Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3136362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Q7FrK8W3lksko8h5e8r6qrLO12y2ZlH0vqA74eJE1JA=
Subject key identifier: E1:D6:8E:21:2F:94:70:2D:F0:C9:1F:9A:8D:2B:22:F4:C9:10:8E:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 387986F8D6B7FE31B5058C57A13E597AAFDB018B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136362e302f32342d3234203d3e2032393134.roa
Signing time: Tue 14 Jul 2026 11:39:40 +0000
ROA not before: Tue 14 Jul 2026 11:34:40 +0000
ROA not after: Tue 13 Jul 2027 11:39:40 +0000
asID: 2914
IP address blocks: 145.79.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:79:86:f8:d6:b7:fe:31:b5:05:8c:57:a1:3e:59:7a:af:db:01:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 14 11:34:40 2026 GMT
Not After : Jul 13 11:39:40 2027 GMT
Subject: CN=E1D68E212F94702DF0C91F9A8D2B22F4C9108EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:db:b9:55:cf:26:bb:6e:a6:f9:db:a5:7d:
cc:4f:85:2f:7c:34:5e:7d:00:77:6c:35:a7:df:f6:
9e:f8:33:f6:5d:d4:3d:30:fd:5b:2f:10:b7:81:69:
cf:5d:f7:0c:17:e4:63:b9:f6:00:67:6c:8f:7c:af:
6a:73:c4:bb:cc:09:5c:62:c9:8d:95:e2:8d:fe:dd:
85:1f:42:d5:72:e4:67:30:05:f1:fa:4c:29:05:a5:
01:38:99:30:63:12:c0:16:02:e4:c2:92:11:45:e8:
c7:e2:92:35:d1:e0:71:9d:17:01:7c:c5:a1:89:d0:
f2:d4:a2:48:a4:40:07:4b:a5:26:d0:17:b5:e6:5a:
0a:96:81:d1:44:83:4f:45:b4:68:75:09:bc:74:6a:
91:45:e4:6e:56:8f:83:58:35:04:81:eb:d5:bb:58:
41:77:85:b1:a5:de:7d:aa:78:27:a2:9e:e2:b2:60:
3f:99:e0:b8:3d:eb:2a:3b:e0:47:1c:a9:67:eb:62:
13:ef:94:8e:6a:1e:1b:a8:31:d1:bd:1b:48:f6:08:
e6:5b:62:7d:3e:2d:2f:be:69:55:0d:8d:72:fb:90:
65:51:80:2a:08:ba:d9:c5:8c:97:ac:8c:ba:5e:52:
a0:a9:1e:b0:51:e2:1b:0f:51:1e:28:91:5b:7a:a8:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:8E:21:2F:94:70:2D:F0:C9:1F:9A:8D:2B:22:F4:C9:10:8E:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:93:d0:77:97:9c:aa:cd:8f:34:48:97:19:0a:4a:d2:ee:b3:
a2:85:73:c3:5e:d8:84:43:9b:03:f2:77:b4:e2:b5:dc:3c:8b:
40:47:1d:7e:87:c3:18:6c:39:01:a7:82:ec:9f:08:08:76:21:
68:92:7c:27:ea:ab:5d:a5:ff:bd:08:e1:13:f7:5b:8e:55:54:
86:6e:e7:17:c8:30:d9:de:10:d2:55:fd:08:b0:9f:89:ee:70:
f4:33:80:62:9c:da:ab:0a:0f:27:27:23:64:05:33:90:df:c1:
cd:36:b3:2e:9d:f7:99:26:02:23:76:91:e6:20:a9:b3:71:2a:
d5:a1:c2:fd:fa:b8:72:71:e2:59:d5:51:96:b3:07:6e:fd:43:
c5:4c:75:9c:ee:7e:26:e9:d1:f5:2d:35:0b:57:e8:fd:06:08:
04:8d:b3:fb:e8:7f:b0:16:13:50:f0:7f:26:74:03:41:18:94:
f1:29:eb:d5:e9:bf:a4:c7:49:e5:1b:53:ff:e8:57:46:bf:77:
05:0f:7d:7a:01:41:23:87:f8:80:4f:12:53:ae:44:f0:b6:34:
46:20:b2:de:f5:ba:48:d1:60:03:cb:ab:fc:17:30:ec:22:0a:
16:61:fa:ff:e3:98:20:c5:fa:af:b7:02:20:bb:61:6e:92:ce:
65:84:96:af
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUOHmG+Na3/jG1BYxXoT5Zeq/bAYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MTQxMTM0NDBaFw0yNzA3MTMxMTM5NDBaMDMxMTAvBgNV
BAMTKEUxRDY4RTIxMkY5NDcwMkRGMEM5MUY5QThEMkIyMkY0QzkxMDhFREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVa9u5Vc8mu26m+dulfcxPhS98
NF59AHdsNaff9p74M/Zd1D0w/VsvELeBac9d9wwX5GO59gBnbI98r2pzxLvMCVxi
yY2V4o3+3YUfQtVy5GcwBfH6TCkFpQE4mTBjEsAWAuTCkhFF6MfikjXR4HGdFwF8
xaGJ0PLUokikQAdLpSbQF7XmWgqWgdFEg09FtGh1Cbx0apFF5G5Wj4NYNQSB69W7
WEF3hbGl3n2qeCeinuKyYD+Z4Lg96yo74EccqWfrYhPvlI5qHhuoMdG9G0j2COZb
Yn0+LS++aVUNjXL7kGVRgCoIutnFjJesjLpeUqCpHrBR4hsPUR4okVt6qJW5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU4daOIS+UcC3wyR+ajSsi9MkQjtowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM2
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
pjANBgkqhkiG9w0BAQsFAAOCAQEAP5PQd5ecqs2PNEiXGQpK0u6zooVzw17YhEOb
A/J3tOK13DyLQEcdfofDGGw5AaeC7J8ICHYhaJJ8J+qrXaX/vQjhE/dbjlVUhm7n
F8gw2d4Q0lX9CLCfie5w9DOAYpzaqwoPJycjZAUzkN/BzTazLp33mSYCI3aR5iCp
s3Eq1aHC/fq4cnHiWdVRlrMHbv1DxUx1nO5+JunR9S01C1fo/QYIBI2z++h/sBYT
UPB/JnQDQRiU8Snr1em/pMdJ5RtT/+hXRr93BQ99egFBI4f4gE8SU65E8LY0RiCy
3vW6SNFgA8ur/Bcw7CIKFmH6/+OYIMX6r7cCILthbpLOZYSWrw==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client