Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e2039303039.roa
File: 3134352e37392e3137302e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: BSTb9EEptbygT73Z1+8iWEqwv8/5PtbxpJ38FH5o3LU=
Subject key identifier: 8B:5B:D9:CA:5F:77:74:F2:6B:16:EB:DE:CB:60:A5:C7:11:7D:38:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0199A56AFCB2AB4C76DF06843B0A2E49B7FB8DB6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e2039303039.roa
Signing time: Thu 27 Aug 2026 17:34:49 +0000
ROA not before: Thu 27 Aug 2026 17:29:49 +0000
ROA not after: Thu 26 Aug 2027 17:34:49 +0000
asID: 9009
IP address blocks: 145.79.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:6a:fc:b2:ab:4c:76:df:06:84:3b:0a:2e:49:b7:fb:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 17:29:49 2026 GMT
Not After : Aug 26 17:34:49 2027 GMT
Subject: CN=8B5BD9CA5F7774F26B16EBDECB60A5C7117D384B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:a7:c9:cd:96:02:d7:31:02:4d:ad:a9:35:
61:2b:71:91:2c:3b:fd:9b:cf:23:4a:fa:28:ff:5b:
f2:c8:d6:71:f7:c3:a2:a7:f2:1e:5e:62:fe:4c:ba:
1a:2b:ba:4e:e5:9b:9b:bc:81:45:96:5c:4a:13:0a:
e7:97:25:2c:c2:fb:c9:5f:d9:e4:7e:23:c3:94:b3:
63:df:3a:3d:b0:03:fb:3d:45:de:8a:c3:a9:4a:6c:
c6:10:38:7b:ac:6c:59:04:ff:80:d0:e3:7d:69:08:
d0:3d:e6:19:ba:df:a6:b3:59:dc:8c:c5:d9:ce:26:
0e:8d:54:71:dd:f1:12:15:0e:df:ad:e0:f2:95:5d:
b5:91:34:99:7c:09:2f:f1:9d:cb:e4:a6:f7:a4:52:
60:40:79:a7:83:5f:30:bd:4a:29:d7:a7:10:63:e4:
8c:83:50:46:2f:d6:32:4b:9c:f0:0b:61:88:fc:f2:
33:6e:2a:16:a2:d2:57:f0:78:26:4d:37:13:a9:5a:
6c:db:13:89:89:21:36:be:a7:cc:c3:d4:53:fe:a3:
f5:52:58:2c:ee:96:b2:0a:56:4c:73:94:af:0c:c3:
b6:37:e3:7a:01:d5:2a:b2:bc:f1:2e:52:f8:e8:0c:
7d:57:88:75:9a:76:fe:ef:59:fd:55:0e:5a:2e:4e:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:D9:CA:5F:77:74:F2:6B:16:EB:DE:CB:60:A5:C7:11:7D:38:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.170.0/24
Signature Algorithm: sha256WithRSAEncryption
68:82:39:1d:07:4b:19:6a:b7:2b:2a:28:07:a6:5c:e9:fd:f8:
49:d9:18:98:47:51:7f:ed:fa:2b:5f:c5:2a:ab:7d:ac:0d:76:
43:af:aa:c7:2c:da:47:86:72:44:41:5d:cc:4f:0f:2c:ec:26:
cd:d1:89:b7:5b:46:9a:3c:0c:6d:19:64:7a:9b:34:91:45:28:
9d:7d:08:88:a4:1e:da:17:ab:c7:48:7b:51:96:3f:7d:fe:51:
6d:2c:7c:ea:26:9d:f9:e8:e1:c7:e0:0a:0e:c9:5d:1f:32:b9:
5c:dd:e7:f3:52:36:15:47:76:d2:8d:9c:de:74:4e:d3:95:ba:
a9:a2:b4:1f:dd:75:5a:bd:b9:e7:f2:66:2d:c2:39:57:b9:94:
f3:61:79:32:9c:f1:b1:f5:8d:ca:58:bc:0b:cd:30:c2:c5:1c:
b9:b5:8e:e4:68:dc:ab:0f:80:57:3e:28:3b:48:b2:30:4c:f4:
44:18:05:66:a4:00:dc:a4:00:58:28:c2:23:b7:c9:34:81:94:
f9:ef:1c:4a:47:29:65:84:a6:01:4b:cc:38:58:72:8b:89:be:
86:7a:76:7b:4d:fe:f7:af:4d:c9:bb:f3:0d:2a:42:73:8e:a4:
81:0d:be:d1:58:b1:de:a5:85:81:e2:c7:52:4e:67:f1:1f:21:
81:b5:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:38 2026 by rpki-client