Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136332e302f32342d3234203d3e20313439353733.roa
File: 3134352e37392e3136332e302f32342d3234203d3e20313439353733.roa (raw, json)
Hash identifier: vOTe+gknlXRioZtaW2rnhpdLQbXwVGpHh0LfxW0hnz4=
Subject key identifier: F7:35:C1:30:C4:D7:4C:5E:17:57:4A:9B:39:01:EC:D9:28:1C:9C:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B9A5D1AF19EA572811F95736FE43869E9BBBEC2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136332e302f32342d3234203d3e20313439353733.roa
Signing time: Mon 24 Aug 2026 12:36:10 +0000
ROA not before: Mon 24 Aug 2026 12:31:10 +0000
ROA not after: Mon 23 Aug 2027 12:36:10 +0000
asID: 149573
IP address blocks: 145.79.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9a:5d:1a:f1:9e:a5:72:81:1f:95:73:6f:e4:38:69:e9:bb:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 24 12:31:10 2026 GMT
Not After : Aug 23 12:36:10 2027 GMT
Subject: CN=F735C130C4D74C5E17574A9B3901ECD9281C9C83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:d5:3c:fc:20:38:21:53:5c:39:3f:c3:3a:
8a:13:a8:30:05:42:86:1b:2e:03:75:6e:40:f0:58:
bd:0d:ea:4b:64:41:62:33:f0:9c:aa:71:23:05:e7:
05:49:24:ec:95:1f:8c:07:7a:96:eb:ff:a1:91:f3:
b4:1c:90:e5:26:5b:fd:16:42:c2:e6:d2:42:58:96:
1e:00:52:af:80:35:83:4c:6c:7a:61:18:b9:b2:d6:
7c:08:2c:ee:61:53:7a:8d:64:4e:17:6c:ae:1c:7d:
fe:4c:01:b5:d4:13:8b:12:60:a7:af:05:a3:0a:b9:
39:0f:e2:e1:35:7a:4e:13:a9:65:1e:72:e2:da:18:
da:94:d9:d9:d5:91:08:bb:02:ce:75:8b:37:66:11:
db:de:59:78:62:56:e3:d1:98:20:60:89:cd:89:90:
a5:c2:a2:6a:ac:ee:8c:e6:73:c4:72:fb:51:6a:14:
23:5a:41:8c:77:b6:32:dd:fa:e8:df:bc:97:55:a3:
32:97:58:08:1b:b5:f1:4e:e3:ac:4c:40:57:a0:ba:
5e:77:3f:94:1a:bc:de:19:b0:9c:fd:7b:a3:ea:5c:
1c:54:ac:8a:33:44:45:dd:7f:a8:03:d4:9b:b4:e5:
05:79:a7:ca:47:41:6a:a1:24:1c:9c:46:e0:83:3c:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:C1:30:C4:D7:4C:5E:17:57:4A:9B:39:01:EC:D9:28:1C:9C:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136332e302f32342d3234203d3e20313439353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.163.0/24
Signature Algorithm: sha256WithRSAEncryption
88:67:e0:ce:2a:89:3d:3e:21:b1:02:fb:71:d3:4b:67:7a:fe:
1c:16:90:04:e5:ce:da:9d:d9:cc:1f:b0:95:43:8e:92:52:52:
01:b2:47:7f:68:21:b3:f6:a0:55:a4:f4:b4:98:bf:6c:bb:dc:
3f:bf:c1:23:03:78:d2:9c:e3:cb:be:a0:5a:df:39:14:aa:83:
bc:46:96:c6:c8:db:66:ba:3b:e0:a2:74:03:ca:4b:4f:d3:d7:
6e:2e:a4:24:e9:06:b9:49:80:37:86:b5:30:ac:ff:27:e3:3f:
25:a7:d1:e8:9e:13:17:bd:82:91:05:8b:14:08:f9:87:94:8c:
21:3c:d1:3e:56:b9:05:11:c0:7d:87:8e:f1:a1:47:8f:6f:32:
0b:e2:90:db:f6:3b:ae:79:60:d9:98:72:19:7e:16:4d:f0:55:
9c:51:e4:4e:09:50:77:c3:74:ff:92:f2:c9:ae:96:0c:76:1e:
e1:ab:bf:24:76:62:47:2a:f0:62:9e:8c:90:94:a9:6f:63:45:
92:50:c9:44:11:46:c1:05:96:43:18:f3:3c:e8:99:69:68:15:
02:44:aa:71:cb:c9:54:1e:87:de:42:35:1c:e9:87:d5:8a:f9:
89:61:9f:bb:35:92:7c:63:37:be:40:f9:af:4e:97:9e:89:5c:
dc:d9:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:33 2026 by rpki-client