Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138382e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3138382e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: rsQOzsMgbCK8T+3tGCYmz9L6tLGYw0/vHoVEKbtINRg=
Subject key identifier: 9A:D0:35:4F:34:F3:2B:26:54:53:54:07:60:4A:FD:97:7A:74:44:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 32769F3FC1CB4A4B00C1760DE1FED12DD7D21F4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138382e302f32342d3234203d3e2032393134.roa
Signing time: Tue 14 Jul 2026 11:39:48 +0000
ROA not before: Tue 14 Jul 2026 11:34:48 +0000
ROA not after: Tue 13 Jul 2027 11:39:48 +0000
asID: 2914
IP address blocks: 145.79.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:76:9f:3f:c1:cb:4a:4b:00:c1:76:0d:e1:fe:d1:2d:d7:d2:1f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 14 11:34:48 2026 GMT
Not After : Jul 13 11:39:48 2027 GMT
Subject: CN=9AD0354F34F32B2654535407604AFD977A7444B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:59:23:95:e0:26:6e:f8:05:a3:be:60:55:
ae:f8:54:e3:84:84:2e:4e:eb:8e:c2:03:11:e3:0e:
db:a8:1d:e6:d5:65:3a:b0:f8:ae:3d:b6:41:c1:92:
35:0c:63:26:6c:5d:bf:2d:46:57:66:8b:92:2a:9d:
5b:a0:78:10:fb:ae:5a:bd:f1:ba:d4:cc:84:37:15:
95:51:83:3b:ae:52:81:d4:66:ed:99:81:6c:03:26:
59:94:46:25:b0:83:4c:ec:81:94:cc:d7:5b:9d:20:
a6:9e:de:22:07:9e:ad:07:d9:ce:32:78:ee:d4:3d:
ff:6d:35:3f:23:66:c6:20:93:82:5d:c1:0e:59:06:
46:8a:92:a6:8f:44:55:b6:e6:bc:3c:ce:07:53:00:
96:72:43:36:95:f6:60:20:c3:92:38:c6:57:c6:78:
ce:2a:84:41:dd:79:6b:ed:1f:61:02:8b:29:75:ad:
8d:f8:f9:3b:61:ac:6e:d3:eb:90:52:1c:48:e5:be:
25:5a:cc:8e:66:80:ce:58:2d:86:86:00:26:a6:36:
3e:95:f0:26:b5:82:8f:04:ee:a0:ef:7d:e7:e8:9d:
2c:33:29:2a:f1:8b:1c:7a:d1:2f:2e:28:6f:74:6c:
d2:28:b0:ba:bc:82:40:82:ec:ed:8b:8f:dc:51:e2:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:35:4F:34:F3:2B:26:54:53:54:07:60:4A:FD:97:7A:74:44:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138382e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:61:96:ab:54:fb:c6:46:70:43:a2:04:66:cd:22:a4:9c:3c:
46:d4:46:c0:82:db:2e:7b:d6:63:d5:f7:dc:35:05:f9:84:5c:
2f:54:ee:bb:7b:fd:c1:16:21:1c:2a:68:72:14:6c:62:9d:53:
01:9b:e3:89:07:94:ee:27:70:ea:7b:8e:28:c1:a9:17:c5:31:
3d:84:13:d2:6d:fa:ea:bb:b6:b8:b9:fd:2e:27:0d:0a:be:af:
d2:d6:61:21:aa:39:ed:fd:1f:83:2d:1b:36:00:21:f6:83:80:
81:4a:34:35:3f:dc:52:5c:0e:6d:d4:44:32:18:03:f7:d3:36:
e8:18:ed:b7:89:25:2b:f2:a4:25:20:7e:21:8a:0b:e3:d9:6e:
45:0f:12:04:fd:ad:e1:7b:85:ed:27:91:64:ad:2d:ec:f1:73:
65:78:96:95:d6:c5:7e:84:63:96:c7:e6:be:73:19:58:61:fd:
ab:f4:fc:62:b0:e7:53:3d:20:de:06:5b:b0:b1:b2:08:99:5a:
83:ac:47:7d:8c:31:9b:17:ac:3f:e4:11:a1:ce:09:49:4d:62:
d3:26:61:08:67:0e:0d:21:ab:9b:e6:08:ae:59:68:c2:4c:ce:
0a:a3:e9:9e:50:d7:bf:7b:90:33:be:2a:02:ef:89:89:83:66:
18:20:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client