Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20323132323338.roa
File: 3134352e37392e3135342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: xskERGSZonWMZ8hzQvS3F0AsRh2q09kq/FEUAVtBHPs=
Subject key identifier: 6D:C1:17:B6:EC:62:42:89:B0:EF:1F:22:5A:A6:82:8A:03:64:8A:72
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78C0B3AF1E06B9EAC72BEA7D510843FFE8576DE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 23 Jun 2026 07:43:14 +0000
ROA not before: Tue 23 Jun 2026 07:38:14 +0000
ROA not after: Tue 22 Jun 2027 07:43:14 +0000
asID: 212238
IP address blocks: 145.79.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c0:b3:af:1e:06:b9:ea:c7:2b:ea:7d:51:08:43:ff:e8:57:6d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 23 07:38:14 2026 GMT
Not After : Jun 22 07:43:14 2027 GMT
Subject: CN=6DC117B6EC624289B0EF1F225AA6828A03648A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:6a:ca:bf:06:ca:fd:b3:f6:14:17:fd:ce:
be:38:58:8d:74:25:dd:bf:9d:8e:5e:43:c7:89:99:
bf:b0:7e:62:d6:c7:80:11:6d:b2:31:60:1e:e2:61:
21:f7:e1:2b:2e:32:20:0b:5e:54:75:c8:0a:96:5c:
8c:f3:87:d9:65:d0:25:18:1a:ad:f6:ab:35:c1:c2:
94:28:64:13:00:99:2f:c3:89:1e:a2:05:0d:c9:b6:
cc:74:25:71:a1:21:b2:1a:5b:7e:5c:3a:5f:73:e3:
4b:ce:e3:87:38:7b:47:5b:e7:d7:8c:53:71:14:43:
04:f0:f5:e4:15:b9:ea:34:7c:0f:38:42:37:17:3a:
15:75:a0:b3:7e:1a:a9:ee:3e:5b:dc:62:8d:69:69:
f3:31:7c:bd:25:4f:d7:60:bd:cf:b9:37:bb:1d:92:
45:44:b2:c6:57:d3:85:3b:b6:8a:18:0d:fc:06:11:
57:0e:be:dc:ce:1b:28:93:3c:65:74:05:20:c5:f6:
ad:ab:99:3d:79:92:b9:fc:98:0b:4b:b7:c5:1f:4b:
87:07:63:84:e7:34:fa:bd:fb:2f:7e:1f:7f:07:ae:
63:0d:eb:ec:b6:ad:6e:76:54:1c:49:14:79:3f:c5:
27:e9:29:f3:90:32:6d:8a:10:d8:25:ba:32:5f:8a:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C1:17:B6:EC:62:42:89:B0:EF:1F:22:5A:A6:82:8A:03:64:8A:72
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.154.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5c:e7:13:63:36:d4:e3:5b:38:ec:c8:5e:d0:7c:b0:77:7d:
21:7c:38:1b:f3:5e:da:5a:0d:4c:d2:a1:b4:e2:8b:b6:48:83:
a8:de:1b:ea:d6:4e:2f:69:4a:34:fc:1d:29:06:b7:4e:7a:e4:
2b:24:41:ab:df:40:10:55:8d:a7:e0:a1:2e:df:d8:ec:15:8b:
b3:0c:5d:be:01:68:6d:0a:18:2c:53:83:14:bf:a1:dc:c6:04:
a9:f8:2c:79:0d:98:43:74:20:f8:db:1f:99:bd:cc:12:6b:eb:
b3:02:51:83:ba:17:49:0e:b7:76:ba:17:57:64:36:44:ad:15:
80:18:e4:c7:1a:b5:5e:b8:ff:3c:b6:43:4a:f1:f0:bd:b0:19:
71:07:ed:56:2b:9a:8c:85:a2:76:cc:e8:e9:3d:94:77:42:f3:
62:f3:cf:8e:64:db:7c:7b:42:4c:e9:9a:bb:33:54:e1:ff:c1:
f2:b6:7f:46:2f:54:03:6d:bc:6e:0a:5c:12:31:b6:04:93:87:
3e:c0:0c:b2:b6:e2:6f:52:35:c2:f5:da:33:e1:9e:9c:a3:fb:
1e:49:db:a9:e8:2f:0d:02:2b:53:4b:a7:a5:7d:5c:7d:85:99:
d0:98:9b:eb:e8:e0:25:77:29:0d:9d:54:9a:af:d9:18:db:de:
1d:38:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client