Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3134372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: PXafb7eq2iJiUzNnv+4lB1l8wepYDr2cpuUS9DzfEVI=
Subject key identifier: 09:92:7B:62:37:D5:D1:1D:FF:7C:88:E2:BF:FE:3D:74:99:60:F5:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06B4C3403C43A962955F001E03ECF7DF2E5157FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2039333034.roa
Signing time: Mon 24 Aug 2026 09:38:00 +0000
ROA not before: Mon 24 Aug 2026 09:33:00 +0000
ROA not after: Mon 23 Aug 2027 09:38:00 +0000
asID: 9304
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b4:c3:40:3c:43:a9:62:95:5f:00:1e:03:ec:f7:df:2e:51:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:33:00 2026 GMT
Not After : Aug 23 09:38:00 2027 GMT
Subject: CN=09927B6237D5D11DFF7C88E2BFFE3D749960F537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:31:b0:22:ad:73:a8:b3:ed:21:38:9e:a2:
fe:61:3b:27:34:52:dc:41:2e:4b:8c:38:07:65:09:
5b:b0:ec:9c:57:7a:b4:3a:0e:1a:66:05:ca:de:ed:
10:24:1f:46:fb:6e:76:82:37:d3:a8:99:30:eb:15:
fa:8e:62:5e:70:6a:58:33:f3:29:2c:0e:8e:8e:c8:
e3:64:9c:4d:50:15:9a:e5:4d:91:b1:f1:31:d7:5a:
33:ec:e7:8b:d5:4e:56:9f:a6:06:80:64:5a:2c:c5:
c0:14:f5:1b:dc:df:23:d4:c3:90:ad:aa:51:19:a9:
b3:f2:e6:d7:b9:15:a8:83:af:9e:ae:a7:35:e6:a0:
1b:f6:f7:cd:37:ab:2b:cb:2f:62:40:94:f9:e5:f5:
5c:80:18:a8:1c:78:84:13:50:c7:d9:b7:62:2d:3c:
1f:23:c7:bd:38:15:a3:ac:87:27:cf:ac:80:0f:73:
72:f2:c5:3e:d7:2f:68:ac:f7:16:17:ce:d7:95:8e:
a6:6d:13:42:fc:bb:63:c4:a2:03:d6:2d:ec:f5:43:
f5:af:3e:c2:3b:ec:e2:97:7d:59:9d:c1:c3:bb:e7:
76:e7:f0:e5:5f:06:17:a9:b0:57:6a:0d:74:b1:bf:
6e:17:cf:d1:59:ec:23:40:ab:bb:92:05:49:b1:56:
a0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:92:7B:62:37:D5:D1:1D:FF:7C:88:E2:BF:FE:3D:74:99:60:F5:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3c:a0:2c:af:e5:bd:cf:8a:21:a1:98:6c:5b:ba:be:7c:10:
ee:26:73:28:f7:97:96:bc:a0:0f:ca:a5:f4:ca:d9:33:0e:0c:
a4:d6:bb:89:06:ad:78:b1:eb:23:99:76:b6:d6:9d:43:fc:15:
2a:7a:9a:6f:c4:29:7b:be:98:f6:ee:28:e8:fa:6c:02:56:d1:
8e:a8:f7:ca:b3:ec:84:08:9f:52:ae:33:98:f0:b4:ba:03:ee:
61:b1:bc:ea:cb:4c:5f:45:f5:1d:69:78:45:b5:0d:69:9e:c7:
41:d4:fa:bc:e7:4b:db:95:50:a8:dc:a5:3a:1b:64:d5:3f:2c:
0a:81:0a:3b:28:3d:38:5c:00:9b:4f:21:31:d1:41:8f:7d:25:
e3:dd:26:5a:61:9c:b0:3f:99:30:b8:01:b7:78:6c:36:2c:68:
6c:c7:68:69:f1:06:14:a2:6c:bb:f8:b3:81:dd:4b:97:a2:5a:
bf:9c:1b:62:a5:17:51:69:9a:6c:4e:1c:1f:fe:d6:2a:d6:2d:
d4:20:13:59:c9:f9:c0:fc:72:6f:6a:9d:93:fb:aa:7c:a2:95:
03:9a:be:e2:ab:9a:20:1c:fc:07:04:e4:07:6f:53:5b:0f:d6:
db:58:55:58:91:18:7f:9a:96:0e:fd:0b:10:09:08:a3:0f:db:
5b:1b:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:40 2026 by rpki-client