Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3136392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: s440BmLaG44HaFSpLc+ZjDiRdSwgkjsgtdsLQPHIB8c=
Subject key identifier: DC:98:C3:28:13:D8:2B:4F:9A:D7:EE:0D:B4:34:66:B9:CA:AC:A8:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77F606DAC2A7B0ECD45854B21E72AFFFC3359024
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20383334.roa
Signing time: Mon 15 Jun 2026 06:59:56 +0000
ROA not before: Mon 15 Jun 2026 06:54:56 +0000
ROA not after: Mon 14 Jun 2027 06:59:56 +0000
asID: 834
IP address blocks: 145.79.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f6:06:da:c2:a7:b0:ec:d4:58:54:b2:1e:72:af:ff:c3:35:90:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 15 06:54:56 2026 GMT
Not After : Jun 14 06:59:56 2027 GMT
Subject: CN=DC98C32813D82B4F9AD7EE0DB43466B9CAACA8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:53:e4:8e:a5:63:37:6d:74:3f:8d:9f:c6:
36:8a:bc:f5:29:f2:09:65:a0:ea:a1:e9:91:cc:f8:
99:a9:7d:31:70:46:4b:dc:86:f9:39:0f:e6:8f:0b:
76:db:2e:7f:44:87:ea:07:b7:f3:a6:ca:f0:cd:18:
4f:66:62:39:d1:58:9a:7d:0f:8d:50:24:a0:9e:c7:
fe:07:b2:07:8f:e9:59:c9:8c:e4:33:60:1a:7d:a8:
8c:df:b2:d4:90:19:d8:19:34:34:20:99:3c:dc:0a:
5a:cf:85:88:16:65:41:df:b2:a4:90:aa:d5:be:ea:
d8:27:69:23:59:d3:7b:6f:6c:db:e4:1d:c4:f8:03:
bf:75:e5:7d:7e:58:3c:74:18:62:12:64:f7:04:3e:
7d:46:6f:7c:c4:e7:2d:af:65:42:b1:02:f7:83:b3:
8c:8a:8e:f4:ef:ea:22:2a:c6:7d:10:e2:40:d2:ea:
f8:98:4d:10:9b:58:3a:31:da:26:8e:e6:7f:14:b6:
0b:b4:aa:22:aa:93:4f:9e:b0:4e:38:a1:b4:5d:15:
d3:9c:06:b0:15:84:b4:3b:5a:51:79:c3:d4:55:86:
d5:81:a9:81:1c:5a:55:7c:2e:1d:81:43:c0:38:17:
8e:6f:1a:43:4c:03:11:2a:84:f9:73:b0:4a:6e:1e:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:C3:28:13:D8:2B:4F:9A:D7:EE:0D:B4:34:66:B9:CA:AC:A8:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:77:5f:6a:a4:6d:63:5e:2e:c3:a2:6f:99:03:cc:71:c6:11:
25:2d:61:55:e7:35:f3:bd:e0:72:f7:42:3f:7c:d8:37:09:a9:
c2:44:28:92:a2:df:38:cb:b7:35:8c:77:28:28:c7:c6:d8:70:
4f:76:47:40:71:4f:f3:a2:25:ba:c9:bf:0d:98:71:20:86:ad:
8b:c7:54:42:2d:bb:93:67:30:46:0f:c4:fe:11:b1:da:86:9e:
ba:63:45:c9:5f:37:f9:12:83:9b:75:ad:e4:ee:0e:ef:48:9b:
04:ed:84:e7:e9:a3:e7:f2:a8:c4:47:dd:42:29:46:aa:5a:6e:
77:39:8f:10:d4:21:39:47:ce:62:2f:32:56:d9:2c:3d:1b:19:
fe:aa:4b:86:f5:e7:4d:f3:f2:4f:48:5f:1c:4e:22:1c:68:f9:
95:62:1d:0b:5b:ad:8e:4d:fc:c4:11:02:bf:d8:cb:08:4e:4f:
cf:23:8d:5c:45:79:fd:c6:84:a6:6f:bc:7e:04:35:66:71:33:
f2:69:5c:e7:d5:1d:2a:e3:54:52:54:2a:42:f6:8c:13:41:de:
74:13:9b:72:6a:c1:ae:1a:6b:43:32:0a:03:5f:a3:22:a0:34:
cf:30:14:bc:3e:6d:96:7a:96:cd:a9:07:da:a6:e5:5e:b1:d5:
8d:e4:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:59 2026 by rpki-client