Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nSZ7sWVQxsuc3RAlpXXCeRyYmD/iLxTWpdlaeEMPgBM=
Subject key identifier: 40:7F:D7:B4:3F:48:BC:80:B7:84:DE:87:97:39:75:77:06:BA:A9:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 75F601E801F9CF93B6ED142C691CDAC0112EBBE1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e20383334.roa
Signing time: Wed 29 Jul 2026 10:25:09 +0000
ROA not before: Wed 29 Jul 2026 10:20:09 +0000
ROA not after: Wed 28 Jul 2027 10:25:09 +0000
asID: 834
IP address blocks: 145.79.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f6:01:e8:01:f9:cf:93:b6:ed:14:2c:69:1c:da:c0:11:2e:bb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 29 10:20:09 2026 GMT
Not After : Jul 28 10:25:09 2027 GMT
Subject: CN=407FD7B43F48BC80B784DE879739757706BAA9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:a9:bc:2e:70:03:0a:77:f1:cf:92:83:bc:
13:73:8b:e5:a3:59:a2:14:0e:74:11:86:52:44:63:
ee:ce:5c:e1:55:c4:05:13:b1:8f:c5:e0:a2:28:98:
7f:e9:3f:1c:4e:11:89:ee:a9:31:46:6d:2e:e9:4c:
6d:1d:74:45:2e:6c:42:45:69:44:54:d9:7e:7d:17:
63:87:5f:39:b6:0e:24:37:35:3c:4e:c8:4b:28:db:
40:af:12:92:b1:81:f6:c9:02:d5:e8:10:37:50:c2:
32:70:d8:e2:11:50:21:92:d6:4f:ba:1b:ed:1e:6f:
50:18:f8:95:42:c7:6b:c1:43:25:26:4b:62:63:42:
5f:f4:4b:27:3b:2a:a3:90:da:f8:eb:06:96:42:44:
51:cf:3d:e3:2f:cb:e1:b2:69:3f:e3:b5:51:98:1b:
38:19:e7:58:35:a7:3a:dc:fd:68:3d:a5:74:ac:96:
1f:51:4b:85:1c:f9:44:ae:1e:9d:c2:f9:f4:b5:6e:
22:74:66:c9:f3:ee:a4:38:14:c4:f6:87:a9:d3:bb:
1a:48:99:af:8a:18:b7:41:ab:82:62:e6:b3:c9:f6:
b6:e7:09:a3:95:49:1e:ef:50:e2:f3:10:38:85:29:
b4:4c:8a:df:cf:02:56:a5:33:52:ca:92:9a:eb:e3:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:D7:B4:3F:48:BC:80:B7:84:DE:87:97:39:75:77:06:BA:A9:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.187.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0d:1f:cd:9d:74:56:1d:53:a5:c5:0c:e5:95:4b:da:b8:cd:
77:74:57:5e:ee:77:6a:f9:2f:61:b1:e8:85:66:dc:99:9c:ab:
14:41:cb:72:d3:b2:5a:00:f3:15:53:1a:f5:ca:d4:37:1b:7c:
7b:63:b7:f0:2c:0b:d6:b9:9f:27:8c:d1:68:b5:09:2b:6a:f4:
88:a1:6b:cb:35:e6:86:2e:bc:c1:40:73:bf:86:ce:87:90:0e:
33:c7:7b:fb:24:81:d5:f6:f4:bc:ea:b9:db:fc:a1:5b:9f:f2:
bd:32:1c:70:04:ca:09:3a:f3:7a:29:a8:0e:f5:77:63:7a:7e:
5a:65:b9:d4:20:95:f3:2b:6c:b4:b6:b8:17:cb:76:b4:14:81:
85:53:0b:22:1c:34:ac:47:9a:c3:b9:ab:26:51:66:0d:80:f1:
3a:eb:6c:fd:39:69:e7:4b:c0:7b:75:0f:6f:23:87:b1:20:5f:
8a:0c:9a:ad:9a:a9:62:ff:b3:e3:5a:76:aa:a7:47:58:40:fe:
f6:f9:94:75:1f:2c:33:51:75:b6:0f:12:3d:68:8c:a2:1e:fc:
ca:ed:ad:8e:34:43:47:7a:1c:9b:ca:00:b4:92:96:a6:8b:c2:
2e:c7:e1:a7:46:22:86:ae:56:2e:16:f6:d8:bc:4c:ea:4c:db:
ce:92:cf:de
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUdfYB6AH5z5O27RQsaRzawBEuu+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjkxMDIwMDlaFw0yNzA3MjgxMDI1MDlaMDMxMTAvBgNV
BAMTKDQwN0ZEN0I0M0Y0OEJDODBCNzg0REU4Nzk3Mzk3NTc3MDZCQUE5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Kam8LnADCnfxz5KDvBNzi+Wj
WaIUDnQRhlJEY+7OXOFVxAUTsY/F4KIomH/pPxxOEYnuqTFGbS7pTG0ddEUubEJF
aURU2X59F2OHXzm2DiQ3NTxOyEso20CvEpKxgfbJAtXoEDdQwjJw2OIRUCGS1k+6
G+0eb1AY+JVCx2vBQyUmS2JjQl/0Syc7KqOQ2vjrBpZCRFHPPeMvy+GyaT/jtVGY
GzgZ51g1pzrc/Wg9pXSslh9RS4Uc+USuHp3C+fS1biJ0Zsnz7qQ4FMT2h6nTuxpI
ma+KGLdBq4Ji5rPJ9rbnCaOVSR7vUOLzEDiFKbRMit/PAlalM1LKkprr45AnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUQH/XtD9IvIC3hN6Hlzl1dwa6qfgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM4
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT7sw
DQYJKoZIhvcNAQELBQADggEBAAINH82ddFYdU6XFDOWVS9q4zXd0V17ud2r5L2Gx
6IVm3JmcqxRBy3LTsloA8xVTGvXK1DcbfHtjt/AsC9a5nyeM0Wi1CStq9Iiha8s1
5oYuvMFAc7+GzoeQDjPHe/skgdX29Lzqudv8oVuf8r0yHHAEygk683opqA71d2N6
flpludQglfMrbLS2uBfLdrQUgYVTCyIcNKxHmsO5qyZRZg2A8TrrbP05aedLwHt1
D28jh7EgX4oMmq2aqWL/s+NadqqnR1hA/vb5lHUfLDNRdbYPEj1ojKIe/MrtrY40
Q0d6HJvKALSSlqaLwi7H4adGIoauVi4W9ti8TOpM286Sz94=
-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:54 2026 by rpki-client