Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134352e302f32342d3234203d3e203330303432.roa
File: 3134352e37392e3134352e302f32342d3234203d3e203330303432.roa (raw, json)
Hash identifier: svVPERZhFo+0Wi/D2tlwigf5H9hTV+1TuIV9loaw02w=
Subject key identifier: DE:7C:35:23:35:01:0A:E9:0B:76:DB:E7:A5:DF:DA:3A:D5:73:7A:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 109031959A9D74E8460ACCCAD341A12E5941E2B7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134352e302f32342d3234203d3e203330303432.roa
Signing time: Mon 05 Oct 2026 09:25:50 +0000
ROA not before: Mon 05 Oct 2026 09:20:50 +0000
ROA not after: Mon 04 Oct 2027 09:25:50 +0000
asID: 30042
IP address blocks: 145.79.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:90:31:95:9a:9d:74:e8:46:0a:cc:ca:d3:41:a1:2e:59:41:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:50 2026 GMT
Not After : Oct 4 09:25:50 2027 GMT
Subject: CN=DE7C352335010AE90B76DBE7A5DFDA3AD5737AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:dd:49:55:71:38:77:8c:05:c7:f0:00:85:
46:e3:be:a7:3b:e5:6b:06:6f:a2:3f:c0:89:10:bb:
2b:bb:64:11:8a:76:9f:f6:71:28:ff:41:86:7a:c2:
cc:6b:26:9a:89:be:ac:1f:a5:4e:1c:39:29:cb:1f:
05:0d:fa:9a:53:36:23:fc:2c:72:e3:80:aa:3f:08:
b8:09:31:6e:d2:17:16:f3:ef:66:79:35:37:ad:7c:
42:e0:f3:a5:f2:e9:f4:3b:fc:aa:83:2a:82:ac:9c:
f4:5b:86:bd:0b:c9:9e:2b:e5:b0:e2:a0:32:b3:d4:
82:12:c0:77:fa:23:f6:06:ea:4f:f0:d5:b3:29:dc:
c8:02:83:95:7b:2a:89:39:73:e9:5e:3d:0d:57:8d:
29:f7:05:3a:18:f4:8e:39:c9:a4:09:5a:bf:1f:ed:
47:9f:1c:ea:42:99:4f:aa:a0:00:5a:c9:bf:22:49:
0a:39:86:89:a2:52:f3:87:54:c2:08:7d:d7:5e:0c:
b8:39:48:b5:9e:b1:31:a8:99:63:3a:ba:c3:3b:0b:
18:c9:b4:26:74:18:db:2a:ff:43:c0:0c:57:20:0c:
bc:4d:dd:42:71:de:39:e4:ea:90:e5:97:49:5b:6b:
fe:29:ac:73:52:e3:91:ac:da:cf:b4:ce:ee:18:d7:
be:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7C:35:23:35:01:0A:E9:0B:76:DB:E7:A5:DF:DA:3A:D5:73:7A:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134352e302f32342d3234203d3e203330303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.145.0/24
Signature Algorithm: sha256WithRSAEncryption
67:58:82:b4:c8:9c:3d:3a:0a:53:9e:60:a3:5d:34:aa:21:a9:
48:74:cc:81:d0:d8:9a:0c:03:27:3c:c2:62:d6:79:e1:44:86:
c2:33:e2:de:7e:1c:b0:e6:99:cd:d2:c1:ca:3e:47:06:0e:ac:
d2:97:8c:f0:0b:d8:c5:11:3c:be:83:0c:e6:ea:89:94:ad:73:
bc:c2:e7:0d:e0:a8:7a:96:83:90:1c:20:0d:cf:d9:09:5a:68:
cb:04:27:28:57:0f:e3:12:ad:92:35:10:4b:7a:b4:f2:e6:58:
d9:a9:7d:52:c9:21:9a:80:4f:86:dd:ed:30:54:1a:97:e9:5e:
5d:5f:66:b1:3e:20:05:e3:21:8a:c7:7f:3e:b5:e9:06:b7:37:
fe:9f:d1:c5:1d:f5:ed:bb:34:84:d9:a4:61:59:ea:4f:06:64:
8e:99:45:63:cd:93:1a:ea:d8:1d:05:48:0b:38:3f:45:b9:c9:
f1:70:52:f1:b0:b9:26:ef:34:27:c0:93:df:5e:68:41:d1:c0:
8b:7e:38:30:a7:ad:75:03:ff:13:85:d3:72:5d:0b:e7:43:3a:
db:b9:89:03:bf:d9:d1:8f:4b:39:08:75:a7:37:93:57:db:09:
e5:a7:ea:fe:f7:e9:80:2d:c3:6e:96:85:9f:37:30:e9:6c:74:
86:b8:83:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:28 2026 by rpki-client