Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e2032383536.roa
File: 3134352e37392e3137322e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: mEGRfzOtE3bRdddeAjb97Jnfv58YBSbIsBUUgwg5dNQ=
Subject key identifier: F3:EE:2C:28:5E:77:2C:7B:76:DD:51:64:35:57:3C:74:88:AF:A3:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DE7480E5A5B7C9DD5015EAEADE9BAD5503F7F7B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e2032383536.roa
Signing time: Wed 17 Jun 2026 10:25:21 +0000
ROA not before: Wed 17 Jun 2026 10:20:21 +0000
ROA not after: Wed 16 Jun 2027 10:25:21 +0000
asID: 2856
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e7:48:0e:5a:5b:7c:9d:d5:01:5e:ae:ad:e9:ba:d5:50:3f:7f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 17 10:20:21 2026 GMT
Not After : Jun 16 10:25:21 2027 GMT
Subject: CN=F3EE2C285E772C7B76DD516435573C7488AFA350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:4f:8c:4c:9a:da:e1:ea:d7:9e:c3:91:fa:
78:92:fa:6c:f8:ee:a0:79:d3:37:7d:ed:ba:f4:23:
9b:3f:8a:4f:a0:90:fd:4a:b5:b6:1a:b1:2f:b8:3b:
28:bf:5f:25:9d:29:36:56:08:08:6b:ef:14:e9:aa:
2a:33:8b:2e:a1:92:dc:0e:7b:69:fd:d3:03:87:9a:
f3:ea:4e:45:7a:f3:11:07:78:d8:19:01:e0:ab:f5:
f0:2d:9f:72:12:7a:fd:a3:a3:72:ac:84:e2:dd:a8:
ae:85:cd:03:6d:31:49:7d:53:aa:e8:8b:f1:89:63:
a1:0a:a3:88:e2:33:42:b8:a4:c1:93:0f:4d:26:8f:
f2:3e:53:31:9a:9a:63:7d:f9:b6:fb:db:67:7f:de:
5b:8a:d0:3d:a6:e1:c9:cf:6b:1c:fc:bc:87:38:61:
f1:4d:b4:4d:b0:7a:f1:5b:f3:9b:80:f7:fa:4a:90:
22:72:10:e9:c0:d4:62:6c:07:a4:68:5a:4d:38:a7:
e6:fd:ee:11:c2:df:98:ab:7c:a6:83:7a:13:ca:78:
ec:c8:c9:8c:37:18:93:1f:5d:12:5f:03:a7:d2:f4:
00:a8:b8:9d:f3:09:eb:59:bc:7c:7d:58:07:1e:01:
26:3d:1b:1e:ad:6c:02:09:54:1b:b6:45:96:14:c3:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EE:2C:28:5E:77:2C:7B:76:DD:51:64:35:57:3C:74:88:AF:A3:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
93:bb:2d:f6:bc:de:70:b0:ff:c2:a9:38:48:47:ce:5d:55:c6:
be:bc:32:d8:e3:43:58:81:11:73:f1:f5:ae:6b:41:2a:9b:83:
25:27:dc:82:ab:85:5b:5d:93:48:5b:62:35:41:f6:7a:09:e1:
af:c9:6d:cd:5a:5c:c4:65:4e:ea:d4:52:d0:ca:b2:26:d2:01:
24:c6:a8:93:0c:a5:1f:d0:dd:27:d1:13:62:98:94:f6:f9:dc:
90:c2:79:b4:d3:a2:29:57:e1:56:bc:f6:3d:bc:a8:4c:51:2f:
12:56:c3:95:11:17:df:fa:46:8f:96:b7:47:66:9a:56:ee:5a:
05:34:89:d4:42:e8:2d:bf:8e:65:7a:f1:4e:85:65:ca:12:05:
c0:55:bf:62:f3:fe:4c:bf:f0:02:2d:97:1c:f1:8e:6e:27:9e:
40:f5:ec:5e:ba:14:0b:75:79:5f:75:2d:04:d9:64:1c:5b:55:
b7:94:62:cf:ca:be:67:5b:fb:2a:b7:fa:a7:8a:d7:8e:43:37:
21:45:7e:05:f7:c3:e9:30:a3:d1:8d:28:ad:24:4d:68:9d:54:
b1:3c:5d:9a:05:01:ec:2a:76:7e:b8:c5:ce:1d:64:87:65:74:
09:44:02:ce:4f:c6:24:ad:1b:a5:91:1d:85:2b:1a:f8:9a:4b:
8b:9d:d8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:58 2026 by rpki-client