Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035333035.roa
File: 3134352e37392e3137302e302f32342d3234203d3e20323035333035.roa (raw, json)
Hash identifier: Ql3lpN8Q4YxyHeVfJGcQmBClw/jZ2J2x3qIBxhuw4Ps=
Subject key identifier: FD:A5:22:85:F1:5A:6E:06:26:5D:A5:15:D3:AF:34:89:2E:87:81:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B1562B1264876F05859100AD4F12EF74D0ED2FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035333035.roa
Signing time: Sun 27 Sep 2026 20:12:45 +0000
ROA not before: Sun 27 Sep 2026 20:07:45 +0000
ROA not after: Sun 26 Sep 2027 20:12:45 +0000
asID: 205305
IP address blocks: 145.79.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:15:62:b1:26:48:76:f0:58:59:10:0a:d4:f1:2e:f7:4d:0e:d2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 20:07:45 2026 GMT
Not After : Sep 26 20:12:45 2027 GMT
Subject: CN=FDA52285F15A6E06265DA515D3AF34892E87816D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:73:25:1c:cf:f2:5e:9b:09:e0:89:7b:1e:
93:d9:3b:7f:36:f8:d5:11:99:1a:d4:6a:87:32:7f:
17:3e:1c:9c:61:49:7c:94:eb:9e:3e:b9:db:f1:8b:
e1:7c:ef:53:75:56:62:6b:d7:ea:cd:64:ed:77:00:
84:76:27:64:09:b7:0e:07:f7:d8:3e:fc:df:3b:cf:
0d:3d:7e:ce:ff:eb:2a:f0:fb:d2:01:c6:73:6b:92:
5c:a2:27:4c:fb:a3:41:de:f6:cc:b9:3c:35:05:03:
ff:e4:35:67:48:5e:c1:ea:b1:e6:de:01:c5:79:d7:
bc:9f:ee:0b:80:a4:11:fc:9d:6c:66:b2:b1:99:8f:
62:75:37:ca:b5:e6:3d:78:eb:8e:c1:e8:b1:ad:cd:
5f:73:9a:8c:76:d9:26:03:d3:46:44:a1:ae:1d:ab:
31:38:bb:b2:de:0d:83:14:4c:3b:1f:c2:e6:64:09:
82:45:0e:3a:f5:97:42:4b:ab:97:1b:b5:bb:b8:b9:
4e:f2:8d:82:b5:4a:f5:b0:58:6f:1f:d9:9a:03:7b:
3c:4f:ef:99:f2:84:ba:26:de:60:25:f5:aa:a3:a3:
1a:60:46:3e:06:ac:12:ab:ea:da:3b:84:89:a4:c5:
03:05:c7:8c:59:40:c6:df:73:e9:48:d7:b8:b2:c7:
6b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:22:85:F1:5A:6E:06:26:5D:A5:15:D3:AF:34:89:2E:87:81:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.170.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0e:19:89:f1:a0:6e:a0:fa:59:35:25:87:f0:cf:2e:ce:47:
aa:9f:70:2a:85:78:8b:1e:37:89:26:bf:e6:88:79:f5:a8:91:
a8:00:1b:a4:cb:33:6b:d4:77:9a:ed:1f:64:25:21:4e:b7:fc:
e9:50:7a:a7:9f:f4:06:84:d9:7b:c0:6a:76:46:9d:03:4b:83:
10:5e:76:a2:e3:02:56:af:55:6a:34:b1:42:f6:96:bc:98:fb:
6e:f1:26:58:cd:9b:09:38:28:14:fb:bc:dd:0d:1b:dd:37:59:
18:2a:5d:26:d6:8b:15:31:1f:8c:8c:c7:5f:10:1d:2a:3b:af:
6b:23:dc:90:e8:d4:16:ca:1f:0a:3e:77:38:11:56:7f:07:53:
c1:55:7d:00:43:40:d0:bd:25:1d:1d:f7:12:ff:ed:1f:9f:1d:
70:65:4e:65:aa:2b:9e:ae:ab:dc:55:cd:82:10:0c:69:84:4e:
e0:40:91:a9:66:7b:73:33:55:66:48:95:35:25:73:82:84:e9:
c8:3e:49:50:05:49:39:43:b1:5a:5c:2d:d9:3e:fb:7f:39:6b:
58:64:b1:5c:9a:ff:79:87:3e:db:33:d3:c8:ff:ba:1f:98:49:
e0:ce:2a:5e:d5:17:f4:c6:99:7d:ea:ab:40:3c:77:d3:e2:99:
4e:57:b5:7d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUCxVisSZIdvBYWRAK1PEu900O0vowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjcyMDA3NDVaFw0yNzA5MjYyMDEyNDVaMDMxMTAvBgNV
BAMTKEZEQTUyMjg1RjE1QTZFMDYyNjVEQTUxNUQzQUYzNDg5MkU4NzgxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNXMlHM/yXpsJ4Il7HpPZO382
+NURmRrUaocyfxc+HJxhSXyU654+udvxi+F871N1VmJr1+rNZO13AIR2J2QJtw4H
99g+/N87zw09fs7/6yrw+9IBxnNrklyiJ0z7o0He9sy5PDUFA//kNWdIXsHqsebe
AcV517yf7guApBH8nWxmsrGZj2J1N8q15j14647B6LGtzV9zmox22SYD00ZEoa4d
qzE4u7LeDYMUTDsfwuZkCYJFDjr1l0JLq5cbtbu4uU7yjYK1SvWwWG8f2ZoDezxP
75nyhLom3mAl9aqjoxpgRj4GrBKr6to7hImkxQMFx4xZQMbfc+lI17iyx2uzAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU/aUihfFabgYmXaUV0680iS6HgW0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM3
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzMzMwMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT6owDQYJKoZIhvcNAQELBQADggEBAGcOGYnxoG6g+lk1JYfwzy7OR6qfcCqF
eIseN4kmv+aIefWokagAG6TLM2vUd5rtH2QlIU63/OlQeqef9AaE2XvAanZGnQNL
gxBedqLjAlavVWo0sUL2lryY+27xJljNmwk4KBT7vN0NG903WRgqXSbWixUxH4yM
x18QHSo7r2sj3JDo1BbKHwo+dzgRVn8HU8FVfQBDQNC9JR0d9xL/7R+fHXBlTmWq
K56uq9xVzYIQDGmETuBAkalme3MzVWZIlTUlc4KE6cg+SVAFSTlDsVpcLdk++385
a1hksVya/3mHPtsz08j/uh+YSeDOKl7VF/TGmX3qq0A8d9PimU5XtX0=
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:11 2026 by rpki-client