Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e203236353438.roa
File: 3134352e37392e3138372e302f32342d3234203d3e203236353438.roa (raw, json)
Hash identifier: dB6MwpHTAK2Wh1LyMDy8fbM0iT3zNZvOYzzvNlhQaEY=
Subject key identifier: A0:1A:AC:1A:F9:82:59:9B:1F:99:FF:01:FA:BC:80:82:B4:15:22:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39BFB6C85D94A2DC7432A4404DB689980B21EA96
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e203236353438.roa
Signing time: Wed 02 Sep 2026 14:10:27 +0000
ROA not before: Wed 02 Sep 2026 14:05:27 +0000
ROA not after: Wed 01 Sep 2027 14:10:27 +0000
asID: 26548
IP address blocks: 145.79.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bf:b6:c8:5d:94:a2:dc:74:32:a4:40:4d:b6:89:98:0b:21:ea:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 2 14:05:27 2026 GMT
Not After : Sep 1 14:10:27 2027 GMT
Subject: CN=A01AAC1AF982599B1F99FF01FABC8082B41522E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:aa:1f:5a:c1:3a:ce:92:e4:91:fd:b4:a6:
aa:8e:2f:0b:7f:9d:f1:f7:8c:93:73:0b:27:82:f2:
d4:58:5e:bf:bf:fc:18:cb:da:e1:da:10:d6:31:d6:
c7:23:c0:23:c1:46:5a:6d:2c:b2:87:47:3d:cb:f9:
5c:53:e7:8d:50:08:37:f2:dc:50:1d:03:77:ff:b5:
d0:4f:1b:2d:66:ec:c7:70:ff:d1:4f:03:ee:a8:6c:
2c:26:8f:74:f1:cc:16:95:b1:df:76:a6:f5:10:ed:
a8:5f:58:49:5a:78:d8:0e:8b:c5:cc:ee:22:63:9d:
d0:f5:2a:b7:a5:be:74:3b:de:cd:79:88:23:f1:e9:
bc:00:49:63:14:09:63:3f:77:d3:17:9c:0f:e5:76:
97:cf:e7:e7:05:33:3e:f9:e3:59:db:7e:56:5f:c5:
d8:8e:9f:60:48:dd:1b:e7:9b:8c:4b:d0:86:bc:d9:
a4:b2:b4:2f:a3:f1:18:2a:ab:b4:73:f5:4b:72:40:
c9:50:d2:70:46:c3:15:e5:85:44:d1:02:b3:0f:5b:
cd:5b:36:b8:4f:d5:bd:25:b6:af:27:f0:c4:dc:26:
b1:42:29:0e:36:4f:0a:6b:a1:77:5b:cc:f1:0e:a4:
4e:14:02:3a:58:c6:35:e1:3f:1e:49:6b:48:4e:ff:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:AC:1A:F9:82:59:9B:1F:99:FF:01:FA:BC:80:82:B4:15:22:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e203236353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2f:77:9e:13:ff:da:24:35:67:6b:a5:dd:c2:3c:d0:28:6a:
4d:6c:d7:1e:47:4a:a9:3f:49:5c:50:0a:e4:88:9a:3a:45:04:
95:0b:f9:41:78:cf:9d:a3:04:58:9d:b5:9b:a4:5e:5c:65:ba:
2f:c3:ae:db:51:42:24:53:7f:fc:be:62:9a:39:d1:c2:d4:3a:
6f:e7:93:84:3b:86:08:ce:8b:81:ca:a9:64:f0:1a:8d:b4:08:
fd:fa:95:a6:3b:f9:f5:99:d1:03:1d:3b:03:0b:c9:2e:19:ee:
15:0d:f3:84:28:54:06:5d:b8:2e:b9:06:38:cd:3b:c1:58:61:
41:c8:59:db:80:25:af:cb:9b:52:54:19:83:bd:d4:b4:18:91:
f5:dd:a8:4a:0c:ba:c4:f5:62:11:ab:1e:8f:89:e8:3b:73:25:
fc:62:b6:3c:77:03:b4:62:eb:6c:a1:19:5c:ef:4a:5a:53:6b:
07:cc:27:42:b6:05:1d:84:67:09:d3:c9:42:96:e5:14:79:b5:
52:33:5f:28:07:47:ec:71:17:fb:ab:4b:f9:1f:5d:0b:eb:14:
e0:ce:57:b7:da:7a:47:14:5f:96:5d:46:08:28:91:5d:92:58:
5a:64:c7:42:27:6c:93:f4:0b:4a:15:96:37:11:84:26:ac:68:
82:2d:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:32 2026 by rpki-client