Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e203331393234.roa
File: 3134352e37392e3138372e302f32342d3234203d3e203331393234.roa (raw, json)
Hash identifier: 2cYXPUdpQqevc4qoTuMN7+ZBcLADgfS6P1GDe6iliIs=
Subject key identifier: 38:83:02:26:B5:0D:E1:D7:3A:4C:A9:25:DF:1C:C6:04:CE:91:A7:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 46E0B99D8620787C9A9BDA0B102FC486DAEB118C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e203331393234.roa
Signing time: Mon 29 Jun 2026 06:23:16 +0000
ROA not before: Mon 29 Jun 2026 06:18:16 +0000
ROA not after: Mon 28 Jun 2027 06:23:16 +0000
asID: 31924
IP address blocks: 145.79.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e0:b9:9d:86:20:78:7c:9a:9b:da:0b:10:2f:c4:86:da:eb:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 29 06:18:16 2026 GMT
Not After : Jun 28 06:23:16 2027 GMT
Subject: CN=38830226B50DE1D73A4CA925DF1CC604CE91A77C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:b6:b2:68:c2:d8:1f:49:d2:f4:7a:e8:4d:
37:8e:ad:51:42:59:6f:30:4e:6f:93:67:e0:a7:e3:
f0:90:d4:0c:f4:13:52:ee:72:cd:6b:1b:de:b1:d5:
a7:41:3c:44:c0:25:a0:d5:35:61:df:c6:11:28:09:
49:f4:81:96:bb:86:e3:71:68:1c:4b:a4:9f:39:a6:
2e:8c:a9:4c:93:d0:27:ef:12:ce:c6:cb:f0:d4:13:
04:c9:e6:eb:ce:6e:63:c9:f0:6b:01:13:2a:53:46:
d9:5b:db:08:97:47:f9:45:0d:08:2b:54:6e:25:2e:
42:d3:15:db:1f:c4:43:95:26:1d:bf:38:26:6b:c6:
b0:53:fb:4a:51:4d:a7:5c:14:7d:f6:87:c8:ba:96:
e7:55:ec:ea:d2:e2:80:db:b9:63:d7:6a:54:14:0c:
e3:ef:bb:d6:65:c9:78:de:d2:30:f8:c7:f9:e7:66:
ac:16:07:0f:85:6c:0c:72:02:89:70:23:49:29:f7:
e9:c5:a2:b4:98:77:83:5e:ca:4e:4f:d1:fe:f7:cb:
28:07:3e:d2:bb:05:b4:d1:93:5c:d0:2f:be:b7:d3:
51:96:f5:7f:74:cb:3f:70:05:7c:02:51:81:67:0d:
fb:f2:bc:c9:99:22:08:98:0d:ca:82:72:69:ca:68:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:02:26:B5:0D:E1:D7:3A:4C:A9:25:DF:1C:C6:04:CE:91:A7:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e203331393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.187.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e6:53:61:50:ce:0f:db:e3:54:f4:01:56:75:98:78:ee:ad:
e3:84:46:30:3d:d6:f8:42:cc:73:90:0e:7f:0b:04:dc:38:d7:
a2:39:23:69:35:0d:8f:80:62:fc:2a:47:79:f6:72:ab:83:e2:
db:f6:3a:3f:ae:f5:0f:93:64:17:4b:68:91:aa:fc:40:29:1f:
79:f6:26:39:a1:7d:0d:b0:64:96:86:3e:c5:ce:84:8d:0b:ff:
0e:f8:31:e6:e5:80:ae:0d:86:fa:ef:9f:d7:8c:d8:ec:05:8f:
71:ec:9b:62:71:21:b3:2e:5f:36:43:ac:e2:13:41:27:16:30:
90:8c:0b:6c:cc:51:1d:29:c8:2a:0a:b7:99:0b:52:6e:05:a7:
06:28:9f:4b:58:86:dd:f3:e7:b1:ce:51:a9:76:35:4b:a7:63:
62:84:c1:45:19:07:65:0f:e7:f1:5f:86:be:38:56:d2:c5:a2:
66:02:ba:ba:c3:c2:8b:53:a4:f3:ac:3e:fe:1c:f3:ad:cb:71:
05:7a:5e:86:c5:09:26:fc:18:94:75:ca:a2:3d:e9:38:0a:94:
e8:f5:ca:79:bb:e4:9c:28:c5:a2:e2:9a:64:5b:48:34:2d:f9:
6d:e5:2d:73:24:67:5f:1d:75:6b:4c:f1:69:57:8f:bb:0f:98:
f9:38:de:db
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIURuC5nYYgeHyam9oLEC/EhtrrEYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MjkwNjE4MTZaFw0yNzA2MjgwNjIzMTZaMDMxMTAvBgNV
BAMTKDM4ODMwMjI2QjUwREUxRDczQTRDQTkyNURGMUNDNjA0Q0U5MUE3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdAbayaMLYH0nS9HroTTeOrVFC
WW8wTm+TZ+Cn4/CQ1Az0E1Lucs1rG96x1adBPETAJaDVNWHfxhEoCUn0gZa7huNx
aBxLpJ85pi6MqUyT0CfvEs7Gy/DUEwTJ5uvObmPJ8GsBEypTRtlb2wiXR/lFDQgr
VG4lLkLTFdsfxEOVJh2/OCZrxrBT+0pRTadcFH32h8i6ludV7OrS4oDbuWPXalQU
DOPvu9ZlyXje0jD4x/nnZqwWBw+FbAxyAolwI0kp9+nForSYd4Neyk5P0f73yygH
PtK7BbTRk1zQL76301GW9X90yz9wBXwCUYFnDfvyvMmZIgiYDcqCcmnKaLoVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUOIMCJrUN4dc6TKkl3xzGBM6Rp3wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM4
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMxMzkzMjM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU+7MA0GCSqGSIb3DQEBCwUAA4IBAQAg5lNhUM4P2+NU9AFWdZh47q3jhEYwPdb4
QsxzkA5/CwTcONeiOSNpNQ2PgGL8Kkd59nKrg+Lb9jo/rvUPk2QXS2iRqvxAKR95
9iY5oX0NsGSWhj7FzoSNC/8O+DHm5YCuDYb675/XjNjsBY9x7JticSGzLl82Q6zi
E0EnFjCQjAtszFEdKcgqCreZC1JuBacGKJ9LWIbd8+exzlGpdjVLp2NihMFFGQdl
D+fxX4a+OFbSxaJmArq6w8KLU6TzrD7+HPOty3EFel6GxQkm/BiUdcqiPek4CpTo
9cp5u+ScKMWi4ppkW0g0Lflt5S1zJGdfHXVrTPFpV4+7D5j5ON7b
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:48 2026 by rpki-client