Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e203439393831.roa
File: 3134352e37392e3136322e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier: L/XQ+wpaOKn1l2pTLVx4X0DZhEVo4BgSTJ7Mbba/l5o=
Subject key identifier: F7:1F:55:F6:AE:58:99:A3:64:23:E2:EC:CD:8A:E1:2E:2E:E8:79:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B9EEC719EBAAF2331D49545CC7AD1CD838378AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e203439393831.roa
Signing time: Mon 24 Aug 2026 11:33:58 +0000
ROA not before: Mon 24 Aug 2026 11:28:58 +0000
ROA not after: Mon 23 Aug 2027 11:33:58 +0000
asID: 49981
IP address blocks: 145.79.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:9e:ec:71:9e:ba:af:23:31:d4:95:45:cc:7a:d1:cd:83:83:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 11:28:58 2026 GMT
Not After : Aug 23 11:33:58 2027 GMT
Subject: CN=F71F55F6AE5899A36423E2ECCD8AE12E2EE8792A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:75:fd:d1:31:f8:81:e2:4c:2d:e4:7e:1f:
92:3f:17:cb:f7:82:fe:1f:73:90:f7:43:d7:c3:db:
eb:7e:87:12:a4:bb:45:f0:a1:95:c4:ee:4a:f1:c1:
8e:9b:6d:b0:f0:d9:e8:ae:87:5d:44:39:d0:59:be:
ba:53:dd:ff:54:de:6b:a4:1b:fc:24:d9:e3:15:06:
6e:9b:b9:60:dc:4b:ac:f9:a9:65:93:4d:e7:aa:27:
5d:93:f6:23:46:c9:df:ed:64:65:a8:9b:99:cd:5b:
71:22:15:8e:37:32:70:cb:d8:ae:46:d6:e8:c6:4f:
dc:04:ae:d3:01:d6:86:89:6e:e5:48:74:0b:ad:7f:
44:44:4e:19:34:0e:e5:90:db:a0:16:2d:57:9f:fb:
86:55:6c:fc:0f:03:a2:e3:d7:b2:1f:51:bf:65:78:
99:4e:1c:0a:a3:f8:bb:7d:bf:e7:9a:ba:25:23:5a:
68:6e:7a:46:2d:a4:8d:e3:13:c9:87:e8:e1:bc:b1:
87:4e:dd:8d:d8:21:0f:86:dd:93:f7:d9:5b:98:69:
66:92:f1:64:04:71:86:a0:3c:72:ae:5f:06:c4:04:
82:f9:1c:14:db:ad:4c:9e:bf:c2:c6:22:e2:6e:6b:
c2:33:73:64:59:b8:68:45:f6:d6:b8:14:d1:0b:49:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:55:F6:AE:58:99:A3:64:23:E2:EC:CD:8A:E1:2E:2E:E8:79:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e203439393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.162.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5c:b9:38:b1:f2:3b:d7:84:61:79:91:ad:d1:85:8d:f4:ec:
de:ad:3e:2c:b8:12:02:db:62:e2:08:aa:44:28:a5:4b:1a:58:
33:ef:52:ea:d7:dc:67:86:16:91:3d:56:42:72:11:69:37:84:
a1:51:34:7d:91:f1:7e:e6:57:eb:31:90:cd:4e:6a:93:87:9c:
d8:09:77:18:26:6b:93:45:65:fa:7d:3d:74:a4:c6:7c:51:ff:
2b:f6:18:86:b7:2f:c2:e0:fb:06:fd:3e:38:f1:4e:f7:93:d6:
eb:6e:22:4f:70:b0:0a:eb:81:7f:77:e7:85:b2:5c:f1:14:8b:
eb:23:7f:46:5e:dc:93:06:e9:5d:3e:c7:2e:c0:16:e3:18:25:
ef:93:8d:3a:d2:aa:80:da:3e:34:27:b4:49:4a:3a:cb:d2:df:
fa:51:44:db:a7:c0:45:4c:37:89:94:95:e1:df:ce:fc:5e:c5:
05:48:9e:d9:a5:dc:44:dd:8f:9c:68:01:49:14:ad:68:fb:ef:
3e:85:1b:f5:1a:7c:a3:50:d1:a1:ab:30:27:70:39:23:6c:26:
46:28:50:f3:4c:f5:18:0e:bf:db:b6:c0:b9:02:b7:85:43:29:
0f:d1:f0:76:66:7c:51:6e:23:80:6b:96:2a:2d:88:c9:be:80:
97:6a:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:31 2026 by rpki-client