Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138312e302f32342d3234203d3e20323134373136.roa
File: 3134352e37392e3138312e302f32342d3234203d3e20323134373136.roa (raw, json)
Hash identifier: KImnIF41+C0WcnCPtj2D8f6gEDtEqlHp8NMRFIogBNs=
Subject key identifier: 64:4F:20:9C:45:F9:12:50:0B:BE:8D:C3:25:20:0A:0C:3A:1A:F4:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34593F805F7C5DD3D2D123FDD3B4450900BBCA79
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138312e302f32342d3234203d3e20323134373136.roa
Signing time: Thu 27 Aug 2026 07:59:57 +0000
ROA not before: Thu 27 Aug 2026 07:54:57 +0000
ROA not after: Thu 26 Aug 2027 07:59:57 +0000
asID: 214716
IP address blocks: 145.79.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:59:3f:80:5f:7c:5d:d3:d2:d1:23:fd:d3:b4:45:09:00:bb:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 27 07:54:57 2026 GMT
Not After : Aug 26 07:59:57 2027 GMT
Subject: CN=644F209C45F912500BBE8DC325200A0C3A1AF4DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:a4:44:77:22:5b:13:01:70:de:23:d2:2d:
37:75:30:76:78:e8:54:38:25:1e:e1:ce:10:ad:58:
96:df:0f:9e:c3:06:18:d6:8d:11:66:11:4a:d4:83:
1e:3e:1d:23:ea:d4:fc:69:dc:4a:a6:1f:ae:ea:45:
7e:c8:81:88:98:aa:36:3f:59:1e:ed:8e:04:0b:be:
77:e0:8a:4e:22:a9:33:a9:8c:57:ae:11:55:7a:44:
3a:fe:96:79:e5:90:6d:87:c0:b6:8e:3f:dd:4d:99:
c1:bf:71:5d:ba:7f:61:e5:35:cb:96:64:3f:0a:5e:
a3:7c:72:34:86:d2:12:4d:7a:54:ab:90:18:0b:07:
6b:8e:4a:59:32:17:5c:74:1b:63:09:8d:3d:b9:1a:
58:b9:29:50:02:ac:38:cc:21:08:69:76:32:a7:e2:
8a:de:18:cf:27:0c:db:f2:e3:57:83:c4:11:25:88:
b3:ae:5b:9f:6c:02:f0:cf:84:54:8f:08:f8:50:54:
90:d7:56:55:4f:da:7a:54:fe:e1:8e:a6:67:b4:c6:
aa:89:36:4e:99:3e:f7:a6:f8:5b:76:84:39:59:17:
22:c1:a5:72:e6:89:a2:a6:6d:31:47:b5:4c:a8:c7:
ea:25:11:c9:71:97:58:4b:e6:0a:97:25:d6:ec:51:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:20:9C:45:F9:12:50:0B:BE:8D:C3:25:20:0A:0C:3A:1A:F4:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138312e302f32342d3234203d3e20323134373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f7:70:dc:fc:23:43:79:a6:91:f0:25:fa:3c:58:3b:22:2d:
fd:1b:f3:ae:e6:7e:ae:54:fd:b9:f0:34:4e:05:2c:bc:bd:5f:
07:d5:c0:f9:ce:70:95:13:f1:07:e2:20:97:f3:e3:4a:b7:9c:
bb:dc:1b:f8:fd:ad:82:8b:6b:19:8f:f1:bf:af:74:f4:16:91:
f9:8b:64:2a:1f:52:b4:8c:d0:f7:eb:88:d7:37:c3:da:21:2b:
88:e1:95:27:bb:5f:9c:dc:77:8c:fb:3f:13:73:93:89:80:49:
74:27:cf:28:f9:8d:8c:73:2e:43:e8:a5:73:f4:0b:8b:8c:c4:
09:45:4a:8d:f7:76:e3:a1:2a:29:45:65:0e:fd:55:8a:e9:07:
d1:14:c6:1f:cd:a5:46:05:aa:d9:a6:38:67:6f:e0:67:51:51:
c0:3a:c5:af:45:89:be:cb:4e:d3:65:59:f5:df:6c:56:5b:df:
e0:11:9b:6f:d4:42:c5:f8:00:f2:1c:d3:53:97:9e:8e:91:d9:
51:22:d1:93:7e:52:ab:4c:79:16:2c:63:61:ab:95:bf:5f:00:
04:55:4d:14:32:9f:b2:3a:22:89:1f:65:e6:32:27:90:33:c4:
2e:05:f4:81:7d:f7:87:c7:2c:fd:78:fe:96:7e:36:dd:0f:f0:
0e:10:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:36 2026 by rpki-client