Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138302e302f32342d3234203d3e20313338343536.roa
File: 3134352e37392e3138302e302f32342d3234203d3e20313338343536.roa (raw, json)
Hash identifier: YGfUpxQAsGHkK+HJetqbEKtzmOsVGUZwn2NbTavMX98=
Subject key identifier: D4:34:BE:A9:60:3C:39:F5:0D:46:0D:14:D3:F1:A1:3B:08:13:16:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B060D2B51C0162F70A09EEAFD4DB86C68611779
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138302e302f32342d3234203d3e20313338343536.roa
Signing time: Thu 27 Aug 2026 07:59:56 +0000
ROA not before: Thu 27 Aug 2026 07:54:56 +0000
ROA not after: Thu 26 Aug 2027 07:59:56 +0000
asID: 138456
IP address blocks: 145.79.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:06:0d:2b:51:c0:16:2f:70:a0:9e:ea:fd:4d:b8:6c:68:61:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 07:54:56 2026 GMT
Not After : Aug 26 07:59:56 2027 GMT
Subject: CN=D434BEA9603C39F50D460D14D3F1A13B081316EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:b3:36:e4:64:1b:63:71:61:33:68:02:b7:
4b:18:aa:84:d1:d8:c7:8f:d7:a0:bd:33:19:1c:1e:
49:dd:cd:f1:a4:6c:ce:0d:93:84:82:80:22:e9:d4:
2f:ac:e0:2c:07:33:11:17:b7:f0:f8:d7:be:87:76:
8d:61:7a:89:2d:16:fb:69:e6:08:65:b7:4f:69:ca:
01:21:42:3a:e5:10:12:c3:da:c6:87:09:2d:01:6d:
36:47:0b:f7:23:81:3f:54:4c:ef:6c:44:b9:c1:3a:
68:c9:d4:d6:23:ac:d9:fe:13:97:40:42:25:ee:41:
63:b4:80:e3:d5:ba:bd:e1:41:f1:4e:f7:a5:68:7e:
d3:a8:6b:ea:95:d5:a9:e6:b5:e4:da:74:24:23:6f:
6e:0c:79:10:2b:46:f8:80:67:a1:0c:ab:6a:1a:0b:
f7:bd:35:d3:69:e3:29:76:29:fc:ff:46:1d:9f:0a:
40:a1:4d:a5:3b:bd:6d:bb:03:e6:1f:0e:e1:72:c9:
f9:db:78:6b:01:b9:5b:a7:e7:5c:f1:e7:da:a7:2f:
b3:ba:29:1b:02:52:10:75:8f:da:cd:71:fa:9c:a0:
cd:9d:4b:7a:aa:d2:d9:d9:4d:d6:87:d6:8b:f5:31:
aa:f8:53:c7:d5:ff:0d:0e:ea:0a:b6:ed:de:39:f4:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:BE:A9:60:3C:39:F5:0D:46:0D:14:D3:F1:A1:3B:08:13:16:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138302e302f32342d3234203d3e20313338343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:99:e5:c9:71:d0:9f:21:e0:b8:47:83:4e:a0:fa:7b:e4:86:
6e:1a:e9:41:19:c0:08:6a:1c:b4:ad:aa:69:6a:c6:f0:40:05:
32:e6:42:45:9c:2b:be:60:50:a1:09:9d:36:be:cc:22:c5:0e:
0f:34:c1:6e:48:4f:60:54:95:a8:e8:03:c5:6e:0a:9f:e7:25:
17:09:f4:ce:49:ed:8a:74:0d:df:31:63:36:fc:07:76:3e:ac:
5a:2e:56:d4:ba:f1:48:ce:6f:be:32:85:46:57:73:64:7b:20:
e9:c1:12:32:f0:82:08:a5:7f:ec:f6:f1:71:47:fe:b1:a1:8f:
26:ba:81:94:14:c9:4b:9c:30:b3:11:10:80:d7:ba:0c:78:ba:
56:1c:a2:4f:1f:98:77:e4:c5:92:c2:80:f5:ed:28:36:29:f3:
fd:0d:37:1b:1a:71:a3:a5:56:73:6d:db:0c:ae:a2:26:7e:1f:
fb:ac:77:f5:27:38:fc:15:5e:bc:56:16:12:24:ad:70:cd:af:
9f:43:6f:62:5f:6d:d1:46:37:94:c9:51:37:aa:05:fe:0d:d0:
4a:5a:5d:cd:96:c5:f9:4b:de:0c:ec:9e:d3:30:94:9b:e1:a2:
49:48:58:cd:9f:99:da:35:9b:39:bd:ba:53:a5:c8:87:e7:aa:
2b:01:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:55 2026 by rpki-client