Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3134382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 5n7Uw19o3aqs0F8VTR/YxnYVSUkqiLG1aHF7TxtXgNQ=
Subject key identifier: 9F:0D:57:38:CE:72:57:45:33:55:B7:E7:7C:6D:AE:92:CC:8F:4A:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4560ACEF57F4BC4FC77BAEA6A663CAF195138D77
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e2039333034.roa
Signing time: Mon 24 Aug 2026 09:38:05 +0000
ROA not before: Mon 24 Aug 2026 09:33:05 +0000
ROA not after: Mon 23 Aug 2027 09:38:05 +0000
asID: 9304
IP address blocks: 145.79.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:60:ac:ef:57:f4:bc:4f:c7:7b:ae:a6:a6:63:ca:f1:95:13:8d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:33:05 2026 GMT
Not After : Aug 23 09:38:05 2027 GMT
Subject: CN=9F0D5738CE7257453355B7E77C6DAE92CC8F4A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:ce:65:63:6a:7b:96:33:75:31:02:8d:eb:
41:04:53:dd:c9:61:09:0e:d6:0e:be:5b:a7:51:b0:
6e:26:1e:08:e3:24:24:f9:a2:29:0d:39:98:d4:5a:
97:c1:f1:5c:11:6f:45:18:b4:14:c6:e4:e9:16:da:
b8:14:eb:e2:30:db:98:6f:29:a9:e5:1f:51:95:11:
88:3d:fa:ca:7a:5d:91:d1:f3:d4:93:6a:24:92:d3:
fa:7e:d6:8a:a3:7d:6f:94:c7:99:47:56:e8:79:c6:
08:88:da:27:e4:53:5f:bf:aa:b5:40:cc:fc:b4:3f:
ff:6b:c0:69:fb:d2:51:98:eb:c5:45:b8:1c:04:c6:
a3:19:ad:0c:4b:60:6e:03:f0:01:3b:db:0e:a6:32:
19:57:91:b0:26:55:64:97:6d:3f:3c:e1:55:ee:24:
e5:25:ec:83:48:50:75:3e:1c:df:6f:35:31:dd:95:
a7:11:5c:8b:e6:a3:2f:f2:0b:79:90:e6:65:dd:94:
86:68:ed:fd:5e:43:37:8b:69:67:9f:d6:7f:b9:95:
74:91:05:e5:8c:26:8a:65:c3:db:f0:8b:0d:ca:da:
df:55:9f:21:8d:0b:b6:0a:8b:87:a3:46:52:9a:9c:
bd:db:82:87:aa:05:2e:95:59:b7:5c:4b:a3:74:29:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:57:38:CE:72:57:45:33:55:B7:E7:7C:6D:AE:92:CC:8F:4A:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.148.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a5:75:a7:8f:2c:32:02:11:21:2d:24:9d:3f:6d:4b:1e:a4:
b6:70:8e:7a:f2:cd:42:d6:c5:be:ef:b2:1f:83:3a:9d:e0:94:
d8:f6:3a:83:a7:48:5e:66:6f:03:5e:37:9a:93:08:68:a3:c8:
6e:75:0a:4b:3e:89:ca:1a:25:db:f1:4d:bb:23:c7:b4:56:e7:
da:27:0e:01:35:bc:8e:50:26:70:83:ce:20:25:d2:66:06:df:
df:35:91:bc:7b:3a:c5:fa:30:ed:2e:8e:7d:30:db:28:82:ba:
75:8f:7b:a9:ed:8e:17:bc:e2:c8:28:66:dd:ea:42:6c:9f:0f:
2c:bd:4d:14:56:b2:13:c9:4b:c2:20:d5:32:dd:92:72:78:4c:
07:b5:ac:78:32:04:fb:6e:c2:9b:ec:67:a5:b4:1c:a5:09:37:
3e:0e:f5:7f:13:92:d9:f4:92:a7:4e:56:9e:13:25:5c:72:6f:
1a:85:db:ec:fa:80:f7:66:30:42:cf:1b:15:80:79:18:28:3b:
c8:6d:69:94:3a:d7:9c:44:26:9c:a6:f2:4b:7d:bc:24:73:02:
e7:f2:ad:0a:34:49:66:35:53:e4:91:1b:9a:8d:9a:e7:ab:ee:
72:bd:49:c9:36:65:3b:0b:d5:a5:4e:15:64:15:7a:04:b4:9c:
83:f2:a1:d5
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIURWCs71f0vE/He66mpmPK8ZUTjXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjQwOTMzMDVaFw0yNzA4MjMwOTM4MDVaMDMxMTAvBgNV
BAMTKDlGMEQ1NzM4Q0U3MjU3NDUzMzU1QjdFNzdDNkRBRTkyQ0M4RjRBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfs5lY2p7ljN1MQKN60EEU93J
YQkO1g6+W6dRsG4mHgjjJCT5oikNOZjUWpfB8VwRb0UYtBTG5OkW2rgU6+Iw25hv
KanlH1GVEYg9+sp6XZHR89STaiSS0/p+1oqjfW+Ux5lHVuh5xgiI2ifkU1+/qrVA
zPy0P/9rwGn70lGY68VFuBwExqMZrQxLYG4D8AE72w6mMhlXkbAmVWSXbT884VXu
JOUl7INIUHU+HN9vNTHdlacRXIvmoy/yC3mQ5mXdlIZo7f1eQzeLaWef1n+5lXSR
BeWMJoplw9vwiw3K2t9VnyGNC7YKi4ejRlKanL3bgoeqBS6VWbdcS6N0KWVFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUnw1XOM5yV0UzVbfnfG2uksyPSjIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
lDANBgkqhkiG9w0BAQsFAAOCAQEAJqV1p48sMgIRIS0knT9tSx6ktnCOevLNQtbF
vu+yH4M6neCU2PY6g6dIXmZvA143mpMIaKPIbnUKSz6Jyhol2/FNuyPHtFbn2icO
ATW8jlAmcIPOICXSZgbf3zWRvHs6xfow7S6OfTDbKIK6dY97qe2OF7ziyChm3epC
bJ8PLL1NFFayE8lLwiDVMt2ScnhMB7WseDIE+27Cm+xnpbQcpQk3Pg71fxOS2fSS
p05WnhMlXHJvGoXb7PqA92YwQs8bFYB5GCg7yG1plDrXnEQmnKbyS328JHMC5/Kt
CjRJZjVT5JEbmo2a56vucr1JyTZlOwvVpU4VZBV6BLScg/Kh1Q==
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:38 2026 by rpki-client