Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3135342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6D5/WGXTFIF8w+OkP9bNmGGDm9LG/DXwb27n2DvE2NE=
Subject key identifier: 7E:73:EB:76:4B:60:28:70:AE:3F:79:FD:D6:8C:7D:85:AF:76:41:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 206013F55CC748159181D6E6FA6CB61DA5DA7989
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20383334.roa
Signing time: Wed 13 May 2026 13:52:08 +0000
ROA not before: Wed 13 May 2026 13:47:08 +0000
ROA not after: Wed 12 May 2027 13:52:08 +0000
asID: 834
IP address blocks: 145.79.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:60:13:f5:5c:c7:48:15:91:81:d6:e6:fa:6c:b6:1d:a5:da:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 13 13:47:08 2026 GMT
Not After : May 12 13:52:08 2027 GMT
Subject: CN=7E73EB764B602870AE3F79FDD68C7D85AF76410F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:9e:70:53:c9:a7:1f:3c:b2:45:e4:1b:9d:
66:12:1e:76:50:53:a4:5c:20:2b:4a:77:f6:87:3c:
c6:de:1e:d7:22:d7:f8:78:25:6f:24:91:e3:b0:a4:
9e:54:11:4a:2f:8e:4a:72:fb:ea:f4:e5:19:6e:70:
0b:29:8c:60:1f:a5:09:e6:c3:a1:4f:44:1a:60:b0:
e2:51:ac:ff:4d:a5:55:b7:b5:23:86:8f:30:7c:aa:
6f:a4:6b:2e:f0:eb:c1:eb:ec:ed:38:f9:8d:2b:6c:
91:1f:7a:a3:40:52:d9:55:6e:c8:bb:b1:3e:cb:37:
ff:9b:24:9f:98:f7:90:2a:c3:2c:68:88:f8:19:be:
8e:d4:22:f7:e8:cd:17:8b:67:b1:1a:b2:28:5f:b5:
96:df:17:87:2d:0a:da:e6:9e:fa:5d:b7:9c:ed:d3:
a2:93:26:ca:97:83:f7:65:73:5a:6a:34:8d:9f:f9:
30:02:b2:8f:89:16:44:46:46:6f:a7:2b:32:6e:3b:
1f:c1:cc:7a:b5:3a:89:df:bd:8d:fb:94:3e:a4:52:
77:15:0c:57:01:ae:d3:94:18:f9:e1:86:69:bd:d0:
24:f4:1c:99:6b:f7:1d:b5:87:05:1b:20:1b:6e:ef:
a1:51:79:a0:eb:8a:9b:c7:ee:f6:a7:5b:ac:ea:b5:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:EB:76:4B:60:28:70:AE:3F:79:FD:D6:8C:7D:85:AF:76:41:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:08:5c:fb:f6:ff:7e:45:0b:be:2a:bd:e0:fa:bf:65:88:d1:
d6:29:3d:bc:a6:a0:5c:f8:fa:01:d9:8e:dd:cb:6a:db:ed:e3:
bc:85:c2:bd:ce:57:47:1e:50:a0:92:45:78:61:4b:7e:68:9d:
42:09:3e:f6:04:cd:a2:72:fe:88:df:2a:8e:6b:0a:9b:fa:b2:
77:01:2b:b7:87:77:33:fb:7b:2c:55:b5:c3:e7:1e:34:d4:f8:
98:3c:ab:19:c3:9f:5f:cd:f1:93:fd:bc:f3:33:2c:67:1c:d7:
13:41:da:7d:87:c2:9b:e4:58:85:d7:92:86:2c:27:8b:f2:d6:
5b:bb:53:87:8b:01:9d:0c:72:f5:16:c6:6b:f8:7b:7b:ae:3a:
07:3a:ed:65:c5:b8:00:a9:f2:86:f8:42:c8:f5:b1:78:21:b4:
2e:f5:8a:dd:f7:74:be:7f:45:4c:52:b9:e4:36:06:b2:b8:bc:
7b:f4:74:9b:39:73:fc:af:ab:24:ab:fe:19:8d:ab:fc:33:93:
8c:a6:1d:0f:76:78:c7:80:6c:9e:48:da:4c:d7:1a:19:c7:3c:
a5:86:dd:20:73:4b:27:98:26:a6:82:c3:4e:f9:f6:2c:8a:fa:
4b:a6:ce:fc:ac:35:18:cf:07:6f:59:16:5a:e8:34:32:ff:52:
2b:17:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:23:28 2026 by rpki-client