Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138332e302f32342d3234203d3e20323133333233.roa
File: 3134352e37392e3138332e302f32342d3234203d3e20323133333233.roa (raw, json)
Hash identifier: ayExIIcccpIGRWbZThAzabo7Y7wZKNQOPHYZaPCeerY=
Subject key identifier: EB:07:6A:58:23:C3:79:66:E5:4D:41:13:7C:4A:EA:7C:CB:E3:97:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 132E620A374FB873BD4BE8B663BF519037DC55A4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138332e302f32342d3234203d3e20323133333233.roa
Signing time: Fri 28 Aug 2026 11:35:59 +0000
ROA not before: Fri 28 Aug 2026 11:30:59 +0000
ROA not after: Fri 27 Aug 2027 11:35:59 +0000
asID: 213323
IP address blocks: 145.79.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2e:62:0a:37:4f:b8:73:bd:4b:e8:b6:63:bf:51:90:37:dc:55:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 28 11:30:59 2026 GMT
Not After : Aug 27 11:35:59 2027 GMT
Subject: CN=EB076A5823C37966E54D41137C4AEA7CCBE39737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:b3:7b:5f:28:69:a6:7b:f9:9a:a8:c5:ed:
8a:1e:8d:c4:fd:84:38:67:24:53:fc:fa:bf:63:c2:
c4:70:8e:f5:f9:f5:2d:4e:b9:c5:d0:f0:fa:9d:e3:
08:c3:6e:c4:9e:05:e6:3c:e8:87:d4:8e:55:79:6d:
6a:34:1e:f2:fd:67:d0:e5:06:37:ef:1a:7d:bb:d3:
a4:81:7f:ff:03:e0:00:3e:fb:e3:d8:f4:34:1d:cf:
7e:f8:5d:d5:12:e1:c7:13:1d:95:12:ed:a7:35:0d:
28:0b:ec:10:7b:2f:db:79:09:00:84:76:b3:8e:cf:
52:1c:c5:18:3d:82:7c:63:99:10:3c:8e:09:06:94:
05:02:40:c6:14:c5:56:8f:37:28:f8:76:66:5b:37:
08:9a:49:b9:71:dd:5e:b8:db:ca:de:31:db:2c:73:
f8:86:fa:16:b4:a8:ff:4c:25:d0:85:b1:43:eb:ea:
3f:71:d6:54:63:9e:d9:20:b0:e5:8b:dd:89:49:16:
39:32:e2:cc:14:03:b1:e7:6d:b9:7c:87:2e:ba:3a:
8d:ca:51:ff:a4:63:05:91:38:0f:aa:60:1e:63:7c:
90:3d:2b:3c:e5:dd:72:ff:b5:bd:c1:e1:a4:e6:01:
b9:80:db:a6:c9:6b:9c:4d:3d:7a:de:cf:68:62:ca:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:07:6A:58:23:C3:79:66:E5:4D:41:13:7C:4A:EA:7C:CB:E3:97:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138332e302f32342d3234203d3e20323133333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.183.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6a:bd:54:a0:1b:56:4a:f0:6e:30:38:76:bb:d3:09:7d:db:
23:ea:2d:9a:aa:1c:8a:d5:04:61:23:a0:59:38:43:0e:0f:93:
92:01:e4:ec:ee:cb:89:43:c8:b2:c4:88:96:01:de:5a:13:5c:
6b:fc:95:d3:c1:89:09:08:7a:e9:93:3b:cc:22:3f:ab:51:5c:
56:76:52:af:59:2e:3b:0f:5d:9c:79:b6:cc:09:81:47:cb:ae:
9e:92:af:e3:d7:29:36:9a:17:0a:42:90:20:7d:81:bf:f7:28:
85:e5:1b:44:a2:87:8a:b7:eb:a7:d8:7c:81:29:1b:6e:08:2c:
23:fb:8c:71:9d:65:ce:bd:e1:e0:26:22:a0:ed:e3:34:02:05:
40:61:5f:a8:4b:c0:48:14:04:5c:d6:2d:b5:30:10:7e:2f:e7:
bf:58:c2:f4:51:95:89:91:fc:eb:1e:cd:94:ca:2a:cd:53:42:
25:7e:2b:c0:0f:b9:43:73:08:f9:be:b1:64:ed:e3:79:24:08:
d0:46:f5:f2:1c:c2:63:6c:9d:db:50:66:2a:38:4d:9b:ce:83:
7d:07:2e:87:43:a1:e4:c8:ea:71:2b:82:cc:dc:82:64:6d:83:
51:8c:16:0e:39:2f:df:72:e4:8b:89:a7:21:32:2f:8d:1f:86:
1a:35:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:12 2026 by rpki-client