Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e20313938303737.roa
File: 3134352e37392e3137362e302f32342d3234203d3e20313938303737.roa (raw, json)
Hash identifier: o0QJM7cGQVnedU07+p9COxAU2o2y3LGt44eA210r6e0=
Subject key identifier: 13:19:AA:BF:5F:92:F4:B4:D5:5A:79:02:B6:6E:40:EE:E3:83:78:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63E68240BE9914679DDCCFC388F56DBD8FB4B896
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e20313938303737.roa
Signing time: Sun 27 Sep 2026 18:02:39 +0000
ROA not before: Sun 27 Sep 2026 17:57:39 +0000
ROA not after: Sun 26 Sep 2027 18:02:39 +0000
asID: 198077
IP address blocks: 145.79.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e6:82:40:be:99:14:67:9d:dc:cf:c3:88:f5:6d:bd:8f:b4:b8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 17:57:39 2026 GMT
Not After : Sep 26 18:02:39 2027 GMT
Subject: CN=1319AABF5F92F4B4D55A7902B66E40EEE38378B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:c9:d3:3c:c2:c9:4d:c4:b3:c0:d6:cd:c4:
00:e8:df:6c:a5:25:8e:ee:5b:16:9e:73:2e:17:b1:
df:76:9d:08:41:ce:7e:c8:01:55:17:83:12:3b:02:
d9:2b:70:17:f4:14:a8:bc:99:5e:37:8b:b4:03:dc:
23:e6:67:77:b6:e1:74:90:ca:dd:4d:95:27:52:7a:
18:5d:d8:16:ce:90:6d:8d:d3:ad:27:16:92:e5:cb:
88:65:6d:54:c0:cc:45:77:57:32:87:1d:29:b4:34:
b7:c4:de:15:e1:cc:22:9b:72:41:2a:e6:fc:51:09:
f7:21:d4:9a:e1:fc:7e:80:e6:92:fa:37:74:a0:b7:
81:39:71:b1:87:fc:53:84:3a:96:5a:55:77:58:ed:
cd:2a:4a:b7:3b:4a:d2:60:6d:2b:67:f7:f4:44:92:
5e:07:8d:bc:da:78:fb:ae:20:54:98:74:4e:d1:54:
b2:23:c7:39:d3:cc:a8:be:fb:e6:72:b2:99:31:4a:
ae:95:80:0e:92:b4:0f:7c:95:6a:63:91:0a:78:a0:
17:6b:7c:8d:0d:ad:d1:52:af:ed:bb:cc:6d:96:88:
6b:de:09:0e:23:0a:07:99:1f:f5:d3:69:24:52:42:
07:0c:26:6d:b5:f9:50:76:49:1e:8d:91:2b:b1:12:
1b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:19:AA:BF:5F:92:F4:B4:D5:5A:79:02:B6:6E:40:EE:E3:83:78:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e20313938303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ef:6c:e8:07:f8:9d:59:e4:a1:57:f7:14:38:d6:53:c2:ef:
a1:c9:8b:0e:b6:6b:74:13:d6:bd:80:38:11:2f:88:d5:ba:ca:
8a:e9:96:4d:40:ae:a5:9c:e7:dc:7f:60:ea:94:38:04:37:4d:
85:64:a5:11:6a:25:09:f1:d4:a8:28:05:dd:2c:5d:d7:25:75:
25:e0:3f:d2:b3:d9:fb:4c:1d:f8:60:4b:56:01:04:a1:c8:b4:
9d:ae:9e:87:df:1e:21:b4:e3:23:a1:a8:d6:57:ac:92:12:10:
36:b0:d9:c1:7a:8c:98:f6:ac:38:6a:8b:97:42:e2:83:30:e0:
3e:bd:c5:f1:34:7b:1a:32:1e:d7:ad:5e:e2:3d:f3:6e:e5:c0:
27:da:53:25:32:8a:c5:8e:e4:37:fb:c9:86:5b:86:8f:13:1d:
42:ff:6e:01:35:26:d0:56:42:0d:fb:b4:2b:88:57:18:a1:2c:
02:09:c7:18:31:e6:0d:c9:fa:34:1b:a2:df:1d:e7:14:5e:ca:
5e:95:a3:a1:8e:a5:42:61:03:3e:16:b5:44:91:82:70:09:8f:
12:91:cd:94:60:f8:ee:ac:a6:d1:90:c6:70:e5:63:49:f8:a0:
16:f9:08:58:14:85:38:0d:c9:36:d8:0d:a1:2b:ce:30:d4:2f:
39:1a:23:17
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUY+aCQL6ZFGed3M/DiPVtvY+0uJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjcxNzU3MzlaFw0yNzA5MjYxODAyMzlaMDMxMTAvBgNV
BAMTKDEzMTlBQUJGNUY5MkY0QjRENTVBNzkwMkI2NkU0MEVFRTM4Mzc4QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZu8nTPMLJTcSzwNbNxADo32yl
JY7uWxaecy4Xsd92nQhBzn7IAVUXgxI7AtkrcBf0FKi8mV43i7QD3CPmZ3e24XSQ
yt1NlSdSehhd2BbOkG2N060nFpLly4hlbVTAzEV3VzKHHSm0NLfE3hXhzCKbckEq
5vxRCfch1Jrh/H6A5pL6N3Sgt4E5cbGH/FOEOpZaVXdY7c0qSrc7StJgbStn9/RE
kl4HjbzaePuuIFSYdE7RVLIjxznTzKi+++ZyspkxSq6VgA6StA98lWpjkQp4oBdr
fI0NrdFSr+27zG2WiGveCQ4jCgeZH/XTaSRSQgcMJm21+VB2SR6NkSuxEhv5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUExmqv1+S9LTVWnkCtm5A7uODeLMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzMDM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT7AwDQYJKoZIhvcNAQELBQADggEBACrvbOgH+J1Z5KFX9xQ41lPC76HJiw62
a3QT1r2AOBEviNW6yorplk1ArqWc59x/YOqUOAQ3TYVkpRFqJQnx1KgoBd0sXdcl
dSXgP9Kz2ftMHfhgS1YBBKHItJ2unoffHiG04yOhqNZXrJISEDaw2cF6jJj2rDhq
i5dC4oMw4D69xfE0exoyHtetXuI9827lwCfaUyUyisWO5Df7yYZbho8THUL/bgE1
JtBWQg37tCuIVxihLAIJxxgx5g3J+jQbot8d5xReyl6Vo6GOpUJhAz4WtUSRgnAJ
jxKRzZRg+O6sptGQxnDlY0n4oBb5CFgUhTgNyTbYDaErzjDULzkaIxc=
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:04 2026 by rpki-client