:9d:6b:94:47:73:ed:32:68:5f:f2:49:
3d:67:4f:df:99:20:82:9a:9d:da:ae:ba:5e:26:8b:
37:7f:d8:2e:c7:c1:2a:ca:a6:bb:25:0f:f7:e7:2d:
b4:7f:8d:a7:69:24:31:dc:a8:95:22:0d:2d:db:dc:
a4:53:92:19:d4:e0:64:30:ff:69:63:0c:0e:65:8a:
a4:8e:51:fe:3e:d4:45:8f:0e:a7:6c:77:11:d1:90:
b1:6f:9f:ed:62:9d:bf:8c:a0:56:39:a4:3b:51:1b:
94:a7:01:bc:db:f5:6c:51:45:fd:f7:90:08:38:4f:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:50:FD:BF:6A:CC:AD:DF:83:C6:BC:96:3E:67:52:2B:B0:16:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1a:1a:6b:f2:b7:9d:ea:6d:44:f9:59:9c:48:1f:28:65:b9:
a3:95:98:95:6c:69:9a:8b:35:b9:6a:a7:3a:7d:36:3d:25:9f:
e8:e0:de:0e:34:3b:93:c6:2d:3f:26:30:8a:fe:7c:52:08:3c:
44:35:6e:29:0b:db:65:a4:df:58:83:fe:61:f1:dc:f7:61:57:
6b:08:63:62:c6:2e:92:a0:b9:16:fd:7d:f0:ba:4a:dc:d3:35:
90:55:cc:dc:9d:99:da:0a:26:a0:ea:7c:7e:c8:e6:82:3d:d7:
22:73:8a:cd:e6:13:f4:4d:63:8f:7d:32:af:e1:f2:fd:d1:7a:
f0:f2:9c:1c:cd:7a:5b:1f:ab:29:e4:52:74:df:23:fc:cf:10:
bd:fb:26:d5:6b:ef:8c:1e:be:f2:a4:0f:f4:e9:69:30:e1:cb:
21:79:e5:23:63:f9:13:98:5c:63:66:39:4b:79:ed:f3:69:86:
e6:c9:a4:d6:07:12:83:de:d3:5f:67:3a:e7:a8:87:8a:78:fc:
ce:71:b0:6e:e8:b5:ed:d8:d1:56:c9:31:5e:fe:7b:95:78:f5:
b2:5b:30:84:07:43:0e:ef:d5:96:e7:5b:8f:cb:d9:20:4a:cf:
27:48:ac:3e:fa:b8:c4:19:07:60:c3:52:09:c0:61:94:b9:14:
c8:4d:65:2d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPZzpSvb2tusD21NH4wTA49Rm8E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjQwOTMyNTdaFw0yNzA4MjMwOTM3NTdaMDMxMTAvBgNV
BAMTKDZFNzM1MEZEQkY2QUNDQURERjgzQzZCQzk2M0U2NzUyMkJCMDE2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYoFTHeeyHcDkVkpgoKblSOc+
+ymNJ7Pfap2qqLE0OCtiSZB1LgpsOUZD+yFojF7B6uwlFgnq6j/Y9HPYCCGJCSz2
wkuMAghlo33V68Mw3ok02ufiZ1xW8aHa9Ls8OYRYxo+cDSrXmcHepOl346b2p7yT
rY3qlnvtTSoWLnCgL4L3AJuD6lyqBzeda5RHc+0yaF/yST1nT9+ZIIKandquul4m
izd/2C7HwSrKprslD/fnLbR/jadpJDHcqJUiDS3b3KRTkhnU4GQw/2ljDA5liqSO
Uf4+1EWPDqdsdxHRkLFvn+1inb+MoFY5pDtRG5SnAbzb9WxRRf33kAg4T2m1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUbnNQ/b9qzK3fg8a8lj5nUiuwFhAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
kDANBgkqhkiG9w0BAQsFAAOCAQEATRoaa/K3neptRPlZnEgfKGW5o5WYlWxpmos1
uWqnOn02PSWf6ODeDjQ7k8YtPyYwiv58Ugg8RDVuKQvbZaTfWIP+YfHc92FXawhj
YsYukqC5Fv198LpK3NM1kFXM3J2Z2gomoOp8fsjmgj3XInOKzeYT9E1jj30yr+Hy
/dF68PKcHM16Wx+rKeRSdN8j/M8Qvfsm1WvvjB6+8qQP9OlpMOHLIXnlI2P5E5hc
Y2Y5S3nt82mG5smk1gcSg97TX2c656iHinj8znGwbui17djRVskxXv57lXj1slsw
hAdDDu/Vludbj8vZIErPJ0isPvq4xBkHYMNSCcBhlLkUyE1lLQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:34 2026 by rpki-client