Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135362e302f32322d3234203d3e203132303833.roa
File: 3134352e37392e3135362e302f32322d3234203d3e203132303833.roa (raw, json)
Hash identifier: UE66gRmf0LD9PI3IlOkHMDzP/IUJJ3UZWdo28tyxYU4=
Subject key identifier: 40:D0:1E:95:CB:B3:03:25:BF:8F:C1:1D:A2:B7:BE:8F:19:51:39:0D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 227958B43B63BA58CFE0037D165688BA44EE60FF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135362e302f32322d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:49:11 +0000
ROA not before: Fri 10 Jul 2026 22:44:11 +0000
ROA not after: Fri 09 Jul 2027 22:49:11 +0000
asID: 12083
IP address blocks: 145.79.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:79:58:b4:3b:63:ba:58:cf:e0:03:7d:16:56:88:ba:44:ee:60:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:44:11 2026 GMT
Not After : Jul 9 22:49:11 2027 GMT
Subject: CN=40D01E95CBB30325BF8FC11DA2B7BE8F1951390D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a5:ec:14:df:fe:4c:01:78:bd:98:12:1f:40:
c2:98:36:52:06:5b:b0:1d:f5:0a:87:37:c7:56:c6:
a3:11:45:f3:1d:90:06:88:2b:d3:34:e8:75:c1:68:
41:25:fa:b6:67:dc:5b:fe:e1:5b:0a:9a:22:e7:1f:
cd:54:10:b1:d1:f5:70:bf:81:3c:0d:a5:d9:94:2a:
c4:84:94:de:1e:1c:85:a3:d1:5b:5c:30:a8:92:72:
62:23:18:36:59:62:d1:e7:ca:43:db:4c:04:8d:3c:
d4:19:35:bd:80:a2:37:40:ce:b3:b6:34:5e:f8:17:
d0:04:d0:93:72:95:4f:95:48:68:49:03:92:d5:57:
33:2f:ac:15:84:74:9f:7b:46:53:d5:0d:17:4a:6c:
f9:21:7a:83:4f:b6:06:5e:6e:71:86:96:c9:01:a3:
c0:a1:8e:fd:4b:63:1c:22:4b:ae:eb:83:1c:77:ed:
05:29:73:55:c1:b1:cd:05:a2:57:38:9a:1f:94:78:
f8:2c:be:54:40:82:6b:f3:23:73:07:b0:08:b5:09:
9c:1c:6f:d1:1f:7f:4a:cd:de:f7:b4:8f:e1:a2:86:
1a:56:dd:ed:78:9c:bf:17:2f:43:c4:f4:3a:be:dc:
df:bb:a8:05:64:69:e3:fb:7a:53:d4:9b:b5:ec:8a:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:1E:95:CB:B3:03:25:BF:8F:C1:1D:A2:B7:BE:8F:19:51:39:0D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135362e302f32322d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:b8:46:f8:01:ac:e5:9b:74:73:46:bd:49:c2:d4:18:a4:0b:
75:7e:eb:58:64:ea:fa:0a:9f:41:03:e4:8a:5d:a3:06:25:eb:
1f:71:17:d0:76:da:60:5c:29:2d:61:74:dd:81:7b:15:03:3f:
6e:6b:81:e8:bb:49:04:02:5e:e1:f5:19:a5:60:7e:b3:60:73:
c6:1b:54:61:16:a8:4e:f7:c9:3c:4e:25:04:04:d7:d2:14:b1:
01:68:b9:13:70:94:48:05:f4:ed:0a:70:89:91:0a:68:bd:59:
2e:07:56:0c:e0:6a:a3:31:df:25:25:cc:db:83:36:e1:2d:de:
5f:30:ab:44:e3:19:b9:7a:e1:57:c5:2e:e4:c2:d6:4d:3f:89:
dd:a0:88:6e:ab:1a:c5:63:8d:7c:ff:77:f1:af:0a:5b:7c:f6:
3d:45:79:06:89:de:d8:da:06:f2:84:97:4d:0b:fb:6d:77:0b:
86:c7:69:cc:15:13:3f:57:85:68:82:68:52:ec:18:48:89:69:
ff:c1:0a:3b:18:9e:50:47:74:15:b4:89:cb:03:af:62:10:4d:
0d:d6:66:2f:8c:09:f5:ef:67:c5:5f:bb:b8:c2:bf:cb:09:42:
9f:80:c7:5c:64:20:b0:42:54:e7:75:24:8e:8f:ff:e8:f9:86:
fc:3a:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client