Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e203136313235.roa
File: 3134352e37392e3134372e302f32342d3234203d3e203136313235.roa (raw, json)
Hash identifier: L0xxu3GH7V5h4eSVAwG2A+XbkTfPyYnz24pIrPRysZc=
Subject key identifier: 22:C9:77:AA:C2:FA:89:66:59:59:DB:08:53:2C:FF:27:B9:DB:32:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39791412ED63D3339AD959A9FDB3F6B95C6DDE91
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e203136313235.roa
Signing time: Tue 06 Oct 2026 12:08:53 +0000
ROA not before: Tue 06 Oct 2026 12:03:53 +0000
ROA not after: Tue 05 Oct 2027 12:08:53 +0000
asID: 16125
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:79:14:12:ed:63:d3:33:9a:d9:59:a9:fd:b3:f6:b9:5c:6d:de:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 12:03:53 2026 GMT
Not After : Oct 5 12:08:53 2027 GMT
Subject: CN=22C977AAC2FA89665959DB08532CFF27B9DB325C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:cd:9e:70:dd:0a:33:2a:a5:b6:b8:4c:c4:
cf:43:a3:07:f6:0f:ad:50:da:26:74:01:82:e8:bd:
45:d1:f2:4a:9c:eb:3b:ae:af:63:d3:96:b7:ac:9c:
50:e9:65:44:50:60:58:82:19:45:f4:73:6e:2b:3b:
b9:b9:e7:91:4e:4d:3f:51:22:d5:df:ed:ce:7c:3b:
3b:0c:cd:a7:05:d2:73:50:2a:8a:f0:50:be:a7:57:
63:29:4c:5c:d4:b5:a3:de:35:23:b0:87:56:2c:49:
5b:93:13:2c:21:6d:17:ab:70:19:00:87:28:8f:92:
bb:71:02:43:26:aa:37:21:73:d9:0f:c3:3e:25:9f:
28:08:08:1b:45:52:60:69:c8:13:47:50:40:ea:7a:
92:cb:de:34:9d:13:4d:af:b8:4a:98:46:3f:55:76:
af:df:72:a2:47:6b:aa:4c:20:2a:ce:d2:c4:a4:e7:
5d:76:ed:c8:44:d2:c2:3c:77:7c:bb:ef:a1:33:86:
8e:b6:fe:ab:e5:48:d8:d7:15:0c:87:bf:b5:b1:43:
36:70:e2:c1:ce:67:1a:c9:8a:8d:df:c6:b5:72:4b:
8b:c0:31:79:a3:40:68:e2:d7:e3:b1:a1:84:09:2b:
00:44:8a:33:0a:50:bb:cb:25:d7:06:50:b5:b7:48:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:77:AA:C2:FA:89:66:59:59:DB:08:53:2C:FF:27:B9:DB:32:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e203136313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
97:39:25:b9:40:77:f8:a9:dc:bd:97:5e:a8:d0:4a:bf:18:24:
ab:c6:ad:52:90:cf:2d:04:45:f1:0f:bd:37:fb:f8:29:4d:2b:
60:12:78:45:db:21:c7:6d:2a:50:92:13:60:7f:41:7f:bf:3f:
d8:37:86:b2:60:54:fa:49:f3:1c:25:9e:39:62:6d:89:e2:6c:
8d:21:e4:d3:91:85:0e:a3:7d:43:01:b6:7d:dd:c8:3b:ee:ae:
a7:3f:18:e8:6a:e9:98:0f:0d:82:35:02:76:00:a2:5e:04:3b:
73:3f:9e:a3:76:d6:47:96:5a:f1:19:60:25:2c:63:24:c0:c0:
5c:5f:0e:8c:60:9b:da:02:2d:e0:3b:67:dd:cd:d7:55:8b:b2:
62:4e:ab:d9:3e:83:3a:51:35:3f:0f:de:e0:2f:d2:ee:70:9e:
33:d5:19:d7:d0:6d:62:fc:41:ea:39:19:9b:fb:75:7b:19:f9:
a1:74:75:f5:91:53:aa:14:e3:f5:eb:f1:1a:8f:fd:3c:a2:a0:
56:17:e7:3f:00:47:f5:84:30:60:78:75:c2:5c:76:2b:3c:4b:
77:f3:b6:62:b1:30:71:8e:f5:dd:ba:22:d7:22:24:23:d7:10:
44:07:da:f1:f6:f7:64:c2:04:4d:94:3e:f7:8b:71:ae:11:b4:
7f:87:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:36 2026 by rpki-client