Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20323139313630.roa
File: 3134352e37392e3136392e302f32342d3234203d3e20323139313630.roa (raw, json)
Hash identifier: qQHuTUqIx1R84hdovkFTfpXZGmUDcqQQMIpCoVPlJqM=
Subject key identifier: 69:D0:EF:72:8D:AA:5F:80:D4:99:40:B8:18:34:69:CF:32:96:DD:CB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 53D37829E42A7BA29B2874F4BD9FBCE436CF438D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20323139313630.roa
Signing time: Sat 15 Aug 2026 15:28:20 +0000
ROA not before: Sat 15 Aug 2026 15:23:20 +0000
ROA not after: Sat 14 Aug 2027 15:28:20 +0000
asID: 219160
IP address blocks: 145.79.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d3:78:29:e4:2a:7b:a2:9b:28:74:f4:bd:9f:bc:e4:36:cf:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 15 15:23:20 2026 GMT
Not After : Aug 14 15:28:20 2027 GMT
Subject: CN=69D0EF728DAA5F80D49940B8183469CF3296DDCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:de:cf:5e:66:79:32:b3:c5:95:94:c3:bd:
f1:33:75:fa:89:10:96:ec:f7:14:97:49:62:9c:e1:
6c:49:9d:61:bb:4c:65:df:fd:2b:4b:3f:d1:84:7b:
73:6c:17:36:77:1c:97:19:5a:96:f6:23:91:86:2c:
d4:f8:5c:5b:20:22:5f:51:6a:f4:8d:1b:08:49:a8:
f6:a3:d6:5b:70:db:a2:c0:a1:5d:c0:80:c9:ec:4f:
c9:d9:20:04:c3:f1:4d:02:6d:b1:98:48:d6:44:12:
cc:08:c3:cc:1e:88:9b:43:2f:df:19:65:9e:c2:7e:
ac:f6:fb:be:b4:ce:b8:8b:da:85:82:91:0c:22:55:
ad:ee:6d:f8:0e:90:91:ad:a6:e7:11:21:32:ca:8a:
78:a3:f0:e6:b0:ca:ae:60:8b:56:25:ab:ad:92:3b:
30:b9:bb:9e:e7:ef:e7:a4:97:2d:63:54:c4:32:a7:
0b:aa:84:09:b2:0b:89:2a:6c:69:92:27:37:56:89:
d2:20:ef:d2:b1:f6:76:cb:c3:51:3f:20:29:df:75:
f9:d3:af:50:68:0c:4e:b8:7d:18:3c:ea:03:30:50:
da:83:f3:f0:1a:75:52:9b:fb:04:b8:0e:f7:59:b7:
18:50:3b:7d:5f:1f:8a:d2:ff:ac:2e:6b:60:45:e6:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:EF:72:8D:AA:5F:80:D4:99:40:B8:18:34:69:CF:32:96:DD:CB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20323139313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c2:5c:cd:b9:08:67:93:ff:e5:04:60:0f:a4:e4:6f:b7:f2:
11:97:23:73:4a:d5:a9:d1:17:b8:71:75:6b:99:fa:08:0b:61:
40:cb:5f:9c:45:dd:de:d9:56:af:6e:85:ff:c5:8c:c9:e8:45:
95:5d:b7:cf:38:8e:48:ca:75:35:7c:46:78:98:05:df:0c:56:
4c:ee:dc:f8:49:d2:82:cd:29:3f:6a:5d:f5:b8:cd:6d:91:10:
d0:8a:17:e6:8f:3a:96:e3:9d:9c:ac:6f:8a:e3:81:c1:2b:6a:
6e:44:bb:b3:87:93:71:82:03:d1:d6:46:4e:0e:03:d8:d5:39:
28:7f:7b:19:9e:f7:8b:cb:a9:4a:59:22:b3:13:86:82:fe:23:
23:fb:55:0b:cf:18:21:2f:8a:43:aa:fa:99:6e:a9:54:bb:77:
c2:75:c3:9c:36:e9:77:b5:59:e5:4a:97:2a:94:c0:bd:bd:bc:
6d:c0:58:d1:f0:24:a8:03:a8:b9:59:ca:dc:c7:68:72:72:70:
57:91:f2:6b:fb:02:a7:2c:f2:fe:69:a9:ee:85:73:f7:48:fc:
13:47:76:58:f1:be:8b:8c:b0:4f:80:a4:ad:1e:f7:4a:43:92:
60:32:d3:9f:7f:2f:9a:25:5e:e1:f6:d9:ef:6c:e6:65:a8:d6:
51:69:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:58 2026 by rpki-client