Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rcx/jLPXDQB2/eiX2jrh4xqqn5B5uxoPLww6vF/b/o4=
Subject key identifier: AD:B4:0F:01:AD:CE:D7:35:7C:59:A4:25:84:10:14:77:B8:A5:B4:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4744A9AD9E51BBFAE2C3881752EFE7E2F8505B37
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e20383334.roa
Signing time: Fri 25 Sep 2026 12:13:27 +0000
ROA not before: Fri 25 Sep 2026 12:08:27 +0000
ROA not after: Fri 24 Sep 2027 12:13:27 +0000
asID: 834
IP address blocks: 145.79.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:44:a9:ad:9e:51:bb:fa:e2:c3:88:17:52:ef:e7:e2:f8:50:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 12:08:27 2026 GMT
Not After : Sep 24 12:13:27 2027 GMT
Subject: CN=ADB40F01ADCED7357C59A42584101477B8A5B463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:b9:98:e2:c2:cc:13:a8:cf:45:d2:21:a2:
21:f6:d2:ff:b8:44:73:82:76:f0:57:65:c3:67:1f:
d7:7a:40:c6:69:a5:0e:cf:92:05:3b:c4:c2:b9:4e:
d9:92:e9:1d:f4:72:17:e2:c3:0a:9f:ea:56:45:46:
78:21:d0:f1:28:8d:f8:76:5b:08:d4:07:f0:a1:c2:
38:47:18:10:a4:53:dd:8c:08:c4:d2:79:8f:fd:8e:
08:d6:03:6f:57:2d:17:6f:11:0f:ed:e9:18:ee:f0:
0d:d7:ff:10:1d:24:0e:94:f1:cd:4f:5a:e7:dc:db:
eb:ac:de:09:30:13:f0:42:10:10:f6:19:74:f3:1c:
73:61:ad:c5:1e:04:d4:2a:79:08:52:b3:98:8e:de:
43:fe:54:4b:89:48:56:f2:fb:c9:15:5e:46:28:eb:
cb:2d:91:e8:6f:23:f5:dd:2a:ae:b9:7b:b5:48:2a:
51:0b:56:7a:d0:d0:30:84:67:74:99:48:b3:5a:85:
ac:fa:d7:ae:3e:c4:56:d8:bf:c2:e9:a4:91:c4:3f:
86:7a:3f:da:66:3f:bb:c8:53:38:6b:0c:a8:06:55:
78:cb:af:91:27:82:38:c9:6a:e0:6c:a2:66:0a:5d:
4a:12:c6:aa:ab:89:e1:81:53:27:77:1e:4c:3a:20:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:0F:01:AD:CE:D7:35:7C:59:A4:25:84:10:14:77:B8:A5:B4:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:af:86:24:47:a3:fb:a5:48:31:ab:b5:d2:00:07:89:09:e4:
c8:62:c4:ea:bc:59:98:f2:f4:67:27:4d:59:1a:58:3d:99:16:
35:2e:fd:7e:32:67:79:46:bf:2f:97:33:19:5b:a7:71:22:6b:
60:10:f5:96:60:10:63:4f:a9:da:b1:5f:da:c8:44:b4:03:7b:
72:0d:ef:e7:6e:10:e0:36:76:70:a3:e0:e6:f0:49:df:a7:5c:
78:19:6c:1b:94:ca:bf:3a:f3:84:fd:f3:6c:c8:4d:62:a1:cb:
25:e3:4a:40:63:2c:4d:38:5e:02:ab:37:ab:e7:c9:dd:82:74:
04:fd:59:30:2c:2a:71:e9:7b:ec:ca:56:4b:a5:d8:92:fc:64:
d6:b4:72:1d:61:f9:69:28:a6:98:b4:77:cb:bf:e1:5e:0f:8a:
e2:20:5a:37:13:11:5e:88:ae:6b:a3:6e:ef:3e:2b:31:a8:9f:
8f:0a:2d:88:ec:1f:06:48:77:d3:8b:05:80:e1:ed:47:98:92:
8c:16:d3:6d:1d:48:e4:ad:5e:5e:75:3c:b8:9e:00:b8:17:e8:
49:84:8c:0d:e6:24:6f:3b:ad:80:db:dc:56:62:1b:83:af:d8:
37:66:b0:43:4d:f6:f1:ea:33:9f:e9:72:65:0a:54:74:f2:e4:
3a:ef:3f:dc
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUR0SprZ5Ru/riw4gXUu/n4vhQWzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjUxMjA4MjdaFw0yNzA5MjQxMjEzMjdaMDMxMTAvBgNV
BAMTKEFEQjQwRjAxQURDRUQ3MzU3QzU5QTQyNTg0MTAxNDc3QjhBNUI0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DLmY4sLME6jPRdIhoiH20v+4
RHOCdvBXZcNnH9d6QMZppQ7PkgU7xMK5TtmS6R30chfiwwqf6lZFRngh0PEojfh2
WwjUB/ChwjhHGBCkU92MCMTSeY/9jgjWA29XLRdvEQ/t6Rju8A3X/xAdJA6U8c1P
Wufc2+us3gkwE/BCEBD2GXTzHHNhrcUeBNQqeQhSs5iO3kP+VEuJSFby+8kVXkYo
68stkehvI/XdKq65e7VIKlELVnrQ0DCEZ3SZSLNahaz6164+xFbYv8LppJHEP4Z6
P9pmP7vIUzhrDKgGVXjLr5EngjjJauBsomYKXUoSxqqrieGBUyd3Hkw6IDbZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUrbQPAa3O1zV8WaQlhBAUd7iltGMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM3
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT7Aw
DQYJKoZIhvcNAQELBQADggEBAD+vhiRHo/ulSDGrtdIAB4kJ5MhixOq8WZjy9Gcn
TVkaWD2ZFjUu/X4yZ3lGvy+XMxlbp3Eia2AQ9ZZgEGNPqdqxX9rIRLQDe3IN7+du
EOA2dnCj4ObwSd+nXHgZbBuUyr8684T982zITWKhyyXjSkBjLE04XgKrN6vnyd2C
dAT9WTAsKnHpe+zKVkul2JL8ZNa0ch1h+Wkoppi0d8u/4V4PiuIgWjcTEV6Irmuj
bu8+KzGon48KLYjsHwZId9OLBYDh7UeYkowW020dSOStXl51PLieALgX6EmEjA3m
JG87rYDb3FZiG4Ov2DdmsENN9vHqM5/pcmUKVHTy5DrvP9w=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:59 2026 by rpki-client