Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135322e302f32342d3234203d3e20323131333733.roa
File: 3134352e37392e3135322e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: r/iFrphDXPDXtPozhKBzQcDikz5gZMwmUKD3cJwepK4=
Subject key identifier: AB:7D:06:BB:3F:E1:45:5E:7A:2C:61:45:B1:05:00:DF:19:A2:E3:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43E0C635A88303BF00342FEA2B69B0DB927A8A31
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135322e302f32342d3234203d3e20323131333733.roa
Signing time: Fri 15 May 2026 05:24:13 +0000
ROA not before: Fri 15 May 2026 05:19:13 +0000
ROA not after: Fri 14 May 2027 05:24:13 +0000
asID: 211373
IP address blocks: 145.79.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e0:c6:35:a8:83:03:bf:00:34:2f:ea:2b:69:b0:db:92:7a:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 05:19:13 2026 GMT
Not After : May 14 05:24:13 2027 GMT
Subject: CN=AB7D06BB3FE1455E7A2C6145B10500DF19A2E3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:a3:e1:b1:62:83:f1:b1:f3:03:4e:cb:41:
81:22:dd:4f:9f:54:ed:6a:8c:17:c2:36:6b:c9:f2:
55:94:9a:7f:e4:de:c8:18:51:74:a2:4f:d2:4d:6a:
33:d8:09:42:2c:7d:a6:e7:a6:f7:07:77:55:a1:ba:
dc:90:11:92:d2:91:fe:2a:ce:78:42:4e:26:33:23:
5e:20:09:97:b6:a4:a7:9f:5d:eb:30:78:81:3c:72:
79:58:92:20:55:9c:05:8f:66:86:7c:33:a5:0d:13:
70:27:08:c8:9f:ec:59:42:c9:69:85:1e:96:78:1a:
25:34:67:96:51:c7:ce:20:c9:3f:05:79:c5:10:11:
44:dc:79:0b:e9:ae:d4:46:44:b0:89:c1:c8:30:89:
61:57:9c:55:10:e5:89:5b:36:19:87:e6:82:11:da:
ea:f3:4e:d2:d1:66:a6:36:0c:c6:42:5a:59:7d:53:
12:52:58:4e:9e:42:82:b3:0a:86:41:11:39:91:00:
9b:21:52:fb:f8:f7:a8:36:30:fd:c8:47:ff:87:ce:
10:d0:27:8d:73:87:83:31:53:c8:af:b8:da:b8:a0:
c6:da:91:65:e0:89:f7:17:73:98:2d:8c:65:2c:bb:
bc:5f:c5:d5:91:f7:88:50:a5:60:8d:85:e7:4b:39:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7D:06:BB:3F:E1:45:5E:7A:2C:61:45:B1:05:00:DF:19:A2:E3:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135322e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.152.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d5:53:20:e0:53:84:16:63:b2:7d:b9:94:dc:bc:3e:ad:41:
48:6c:1b:57:8f:3f:4c:46:b4:ba:b4:15:65:ca:20:71:97:53:
2c:71:21:b6:a8:87:49:48:d1:fd:9c:1e:54:72:03:96:cb:d1:
37:48:1a:01:e1:15:0f:2e:db:52:f8:82:e4:4e:6f:e4:e5:aa:
e9:7e:55:79:84:1d:d1:62:55:c3:80:e1:e9:19:04:14:57:09:
5b:66:b0:67:45:f1:17:a1:71:2d:26:d1:52:17:79:88:d5:0b:
ca:62:7f:e7:17:14:70:6d:1e:43:9d:4a:c5:8f:00:c7:60:92:
88:1d:32:6b:04:c9:3d:5a:09:79:67:1d:d5:a1:81:99:b3:f6:
9d:c4:2a:64:ea:09:dc:a4:2f:36:33:bf:9e:be:a4:3c:e3:d4:
27:71:d7:70:8c:27:58:fb:f6:6b:4a:13:75:a8:d2:17:ff:6b:
7d:59:0b:95:18:61:76:85:c7:90:cd:86:6e:0e:65:ad:9b:6d:
8a:ee:cb:ef:96:36:d2:b2:93:0d:1b:aa:65:d1:57:3a:c6:e5:
15:52:b8:ad:5c:fb:41:9e:5a:e1:f6:e7:36:1b:22:0d:03:91:
a7:cd:f5:8d:f5:e5:24:0a:12:02:04:14:9f:ed:93:44:e1:7c:
fe:93:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:23:42 2026 by rpki-client