Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e203136353039.roa
File: 3134352e37392e3135302e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 5iPnXzoaDOwt5QNqxZVnFj644EVzmb0nstMN9BhO5dM=
Subject key identifier: ED:E2:32:71:F4:0F:B4:B2:4F:2C:04:19:54:FD:FD:B9:91:D7:E2:78
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19F968F9C443A1E947CE659936CCD8EAE4A45F17
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e203136353039.roa
Signing time: Mon 05 Oct 2026 09:25:26 +0000
ROA not before: Mon 05 Oct 2026 09:20:26 +0000
ROA not after: Mon 04 Oct 2027 09:25:26 +0000
asID: 16509
IP address blocks: 145.79.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f9:68:f9:c4:43:a1:e9:47:ce:65:99:36:cc:d8:ea:e4:a4:5f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 5 09:20:26 2026 GMT
Not After : Oct 4 09:25:26 2027 GMT
Subject: CN=EDE23271F40FB4B24F2C041954FDFDB991D7E278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:69:bc:cf:42:eb:7a:38:86:4b:12:c1:62:
a2:83:fd:0e:aa:6b:20:cd:41:a0:45:ca:20:8c:89:
5e:20:74:ec:58:76:5a:e2:74:cd:60:80:82:6c:8e:
7f:9e:52:8f:6f:a5:72:78:d2:3a:a6:0e:81:6d:dc:
4a:9c:29:7f:56:7a:d2:0e:a2:eb:68:8e:39:59:aa:
1f:59:d8:d6:36:88:dc:c5:cb:4b:30:0d:6f:95:aa:
5e:16:3c:d3:97:13:7b:52:04:7f:8e:b3:3e:da:79:
27:ed:ff:03:c1:a5:79:30:d4:b0:28:ad:44:f4:ec:
17:80:af:00:e5:91:96:ef:b1:f4:bf:74:65:c2:95:
fa:f6:46:97:d2:38:06:be:68:03:b4:c0:8e:a7:8c:
b4:c0:39:a3:09:3f:ee:b1:aa:3d:88:79:42:7f:14:
07:f1:98:6b:64:5a:d1:b7:1d:2d:3a:70:6e:c5:ab:
e1:b1:82:62:d5:60:74:93:d7:c2:5a:3b:49:6b:96:
f2:51:a5:97:9b:eb:2c:c1:db:ad:c6:29:79:dc:14:
35:b0:9f:79:5f:b9:69:72:04:58:26:7b:38:34:fb:
4c:87:05:65:c4:38:65:ca:d7:91:fa:75:30:f3:0c:
66:f4:e8:ab:97:8b:7e:92:df:e9:04:f6:64:3d:cc:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E2:32:71:F4:0F:B4:B2:4F:2C:04:19:54:FD:FD:B9:91:D7:E2:78
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bb:3f:37:83:3a:40:80:e1:8d:e8:5d:a9:62:65:81:18:07:
c1:29:14:4a:78:09:04:37:fc:ed:62:a3:6c:40:a3:3e:32:ef:
56:f8:5f:3d:47:ed:fc:fc:0c:81:b9:b0:9e:d3:21:53:61:55:
ad:df:f6:98:89:c3:1e:22:f2:92:e7:74:97:67:c4:60:a8:dd:
4c:56:e6:ec:67:a4:a2:4f:0e:7e:64:75:9b:da:08:7c:fa:4a:
ad:32:22:eb:2b:12:74:68:91:1b:ed:65:ae:74:a3:62:ac:3c:
09:aa:b8:c2:11:32:bc:2a:d4:e4:c9:81:86:0f:3b:05:df:a2:
69:cc:2d:a8:ad:bb:a3:42:4a:d6:db:1b:c8:82:c8:cd:dc:17:
dd:47:4a:00:88:82:93:e9:fc:6f:dd:8a:86:69:07:7f:27:ef:
f9:45:47:d3:a8:51:1d:fe:e6:fc:e6:87:8a:2e:d8:4e:06:4e:
ba:57:c0:37:f2:ab:db:0a:c6:a5:b6:4b:4a:8e:93:7f:ea:0d:
e5:f5:bb:6b:2a:23:d1:a0:99:2a:dd:f4:ab:a7:17:07:3f:2a:
2c:f3:64:ef:72:3b:1a:82:64:c0:90:b0:e4:6b:99:ca:41:99:
02:b0:27:e8:a8:20:20:ef:de:92:80:e9:e2:3a:44:70:7d:b2:
0a:b1:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:25 2026 by rpki-client