Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e20313533353638.roa
File: 3134352e37392e3134382e302f32342d3234203d3e20313533353638.roa (raw, json)
Hash identifier: 7R6DESxgSyw0El6IdOFqERM8XGika4Pbty7YEbrNzL4=
Subject key identifier: E0:6C:4E:BF:85:CC:E5:D6:FE:6D:2A:94:83:5C:4F:A6:54:E3:1B:68
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3329A7067A1C413FFF5BEB9EBA340114A9CE24C6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e20313533353638.roa
Signing time: Fri 22 May 2026 08:14:25 +0000
ROA not before: Fri 22 May 2026 08:09:25 +0000
ROA not after: Fri 21 May 2027 08:14:25 +0000
asID: 153568
IP address blocks: 145.79.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:29:a7:06:7a:1c:41:3f:ff:5b:eb:9e:ba:34:01:14:a9:ce:24:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 22 08:09:25 2026 GMT
Not After : May 21 08:14:25 2027 GMT
Subject: CN=E06C4EBF85CCE5D6FE6D2A94835C4FA654E31B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:5d:40:fc:ab:53:cb:3e:6f:11:98:35:d4:
90:39:4e:9f:81:c6:fd:11:1f:33:95:82:6f:b7:d5:
b2:20:23:1e:90:14:52:f2:85:25:ec:77:2e:99:c5:
ca:dd:db:e1:ea:3d:ff:34:54:ca:54:d3:ef:0a:9c:
31:e6:d6:ab:f8:bd:44:04:c4:58:e5:6b:3f:db:9c:
77:52:bd:36:04:8b:bb:43:08:c4:09:0d:b8:11:62:
3a:83:81:f4:68:c2:78:4f:eb:24:a8:b8:26:06:9a:
46:b9:54:48:23:29:26:82:03:f5:60:49:9b:e9:f6:
75:b7:f9:ee:54:e3:de:8c:1b:52:04:48:b6:d4:a5:
4c:10:c9:24:c4:31:29:e6:55:bb:13:e9:03:74:48:
f3:13:58:18:fc:a1:f4:02:03:34:48:6b:9c:73:ae:
90:03:13:4b:76:7f:c9:87:6b:fc:5f:57:e4:0e:30:
56:08:9b:cc:6a:aa:a0:e4:dd:28:8b:35:4a:6d:d2:
cc:f2:a5:07:88:84:a4:8f:32:2e:25:04:c2:b5:cf:
d0:cf:17:19:7e:7d:cd:f3:10:46:7c:34:48:8c:49:
e2:68:b9:42:7e:fe:e5:f5:48:0a:5f:8c:4e:b8:1d:
bb:37:75:8b:41:c4:41:d1:2d:a8:30:d2:85:b5:eb:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6C:4E:BF:85:CC:E5:D6:FE:6D:2A:94:83:5C:4F:A6:54:E3:1B:68
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e20313533353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.148.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3f:4c:81:3d:9d:8b:f8:94:aa:a3:aa:76:aa:6b:bc:46:17:
9e:57:7e:37:62:b6:9e:f7:b6:ac:9f:b0:6b:e1:3a:60:41:2d:
81:7d:90:76:a0:4f:80:f5:87:22:dc:f9:20:b1:5a:80:de:d6:
ad:a0:3a:be:ef:7a:51:e4:52:58:90:9e:f6:16:37:9c:61:03:
ec:19:3d:6a:af:4d:dc:05:14:b7:2b:fe:cc:14:ce:9e:84:6a:
a7:e8:43:c2:15:92:30:76:76:c8:ae:4e:1b:1c:f7:96:e1:28:
ed:2e:ea:07:37:f6:35:e7:01:b8:3b:fd:ac:5c:11:3b:49:72:
45:fb:d1:61:9f:36:8c:0f:39:9d:77:be:4f:ec:cf:20:7f:15:
5c:92:27:24:a6:89:e5:01:29:41:93:85:6b:cf:63:2f:a9:ea:
86:b2:fa:82:40:e9:1f:a1:6e:cd:31:83:f8:c4:36:c8:9d:23:
d3:21:2e:f5:82:16:e8:45:96:03:88:cc:f6:eb:da:54:0a:e6:
f1:06:10:e1:92:84:07:ec:62:62:f3:13:5d:f0:98:6a:bf:1b:
4d:13:02:3a:ae:c0:51:86:dc:98:61:d8:a2:29:0f:59:c4:14:
8d:28:df:c6:3a:2b:e3:f4:5c:f9:b0:cc:c7:ec:3e:bb:0f:87:
39:cf:a9:c9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUMymnBnocQT//W+ueujQBFKnOJMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MjIwODA5MjVaFw0yNzA1MjEwODE0MjVaMDMxMTAvBgNV
BAMTKEUwNkM0RUJGODVDQ0U1RDZGRTZEMkE5NDgzNUM0RkE2NTRFMzFCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFV1A/KtTyz5vEZg11JA5Tp+B
xv0RHzOVgm+31bIgIx6QFFLyhSXsdy6Zxcrd2+HqPf80VMpU0+8KnDHm1qv4vUQE
xFjlaz/bnHdSvTYEi7tDCMQJDbgRYjqDgfRownhP6ySouCYGmka5VEgjKSaCA/Vg
SZvp9nW3+e5U496MG1IESLbUpUwQySTEMSnmVbsT6QN0SPMTWBj8ofQCAzRIa5xz
rpADE0t2f8mHa/xfV+QOMFYIm8xqqqDk3SiLNUpt0szypQeIhKSPMi4lBMK1z9DP
Fxl+fc3zEEZ8NEiMSeJouUJ+/uX1SApfjE64Hbs3dYtBxEHRLagw0oW16/x7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4GxOv4XM5db+bSqUg1xPplTjG2gwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzNTM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT5QwDQYJKoZIhvcNAQELBQADggEBAJc/TIE9nYv4lKqjqnaqa7xGF55Xfjdi
tp73tqyfsGvhOmBBLYF9kHagT4D1hyLc+SCxWoDe1q2gOr7velHkUliQnvYWN5xh
A+wZPWqvTdwFFLcr/swUzp6EaqfoQ8IVkjB2dsiuThsc95bhKO0u6gc39jXnAbg7
/axcETtJckX70WGfNowPOZ13vk/szyB/FVySJySmieUBKUGThWvPYy+p6oay+oJA
6R+hbs0xg/jENsidI9MhLvWCFuhFlgOIzPbr2lQK5vEGEOGShAfsYmLzE13wmGq/
G00TAjquwFGG3Jhh2KIpD1nEFI0o38Y6K+P0XPmwzMfsPrsPhznPqck=
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:16:58 2026 by rpki-client