Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138362e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3138362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FQefZ/hxhI8gVjlLySo4fiIYcQYACRcDVXgZZOf/Ydw=
Subject key identifier: 34:14:82:D2:9B:BD:2B:39:DE:69:3D:83:4F:A4:D7:1B:79:44:57:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 294CB2257F4BCDC6FCE8E7012C2101B1560ABB7C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138362e302f32342d3234203d3e20383334.roa
Signing time: Mon 01 Jun 2026 12:43:10 +0000
ROA not before: Mon 01 Jun 2026 12:38:10 +0000
ROA not after: Mon 31 May 2027 12:43:10 +0000
asID: 834
IP address blocks: 145.79.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4c:b2:25:7f:4b:cd:c6:fc:e8:e7:01:2c:21:01:b1:56:0a:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 1 12:38:10 2026 GMT
Not After : May 31 12:43:10 2027 GMT
Subject: CN=341482D29BBD2B39DE693D834FA4D71B794457DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:ce:40:21:2e:19:a0:f0:04:01:cc:ef:db:
9c:f2:2f:5e:a7:5b:97:98:db:9e:9e:7f:e0:80:ff:
78:56:71:7a:5c:5b:d4:5a:0b:d4:14:38:11:fe:3b:
17:aa:76:69:df:8d:1c:e8:10:b5:69:aa:a0:4e:26:
5f:83:8d:07:52:02:6e:37:e8:74:2b:22:5c:57:3e:
ec:0a:1a:1a:60:a3:e3:15:18:11:3c:a1:56:b4:4e:
e2:5d:c2:da:39:0e:45:2f:75:32:21:db:92:4e:1b:
cb:c2:97:03:7b:f9:ad:cf:f9:f4:ed:29:a9:19:44:
73:ef:2a:01:24:f9:ab:d7:5f:bf:db:ea:da:b6:fa:
31:9a:09:24:58:74:e0:05:bc:29:57:08:68:b9:c2:
28:8c:82:34:7e:9b:3c:04:9b:7a:ab:a2:f0:5d:c9:
06:8a:46:b0:75:6f:b0:b9:0b:18:51:ff:ba:ad:c1:
69:ca:c0:b9:b5:fa:b2:fd:c4:2a:83:e4:b9:84:a6:
a5:86:f0:e6:2f:83:b1:da:89:03:27:42:91:c0:85:
d0:41:22:88:3b:e4:1c:16:94:24:cb:91:22:5e:22:
89:21:4a:28:95:b2:b2:79:23:7c:d7:c2:ee:7a:d8:
e8:35:0f:d8:1e:e5:41:92:9d:19:b7:48:4d:2d:9c:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:82:D2:9B:BD:2B:39:DE:69:3D:83:4F:A4:D7:1B:79:44:57:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a5:d3:ef:81:3a:77:0d:ee:0f:47:bb:e9:40:9f:aa:91:4d:
42:2a:14:a6:cf:42:6e:75:76:4a:2d:06:1c:c5:e8:ee:d0:e4:
65:09:32:58:45:91:63:4d:de:92:d2:10:fd:ab:11:1d:f1:c9:
29:33:4e:68:a5:ff:95:6c:bc:20:1c:5a:8f:c4:18:0f:55:17:
0a:c9:b8:51:51:67:2e:c1:28:18:11:12:24:fc:17:e9:05:fa:
37:c9:98:b6:9c:40:2b:7f:9b:0c:9f:a7:8d:bd:b8:da:66:30:
d3:92:c7:b1:7d:ee:89:23:42:52:87:ac:3a:5e:b2:67:55:1c:
83:10:a2:3f:57:54:53:7d:5e:58:00:c5:b5:18:0b:26:c2:4d:
b4:cf:19:1f:92:ba:c9:75:46:37:85:00:2a:db:c6:a7:4d:73:
54:60:6d:3c:74:de:ba:dc:a9:59:43:be:bf:4b:7c:0b:33:50:
7c:81:1b:43:7b:76:c1:a3:36:a3:2c:a7:a8:8a:fa:4b:45:44:
a2:55:99:b0:7f:1a:c7:bc:af:56:f1:8d:74:a4:36:af:45:8d:
62:43:45:b8:8d:93:c4:75:7e:b9:ee:db:4e:5a:e8:0b:1f:67:
30:ef:01:26:cc:6a:b9:d1:14:99:99:c8:f2:c2:92:8c:2d:97:
c9:4e:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:03 2026 by rpki-client