Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138392e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3138392e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: TaBZKO1LBB00/5YoV7cpKghJrahI4+3peBOu7m83UNs=
Subject key identifier: 7D:4D:EC:3D:BF:3D:81:F1:1D:7B:15:E2:E7:55:16:22:3C:AA:91:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 545FAA7F560F0AD3E4D25E9FF40668584124E14C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138392e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 21 May 2026 20:24:22 +0000
ROA not before: Thu 21 May 2026 20:19:22 +0000
ROA not after: Thu 20 May 2027 20:24:22 +0000
asID: 214143
IP address blocks: 145.79.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5f:aa:7f:56:0f:0a:d3:e4:d2:5e:9f:f4:06:68:58:41:24:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 21 20:19:22 2026 GMT
Not After : May 20 20:24:22 2027 GMT
Subject: CN=7D4DEC3DBF3D81F11D7B15E2E75516223CAA9162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:92:d5:58:93:20:02:92:be:89:a9:f9:4d:
54:b0:05:f9:67:be:23:e4:8c:eb:97:39:0c:25:2e:
bc:e4:74:a5:a3:14:ec:a2:3b:ea:ca:de:2d:7f:17:
99:23:51:93:1d:a7:e3:a6:0c:d0:1d:71:a1:92:09:
f5:05:4a:84:21:be:be:b4:50:07:6e:f6:51:c3:2f:
0c:a2:62:5b:86:a0:da:3b:66:da:b7:37:a0:6f:fc:
27:2a:b2:86:0d:ee:2e:d1:79:05:0a:58:cb:39:74:
35:b6:11:41:ac:aa:9d:8e:54:b4:b6:64:f1:f2:91:
a0:96:da:30:ba:f8:be:bc:41:71:aa:9a:b8:d9:6b:
23:93:4e:3a:a6:ce:a3:6e:63:61:16:78:a8:47:04:
c9:70:fb:38:44:2d:85:d0:41:b8:32:3d:ed:ac:82:
93:48:c1:64:8b:3b:5c:5a:42:77:7b:95:2e:45:7d:
70:47:5f:99:21:db:1b:06:90:0b:93:2e:f3:17:c4:
e1:cb:c8:85:81:ca:6e:ad:40:75:1c:6f:dd:6f:0f:
15:6e:c8:89:eb:00:a2:64:d5:ea:29:e6:dd:1c:92:
e5:50:30:1a:6b:99:b4:45:bd:67:e6:20:cf:45:8b:
38:d4:ea:8b:de:6e:35:f4:f7:be:69:e3:ff:b0:47:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:EC:3D:BF:3D:81:F1:1D:7B:15:E2:E7:55:16:22:3C:AA:91:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138392e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.189.0/24
Signature Algorithm: sha256WithRSAEncryption
18:32:51:25:e5:b4:92:4d:6c:36:6d:ed:ad:1b:3b:e4:8a:79:
c2:8e:2d:f7:b8:7d:d4:37:63:46:ab:70:5d:cc:17:7e:f8:de:
52:a2:94:98:2c:05:fd:10:62:7e:91:bd:a5:fa:41:c5:5a:ee:
ab:d4:34:09:02:09:f1:e2:f9:92:5d:84:b9:34:2a:09:4e:6b:
e9:37:37:8c:24:94:c1:1f:26:4d:94:81:95:e1:ce:59:c3:4a:
14:38:20:e8:b1:e2:59:63:e2:4d:86:29:8e:53:77:0f:e8:89:
d1:16:af:46:cd:73:a6:d6:06:61:4d:25:d2:7e:88:85:d5:be:
7a:41:bd:7f:d4:f6:eb:f5:d6:fd:ee:fc:8c:f8:0b:6c:da:73:
14:51:d3:04:17:84:02:f9:71:aa:3a:83:f5:25:67:6c:3c:9f:
3d:b5:6e:0e:a7:12:83:89:a6:25:af:bb:e5:c7:dc:90:6d:e9:
b1:e4:5d:1d:18:53:f7:54:5e:02:0d:56:f2:1c:a1:98:85:bb:
f4:2e:f7:34:32:ed:32:4b:ef:c6:e7:b3:19:d0:31:9d:cf:cf:
e9:06:76:56:1f:f7:ca:53:c8:17:d4:ea:10:07:f8:80:28:c4:
0f:0c:60:bd:6c:ca:b1:b8:39:7a:0d:30:f3:29:0c:5a:d4:92:
f5:a4:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:20:34 2026 by rpki-client