Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136342e302f32342d3234203d3e2035303635.roa
File: 3134352e37392e3136342e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: Cmr64X1TaPTOvQBcX4ZHp/Y10z8QIxwPifRkacSeDL8=
Subject key identifier: B1:BE:FA:3E:E3:2E:41:10:A7:8D:03:EA:CD:E3:83:28:E7:BD:6E:1B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72088B83D89E09F1DEAC29027697CF95B95BBB7E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136342e302f32342d3234203d3e2035303635.roa
Signing time: Fri 15 May 2026 05:24:12 +0000
ROA not before: Fri 15 May 2026 05:19:12 +0000
ROA not after: Fri 14 May 2027 05:24:12 +0000
asID: 5065
IP address blocks: 145.79.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:08:8b:83:d8:9e:09:f1:de:ac:29:02:76:97:cf:95:b9:5b:bb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 05:19:12 2026 GMT
Not After : May 14 05:24:12 2027 GMT
Subject: CN=B1BEFA3EE32E4110A78D03EACDE38328E7BD6E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:8a:a3:74:d7:1b:77:7b:f9:c5:5b:bf:1b:
21:24:ad:69:ac:f2:4f:7f:99:79:9a:06:95:07:8f:
c4:07:75:62:c4:8c:9c:ee:cb:0f:ce:32:ec:d1:94:
e9:51:aa:0e:8b:27:67:c7:0f:0c:ff:82:b3:bd:31:
c7:21:2e:a1:8c:b6:cb:3c:b6:29:db:ba:cf:d7:96:
e7:5e:3d:13:96:5a:67:aa:b8:fc:bc:9b:43:75:1c:
d0:0f:81:18:b3:fe:a7:5d:16:0d:c3:65:9e:ff:d1:
2b:3b:f0:f8:8d:2e:1f:17:c8:cc:56:18:02:7d:b5:
3c:88:a6:02:1d:da:dc:07:d7:69:25:a2:13:b7:3b:
51:7f:b4:cd:7e:aa:9e:f8:08:18:d8:81:db:64:c1:
65:4d:85:f1:46:15:e3:96:0d:24:11:8b:2c:10:7e:
5b:fb:8d:02:9b:70:3c:cf:03:f9:21:72:31:6c:97:
4a:bb:9d:ff:47:3b:8f:48:e8:c5:ca:38:a9:27:a0:
43:f3:2e:02:2d:08:91:0b:e5:6b:b7:ed:b6:af:02:
b2:19:bf:43:2e:99:8d:82:5a:68:be:84:46:c8:97:
21:d6:ae:19:47:e8:1b:e5:ae:a5:a4:9f:69:b1:0d:
ce:91:9d:d4:10:e3:49:dd:15:a1:1f:82:f8:7b:10:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:FA:3E:E3:2E:41:10:A7:8D:03:EA:CD:E3:83:28:E7:BD:6E:1B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136342e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.164.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e8:6e:72:49:30:dc:06:ef:93:01:10:11:fd:4e:f6:44:5a:
ec:f2:e4:dc:18:8a:93:f1:04:55:c4:cf:63:aa:ff:58:74:df:
cc:bc:d3:9f:86:b1:7c:ac:b7:e5:18:cf:9d:9e:36:e5:9e:ea:
48:09:8b:4b:25:4c:da:e6:5b:06:73:04:60:82:44:62:76:9f:
5e:d2:a9:4b:96:9f:66:7b:27:07:22:51:00:59:7d:ae:a2:08:
45:df:82:7b:3b:c8:62:77:2a:a2:be:28:41:5c:33:be:a3:f5:
34:c6:17:cf:32:01:3f:df:49:46:a5:37:57:79:89:86:56:e9:
a0:db:81:c7:d1:e0:d6:a0:05:2c:ed:34:3b:ec:eb:0c:00:48:
10:57:ae:ee:f8:ca:59:cd:d8:04:b9:e0:a5:ce:26:d1:06:9d:
85:42:a5:e0:58:b0:83:28:14:84:26:89:27:2a:bd:d2:8f:04:
e4:83:3f:b6:cd:7b:79:d3:e0:3d:66:48:bf:ba:0c:0d:18:36:
4c:8c:0b:05:d0:9e:8f:2c:7d:6c:1e:73:0e:1e:bd:4f:ad:a5:
33:49:39:33:e8:04:67:49:aa:db:36:e0:25:66:c1:3e:e8:ac:
66:b1:e0:d1:73:5e:8f:b3:84:83:2f:0b:02:42:c3:e0:44:dc:
76:ce:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:16:08 2026 by rpki-client