Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203232373733.roa
File: 3134352e37392e3137322e302f32322d3234203d3e203232373733.roa (raw, json)
Hash identifier: 0H9YdHh7S1bE5NJvdU7GjC4kgKdqqY4CbV22TkmU03s=
Subject key identifier: C5:BC:1C:EE:E8:B4:3F:CB:7D:86:BE:D9:5D:30:53:5D:09:50:54:88
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7394B4A99DF2F8ED84B2526EEAC8AD9491079DE1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203232373733.roa
Signing time: Fri 27 Mar 2026 13:50:32 +0000
ROA not before: Fri 27 Mar 2026 13:45:32 +0000
ROA not after: Fri 26 Mar 2027 13:50:32 +0000
asID: 22773
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 02:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:94:b4:a9:9d:f2:f8:ed:84:b2:52:6e:ea:c8:ad:94:91:07:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 27 13:45:32 2026 GMT
Not After : Mar 26 13:50:32 2027 GMT
Subject: CN=C5BC1CEEE8B43FCB7D86BED95D30535D09505488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:82:4a:b3:39:ea:61:2d:a0:17:4e:d3:62:
cf:5f:30:16:d0:6d:1c:c5:d4:2a:90:0b:06:4b:4e:
f4:96:8c:26:21:d0:bf:01:f1:61:d0:88:b2:e5:7c:
89:9f:a0:19:8f:73:d9:5c:09:b3:f2:78:f8:7b:6d:
3d:b7:3e:c4:ca:cd:de:aa:5b:2a:a4:45:0b:f2:92:
43:89:f1:30:9f:2a:c5:19:3c:a5:3a:b4:27:00:d8:
16:b8:73:a9:0f:85:65:d0:6b:c1:48:31:f8:2e:19:
ae:4b:e0:05:5e:a4:32:18:c4:64:a4:9b:56:d6:57:
46:c2:e9:b2:54:fe:10:0b:b3:f2:44:10:43:6f:bc:
3e:54:ee:1a:b1:76:50:52:32:fb:bb:d8:20:e8:28:
e1:4d:b7:79:2c:af:75:2a:eb:cf:c4:61:98:6a:4b:
c5:32:a4:4c:be:2a:13:16:d0:0c:9d:2d:4c:a3:8d:
20:b3:ca:f9:78:b5:3b:5b:db:e0:1e:2a:ce:6c:1f:
1d:2c:e0:67:a4:af:1a:25:41:1e:83:03:f3:05:69:
ef:86:35:1d:94:15:a3:7d:9f:b4:01:ba:d6:3e:42:
0c:82:26:5f:be:17:d9:06:93:76:c1:dc:54:db:5a:
e4:1d:79:fd:e0:42:69:30:be:cc:a7:d6:e3:79:11:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:1C:EE:E8:B4:3F:CB:7D:86:BE:D9:5D:30:53:5D:09:50:54:88
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
32:8e:7a:43:f6:b1:a2:f1:a7:94:cc:1a:0f:c5:98:15:37:47:
63:59:3f:51:fa:8b:28:1e:e3:88:34:d0:57:01:56:93:ba:28:
82:6a:98:8a:f4:7d:6a:44:3c:f2:27:5b:ca:38:55:62:cb:01:
ff:31:bc:12:94:eb:c7:d9:21:a1:a5:f2:b3:2d:f2:31:3f:72:
06:2b:24:f7:99:7e:f8:ee:bf:19:c5:f4:75:60:1f:ee:7f:a7:
80:ea:3e:6f:00:1f:83:87:74:5d:d4:3c:36:92:41:01:02:dc:
9a:61:f5:77:3b:4a:86:0a:d8:bb:b6:58:dc:88:6a:47:60:d2:
fc:87:f2:ef:2f:c9:90:08:d1:d9:d3:9f:3f:52:65:b1:e0:79:
7d:28:ee:7a:21:5d:2c:31:dc:98:72:76:30:59:a2:7c:43:89:
0c:b8:75:b2:06:45:8a:40:54:81:ed:b2:1f:44:9a:92:16:36:
19:5a:7b:33:c2:dc:7b:26:28:dd:d8:33:1e:8c:60:b2:da:81:
b4:69:24:a7:0a:91:33:bd:33:a1:91:df:2d:82:3a:36:4c:af:
ab:df:78:4f:2e:e2:eb:2b:5e:f9:7a:af:59:63:7a:c8:82:6e:
05:7f:b1:43:e7:2e:6e:81:46:e6:c2:58:de:05:04:08:fa:ad:
2c:82:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:21:45 2026 by rpki-client