Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135352e302f32342d3234203d3e20313432343931.roa
File: 3134352e37392e3135352e302f32342d3234203d3e20313432343931.roa (raw, json)
Hash identifier: cLcsaWiy+7OKRAEvuZ4B18G6ggtNC1ixjTg0vk8ed20=
Subject key identifier: 85:A8:67:97:A3:D0:9B:7D:18:25:85:41:AF:51:8C:4E:BC:53:E7:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 387C962575BDA8B6F2C70286CCA9A00F2E188D57
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135352e302f32342d3234203d3e20313432343931.roa
Signing time: Mon 10 Aug 2026 12:29:12 +0000
ROA not before: Mon 10 Aug 2026 12:24:12 +0000
ROA not after: Mon 09 Aug 2027 12:29:12 +0000
asID: 142491
IP address blocks: 145.79.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7c:96:25:75:bd:a8:b6:f2:c7:02:86:cc:a9:a0:0f:2e:18:8d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 10 12:24:12 2026 GMT
Not After : Aug 9 12:29:12 2027 GMT
Subject: CN=85A86797A3D09B7D18258541AF518C4EBC53E797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:db:ca:43:48:4f:ed:64:07:cd:1f:2d:cf:
d2:0a:3e:ad:1f:ea:52:3a:77:8a:b8:30:5c:e3:1e:
99:f7:12:f8:a6:29:7b:a0:eb:bc:ce:3a:88:32:3d:
fe:12:53:dd:8f:18:2b:23:47:d8:ce:92:01:7d:1d:
71:35:8d:de:16:50:cc:14:67:a1:77:5a:92:ec:99:
a4:51:2e:1b:04:da:30:62:1e:7f:7a:d3:bd:f9:4b:
91:a6:33:fb:1c:3c:c0:8d:50:06:70:90:68:e1:51:
ea:fc:3f:90:59:93:34:41:72:9e:81:bf:7a:d7:13:
fd:f7:09:23:51:f9:cd:d0:a8:0a:05:01:97:a7:f2:
af:8d:68:ff:ba:a8:98:80:54:8d:94:89:8a:a5:63:
67:97:79:75:97:2b:07:e1:16:fd:7a:3d:d8:f1:56:
46:f8:21:f5:82:72:dd:70:4b:0a:10:8a:ae:12:0d:
98:30:44:0a:41:3b:0d:b7:ff:38:a2:54:64:4f:70:
53:53:55:0d:25:2c:c2:15:42:9b:08:8c:98:ef:16:
9e:3b:a5:15:3e:b0:4c:42:82:f8:72:3e:6a:10:e6:
73:2f:7a:89:22:9b:78:55:ad:7a:57:20:92:58:6e:
d6:a9:44:d4:3b:ef:16:7d:d5:e4:d9:9f:20:9f:7a:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:67:97:A3:D0:9B:7D:18:25:85:41:AF:51:8C:4E:BC:53:E7:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135352e302f32342d3234203d3e20313432343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.155.0/24
Signature Algorithm: sha256WithRSAEncryption
81:31:3c:9e:7d:65:47:ff:05:1d:0f:d9:9d:2b:57:3c:d1:73:
f5:12:0f:78:7a:67:1b:c0:c3:4f:c0:be:a0:aa:6c:4e:0f:1c:
62:9b:27:27:af:00:b2:b0:fb:33:06:7f:53:ed:69:23:2a:e0:
e8:3f:68:87:77:94:b1:45:4c:43:d5:75:0a:db:d5:6a:37:58:
b9:e7:a8:29:4b:51:03:e6:26:db:6c:a3:fa:70:63:57:85:ee:
f7:5a:28:6d:b4:25:f9:c5:5e:4c:3e:19:d1:b5:10:e0:50:43:
1b:24:6c:3a:77:16:26:84:2e:47:ce:1d:64:8b:e4:be:b9:cf:
46:be:86:f4:c5:31:c8:87:75:18:49:0f:73:62:1d:7f:dd:96:
d6:62:79:df:3f:42:47:e3:e0:18:7f:51:7e:ab:fe:da:92:5d:
e8:8d:04:6f:9d:80:ee:9c:e0:15:fd:1f:b6:85:d0:b2:16:a6:
19:d4:b8:75:44:00:eb:e1:c1:4d:e9:4e:3f:43:9c:c3:43:86:
77:eb:2b:97:b1:0d:9d:43:86:d8:72:7d:a5:a4:26:a0:ae:ae:
3f:02:62:6f:72:91:69:cc:cf:f2:9d:c6:5c:af:22:1f:e2:ac:
3f:b7:f2:bb:8f:88:21:11:ae:df:90:e3:f8:dc:5d:48:88:7c:
da:b9:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:56:28 2026 by rpki-client