Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3135332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: wMqRBO+TsTVitWHMYOO9hn+bAPtMFLW3RniYJogzF2E=
Subject key identifier: F3:DE:94:75:E1:C8:2D:A0:77:48:CC:A5:57:B5:45:D0:B7:7C:84:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E42440645FF392BA966C3C978CC9E14DC8A2AD9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135332e302f32342d3234203d3e2032393134.roa
Signing time: Fri 22 May 2026 08:11:54 +0000
ROA not before: Fri 22 May 2026 08:06:54 +0000
ROA not after: Fri 21 May 2027 08:11:54 +0000
asID: 2914
IP address blocks: 145.79.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 02:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:42:44:06:45:ff:39:2b:a9:66:c3:c9:78:cc:9e:14:dc:8a:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 22 08:06:54 2026 GMT
Not After : May 21 08:11:54 2027 GMT
Subject: CN=F3DE9475E1C82DA07748CCA557B545D0B77C848D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:3c:77:92:55:0a:40:55:ce:75:96:1c:e9:
2a:87:b1:4c:e7:6d:54:6c:0a:cf:2c:93:62:58:d4:
ba:eb:6e:82:8c:29:9d:b1:9b:ee:12:62:e8:6b:35:
12:b5:4b:fa:cb:70:96:38:4b:15:d4:df:e6:fc:c2:
45:81:57:49:41:91:50:e3:d3:e9:8a:70:27:cd:55:
6a:69:05:58:89:47:98:ed:36:d4:da:bf:90:05:20:
cf:7f:e5:e8:1e:44:fb:6f:90:3e:8e:00:86:8b:15:
17:7e:75:82:cc:e8:26:f9:47:d6:92:01:f1:69:d0:
fc:fe:3d:4a:94:11:1b:22:df:e1:19:32:41:d3:55:
64:23:50:dc:a3:39:2e:b4:3f:5e:01:2f:64:ab:bc:
f8:67:54:63:6c:c0:eb:34:7b:20:d9:ed:22:12:f8:
9c:49:81:56:10:9e:f9:d2:79:b5:d9:13:cb:eb:1c:
51:6c:27:e8:0b:eb:2b:8b:5e:17:13:e3:72:2e:e0:
9b:82:8c:52:47:1e:70:df:fe:b4:d8:54:3c:2b:53:
f7:46:1e:30:33:9b:d8:c6:c3:aa:1c:9d:b2:56:bc:
65:d7:72:e8:df:45:2e:38:4c:72:60:e0:f4:14:01:
3c:ba:77:ed:a3:f2:dd:3e:53:d2:51:1c:98:5a:75:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:94:75:E1:C8:2D:A0:77:48:CC:A5:57:B5:45:D0:B7:7C:84:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.153.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f9:ff:64:0b:30:a5:91:62:10:4a:61:9f:69:86:cb:27:37:
49:16:bb:65:50:22:3b:b2:d9:71:48:db:c3:99:d2:ac:5e:dc:
4c:b3:65:1c:1c:ad:e9:c5:52:51:ac:a2:42:77:2c:d6:e8:e1:
c5:ee:33:25:4a:5c:56:ec:48:68:2a:28:dc:45:54:55:a8:e5:
2c:be:4a:23:88:d3:b1:e6:eb:9e:75:59:72:8e:80:6f:94:7d:
02:9a:d0:a0:4b:de:b0:d8:96:d5:04:3a:37:4f:76:0b:fd:78:
ab:af:c5:27:49:5f:d6:0d:34:a3:55:05:c7:af:85:54:08:36:
c3:de:28:8d:a8:65:df:cf:ee:ea:34:f4:7f:2f:72:9f:ab:88:
fc:07:2e:31:cd:f4:87:c9:b1:58:59:05:60:56:1c:85:b7:ee:
89:b5:37:a6:32:07:f1:b8:9c:8d:e3:76:24:96:0b:7c:de:2f:
49:9b:ab:66:43:40:14:61:1a:d9:64:a5:92:a7:1b:c0:49:89:
1d:f6:54:74:f8:cd:8d:d6:99:22:3f:3c:5d:39:48:ac:5c:27:
fb:75:d9:34:2f:dc:4d:9e:c6:85:6f:4e:86:7b:b1:01:c7:d0:
5b:cb:d9:e3:33:75:6c:29:16:b9:82:13:43:dc:44:c3:9a:5a:
45:96:fd:5e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXkJEBkX/OSupZsPJeMyeFNyKKtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MjIwODA2NTRaFw0yNzA1MjEwODExNTRaMDMxMTAvBgNV
BAMTKEYzREU5NDc1RTFDODJEQTA3NzQ4Q0NBNTU3QjU0NUQwQjc3Qzg0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzjx3klUKQFXOdZYc6SqHsUzn
bVRsCs8sk2JY1LrrboKMKZ2xm+4SYuhrNRK1S/rLcJY4SxXU3+b8wkWBV0lBkVDj
0+mKcCfNVWppBViJR5jtNtTav5AFIM9/5egeRPtvkD6OAIaLFRd+dYLM6Cb5R9aS
AfFp0Pz+PUqUERsi3+EZMkHTVWQjUNyjOS60P14BL2SrvPhnVGNswOs0eyDZ7SIS
+JxJgVYQnvnSebXZE8vrHFFsJ+gL6yuLXhcT43Iu4JuCjFJHHnDf/rTYVDwrU/dG
HjAzm9jGw6ocnbJWvGXXcujfRS44THJg4PQUATy6d+2j8t0+U9JRHJhadflNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU896UdeHILaB3SMylV7VF0Ld8hI0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM1
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
mTANBgkqhkiG9w0BAQsFAAOCAQEAdPn/ZAswpZFiEEphn2mGyyc3SRa7ZVAiO7LZ
cUjbw5nSrF7cTLNlHByt6cVSUayiQncs1ujhxe4zJUpcVuxIaCoo3EVUVajlLL5K
I4jTsebrnnVZco6Ab5R9AprQoEvesNiW1QQ6N092C/14q6/FJ0lf1g00o1UFx6+F
VAg2w94ojahl38/u6jT0fy9yn6uI/AcuMc30h8mxWFkFYFYchbfuibU3pjIH8bic
jeN2JJYLfN4vSZurZkNAFGEa2WSlkqcbwEmJHfZUdPjNjdaZIj88XTlIrFwn+3XZ
NC/cTZ7GhW9OhnuxAcfQW8vZ4zN1bCkWuYITQ9xEw5paRZb9Xg==
-----END CERTIFICATE-----
Generated at Sat May 23 17:46:41 2026 by rpki-client