Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136372e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3136372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: ih4turEaX+cKP79fhmy/eBXZRdNUyBpVriVbzCDTo8c=
Subject key identifier: 9C:60:39:B8:EB:11:9C:A9:28:96:D9:4E:55:14:27:B8:35:77:0C:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FD45149654D47D3BBFEF42B6790920A13A5B11C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136372e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 21 May 2026 20:24:22 +0000
ROA not before: Thu 21 May 2026 20:19:22 +0000
ROA not after: Thu 20 May 2027 20:24:22 +0000
asID: 214143
IP address blocks: 145.79.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d4:51:49:65:4d:47:d3:bb:fe:f4:2b:67:90:92:0a:13:a5:b1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 21 20:19:22 2026 GMT
Not After : May 20 20:24:22 2027 GMT
Subject: CN=9C6039B8EB119CA92896D94E551427B835770C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:9a:74:28:3c:a3:9a:55:20:3d:e8:66:e7:
63:88:51:d2:d5:1a:f9:17:c4:3b:c6:dc:06:71:e9:
35:8d:ae:ca:e4:5f:3a:0a:57:d5:d0:d7:d8:36:84:
87:a8:6d:dd:b7:04:63:66:d2:c9:ca:2b:0f:d9:53:
87:2d:37:b8:bb:bd:9a:2e:07:15:02:11:bc:f4:34:
4a:c4:6a:55:04:66:f2:84:e3:aa:fc:d0:eb:f5:9c:
1a:73:ba:3a:0c:bf:dc:d4:20:60:6f:dd:cb:20:93:
a7:ae:32:62:89:8b:b3:a8:7b:2e:a8:f2:c3:c0:a2:
c0:f6:a9:16:2c:66:84:de:98:df:b6:a1:fe:fe:09:
df:a7:ba:58:a6:4f:c7:87:95:a9:df:6b:3a:4a:e6:
dc:1b:63:34:fb:1b:e7:cb:ef:7d:b5:94:b3:ae:f4:
97:3c:ff:43:31:3a:de:6c:a0:cd:c4:22:e7:74:33:
c3:ad:de:99:17:19:ef:63:8e:14:62:cc:3e:93:fe:
a3:56:64:5d:72:e6:45:ba:45:48:5f:11:46:71:98:
1b:c4:43:83:a3:28:01:0e:2f:7e:26:ca:ee:15:35:
98:73:71:ea:5d:1e:61:47:2c:63:4f:11:bc:0b:30:
23:3c:c6:e8:d8:d2:b3:bb:10:6a:6c:f7:62:dc:35:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:60:39:B8:EB:11:9C:A9:28:96:D9:4E:55:14:27:B8:35:77:0C:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136372e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.167.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ab:2b:ac:eb:03:51:40:6e:bb:eb:8d:bb:37:2c:39:87:84:
6e:46:e2:d9:30:a8:76:3f:20:c0:73:c4:9a:e9:44:b9:25:27:
8d:08:65:c1:42:00:72:b4:ba:27:b2:45:ff:11:31:b7:c9:67:
03:c0:7e:ec:92:72:07:94:f3:90:fc:56:aa:7e:5a:09:dc:4d:
07:bf:3c:22:27:7c:77:39:50:9a:ed:90:3c:2b:3c:bd:73:df:
e7:1a:ea:3e:de:4d:3c:79:84:0f:f6:da:ea:82:eb:66:28:0f:
3c:b5:47:25:c1:aa:bf:9f:e3:43:e1:86:ac:fe:b1:ea:b8:9d:
56:1b:a6:9b:2e:ee:cc:10:bf:45:8b:7f:c3:e0:44:0e:09:d8:
8a:ae:3b:56:bd:ae:0c:f3:5c:2b:b4:18:fb:5b:6f:3b:d1:83:
bc:ad:43:cd:53:3e:19:a8:f0:8c:12:41:38:39:c2:a6:76:ae:
61:bd:f9:1b:45:de:23:09:2c:52:7d:7b:d3:26:fb:28:f7:73:
8b:18:ec:eb:c9:e8:ef:4f:0a:56:5a:5f:71:3f:6f:5b:08:07:
05:40:46:5a:7f:9f:a1:4e:e5:67:cb:4a:85:ca:0e:5b:c3:77:
3d:79:06:09:00:cf:0a:f1:52:ec:9f:2c:b8:25:ea:ba:cf:d2:
bf:72:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:13:27 2026 by rpki-client