Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa
File: 3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa (raw, json)
Hash identifier: 2Rt6o3aGVXPWI5j40gtfdzLEwX42Ex87SFZX9E36yAU=
Subject key identifier: 41:41:34:55:FD:8F:8C:F2:AD:63:71:D4:F5:ED:76:42:93:0F:CF:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6B14FC2525795B0C56CC76C08D26C2FA91BA52FF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa
Signing time: Wed 15 Jul 2026 12:26:15 +0000
ROA not before: Wed 15 Jul 2026 12:21:15 +0000
ROA not after: Wed 14 Jul 2027 12:26:15 +0000
asID: 399073
IP address blocks: 145.79.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:14:fc:25:25:79:5b:0c:56:cc:76:c0:8d:26:c2:fa:91:ba:52:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 15 12:21:15 2026 GMT
Not After : Jul 14 12:26:15 2027 GMT
Subject: CN=41413455FD8F8CF2AD6371D4F5ED7642930FCFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:fe:13:7d:6f:49:7a:bd:bf:58:59:5a:e7:
33:61:8c:1e:a5:14:41:7b:30:f8:b9:a4:05:e3:0d:
37:e4:bd:a1:ae:0c:f5:7a:b5:65:f2:d7:34:b8:3d:
60:98:43:76:b3:c8:e3:f5:86:d8:34:f1:2a:e8:4f:
ab:fd:1b:12:58:63:a5:92:bc:43:89:4d:56:b7:27:
6e:d1:3f:fd:85:11:71:67:7d:d9:95:00:25:cf:bb:
cf:89:34:f0:ad:e5:12:c8:d2:1e:0d:b1:4f:3a:15:
9f:a5:ab:24:3f:44:c8:c8:4e:b2:a1:bc:53:4a:a7:
a0:79:7f:8c:9f:cf:1b:a4:ee:fb:82:18:5c:0a:a6:
2a:8c:e8:c8:45:11:a6:a7:ca:c5:22:a2:df:63:6d:
4c:f6:e5:1f:82:64:99:c2:33:be:7b:77:46:35:06:
54:54:52:bc:88:fe:84:df:bb:a5:e7:0d:ca:ec:3b:
8d:6e:6b:0c:9f:55:4a:29:ed:16:df:d6:9b:1b:21:
66:5b:d0:66:32:e6:9b:a0:8c:d8:69:57:ff:33:c6:
0b:70:0e:b8:af:4b:93:93:9d:e6:28:10:d7:e2:71:
61:97:34:5a:b9:43:f9:59:f0:5c:50:ac:a4:c3:88:
6a:4f:09:33:77:a7:56:4a:47:23:ed:88:0f:17:bf:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:34:55:FD:8F:8C:F2:AD:63:71:D4:F5:ED:76:42:93:0F:CF:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136352e302f32342d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ab:84:62:ea:5e:1a:06:11:b7:9b:54:bd:dd:33:33:61:37:
dd:81:0f:6f:7a:19:50:9d:cc:40:fd:84:91:04:16:80:7c:56:
61:57:53:cb:e1:cf:1a:6c:80:c1:3b:b0:49:38:ff:06:80:f7:
69:63:8e:cd:ac:78:3c:17:84:c4:eb:7c:6f:50:30:17:94:ba:
e0:30:a8:6d:aa:21:94:23:72:e3:94:9f:1f:c6:15:5a:b7:98:
c4:d6:80:1e:3d:f7:05:a0:de:e0:3f:00:72:22:13:95:7d:53:
39:03:9c:51:86:5e:51:e2:90:3d:c9:26:b5:0d:08:08:06:a8:
43:b5:15:f3:f9:3f:75:5e:06:5d:36:8c:2d:f4:b8:55:d8:d0:
53:d9:30:43:f1:c8:2b:16:ff:62:47:35:39:d3:d9:87:60:3c:
01:f3:c6:ab:75:e0:da:48:4c:f8:17:20:70:ab:b8:6f:bb:57:
f0:4b:bd:f9:81:06:87:32:86:c9:c7:7e:6b:7c:bd:dc:10:54:
29:cf:0b:f0:de:54:bb:af:56:73:54:06:6b:64:76:ac:18:5a:
29:b7:cd:40:a7:f9:ce:d2:3f:cc:30:9a:37:7e:0d:36:d9:f7:
1b:40:2e:08:1f:83:25:a7:70:4d:97:88:79:a1:e0:b9:dc:15:
d2:f8:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:48 2026 by rpki-client