Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138352e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FmlvEm+6a007wONIDL1CHBF7q/yIbaQthmJMjsIZtdg=
Subject key identifier: 87:4F:84:97:D8:E0:7B:71:E4:D9:5B:25:AF:E1:07:4D:17:7A:54:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 50970EA16ECE246EFF37BC57FCCE2091BCFBE071
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138352e302f32342d3234203d3e20383334.roa
Signing time: Fri 29 May 2026 04:55:18 +0000
ROA not before: Fri 29 May 2026 04:50:18 +0000
ROA not after: Fri 28 May 2027 04:55:18 +0000
asID: 834
IP address blocks: 145.79.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:97:0e:a1:6e:ce:24:6e:ff:37:bc:57:fc:ce:20:91:bc:fb:e0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 29 04:50:18 2026 GMT
Not After : May 28 04:55:18 2027 GMT
Subject: CN=874F8497D8E07B71E4D95B25AFE1074D177A547A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:92:d5:ea:d8:eb:7b:2d:02:0e:af:92:dd:
14:83:53:de:ef:71:5d:b0:77:a9:2c:89:0f:a0:ab:
6b:c9:3c:42:c3:42:ff:3e:78:46:a4:1f:3b:ef:ce:
63:dc:9f:b4:32:05:37:6c:67:a9:61:a7:03:81:a1:
49:37:2b:11:c0:f1:2b:39:84:61:bf:9b:9a:4f:d5:
e0:05:38:96:be:b2:d1:c0:aa:c1:57:64:50:75:cc:
29:40:88:9c:be:92:3e:e3:e3:e5:8d:eb:3f:60:b4:
1b:9c:d5:ba:70:ee:6c:c4:c4:49:19:85:0b:a3:fc:
a5:9d:b1:2f:25:a7:7a:65:e1:12:c9:35:78:60:d9:
23:98:7e:44:44:46:62:5b:8e:d1:8f:c2:07:80:e0:
1a:db:19:ac:09:2d:ff:15:54:6c:2f:50:d0:31:0e:
c9:78:24:e2:16:be:6a:3a:e4:f2:32:d8:7c:77:87:
e3:ab:14:02:7b:05:25:77:03:82:72:0c:c3:07:5e:
bc:fb:06:b5:d7:1b:56:97:1f:98:3e:18:13:f8:46:
70:ec:66:72:da:f9:af:89:87:a5:e4:27:56:7c:3b:
f1:06:37:90:1e:41:2c:56:08:cd:ab:1c:88:81:7c:
fc:78:1c:12:ce:31:f6:fe:01:87:f0:c4:ee:34:0d:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4F:84:97:D8:E0:7B:71:E4:D9:5B:25:AF:E1:07:4D:17:7A:54:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:99:6a:cf:e8:a7:31:3c:52:0d:dc:be:d9:be:bb:ff:53:82:
20:06:d9:d3:c9:08:14:2b:d9:af:dc:84:91:39:63:b0:8d:c3:
98:00:74:04:75:20:23:62:a6:57:2f:21:93:fc:04:fc:67:f2:
63:db:2d:fe:c5:50:84:3a:3f:12:b1:c4:53:c1:5b:56:da:2e:
e9:6c:59:32:25:e7:44:79:60:2a:e6:6e:8f:87:47:a8:27:ae:
f2:e1:78:00:a5:5b:82:7e:8d:45:c0:d5:68:23:6d:ce:aa:fa:
cf:ce:24:27:e7:24:79:4b:86:3a:7c:ed:46:c4:d1:1f:ee:de:
74:5b:c7:9c:8c:53:85:c4:99:64:7b:3d:df:62:8f:f2:2a:95:
e1:31:03:2c:2c:2a:56:44:00:0d:77:54:94:8b:2c:e1:93:92:
86:30:d5:7a:cf:26:4c:e8:7a:68:1c:77:f0:81:9f:09:7e:c5:
c0:17:30:83:21:4e:b7:f1:0b:0a:65:38:3f:7f:3c:26:a6:a9:
33:a7:d0:7d:76:05:75:6b:ba:2e:6b:f9:90:54:45:46:75:5b:
91:d4:6b:86:be:3b:9b:6c:45:5b:ac:12:4a:aa:7a:e6:63:8a:
c5:64:dc:26:65:7f:18:a6:35:2d:24:34:33:b1:c9:b5:c2:79:
b4:0b:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:03 2026 by rpki-client