Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e2039333034.roa
File: 3134352e37392e3135302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: VNCOm0/jT6Qc6DkBkaw57cDEoBVoNIcRFrrzEY5Bjz8=
Subject key identifier: D8:99:FB:41:EC:69:91:6F:02:D3:4B:C0:05:6B:C1:2A:1B:7D:AF:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 264FBE971AE1C06FE79A30342E44ADB15C452DF4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e2039333034.roa
Signing time: Mon 24 Aug 2026 09:37:47 +0000
ROA not before: Mon 24 Aug 2026 09:32:47 +0000
ROA not after: Mon 23 Aug 2027 09:37:47 +0000
asID: 9304
IP address blocks: 145.79.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4f:be:97:1a:e1:c0:6f:e7:9a:30:34:2e:44:ad:b1:5c:45:2d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 09:32:47 2026 GMT
Not After : Aug 23 09:37:47 2027 GMT
Subject: CN=D899FB41EC69916F02D34BC0056BC12A1B7DAF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:02:e7:2d:7c:29:b4:b3:b5:04:45:04:df:
4e:3f:fc:0f:01:7b:11:29:cc:06:3d:8f:64:8e:a9:
96:85:dc:15:8e:0f:03:56:72:46:c9:cf:ca:62:7b:
0a:db:f2:03:97:8c:d7:e6:da:1a:a3:ff:bd:cc:57:
02:92:75:1c:45:53:70:5c:07:99:4c:a1:50:55:3f:
42:48:6e:43:60:65:3e:0c:76:39:77:df:f8:03:68:
e1:e6:04:14:07:27:24:14:a3:a2:34:ce:54:d7:f7:
c2:ad:8a:9d:01:cf:cc:e8:c4:7d:ef:3d:e0:0c:8b:
2d:33:dc:32:4e:33:16:f5:6b:62:dc:3e:75:77:ba:
15:19:4b:cd:5e:20:40:0a:03:ac:a7:b5:45:81:a5:
be:91:24:c7:8f:8a:6b:3e:19:f1:d7:e1:53:ce:49:
c7:63:12:00:43:73:cd:8f:00:59:10:f5:d1:de:59:
f7:b3:a0:bd:f7:6d:ff:09:ac:64:3a:1b:44:43:6b:
21:33:71:67:a8:be:fc:c3:ad:3d:7f:cf:a4:82:0b:
c0:15:cc:e3:23:b3:c3:ed:31:44:d3:e8:66:73:ce:
35:05:d1:b2:ae:59:b9:2b:8a:06:b9:28:37:f1:3b:
79:1c:8a:04:db:5e:4c:a3:bd:4b:7b:82:4f:ae:2e:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:FB:41:EC:69:91:6F:02:D3:4B:C0:05:6B:C1:2A:1B:7D:AF:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:04:61:67:16:d6:87:4b:0d:97:3e:4b:a6:a7:d7:6c:0b:52:
2a:77:bc:63:2c:b9:9b:fe:7d:90:7b:a3:c9:23:39:91:0b:28:
a1:e8:88:e6:c3:cb:44:6d:c5:9d:d2:1d:7a:97:99:cb:49:62:
f4:f7:44:58:b0:14:c6:e3:42:25:62:a5:7e:26:2f:eb:3d:9c:
63:cd:fd:57:16:bc:fc:bb:4a:05:dd:a6:4f:f6:af:0d:15:7a:
d3:6e:00:0d:98:da:46:7d:72:a6:d4:08:41:ee:5d:15:ac:f6:
4d:ce:f7:33:45:5f:d8:30:3c:82:73:f4:67:9d:c0:fe:56:87:
25:bc:94:eb:d9:f2:87:05:97:af:e8:7d:52:93:d0:98:3b:9b:
07:ac:dd:9a:74:d3:25:1a:45:2f:c0:67:f9:13:e6:b8:52:98:
1c:ef:57:90:e1:72:22:bd:b6:f3:60:59:cf:e1:7d:ab:ff:44:
f8:19:34:77:63:65:6a:0f:26:d9:3f:ac:b2:de:ad:6f:3e:46:
55:fe:1b:a2:9d:87:47:e6:83:4b:2e:4b:7d:5e:7f:cd:3d:95:
0c:d4:54:b9:b1:db:e1:9c:6c:63:63:5c:f6:1f:99:74:90:e1:
e6:f9:35:ac:bf:8e:78:f0:a3:7a:30:d7:98:96:69:a4:b5:72:
81:74:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:37 2026 by rpki-client