Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32332d3234203d3e2038383831.roa
File: 3134352e37392e3139302e302f32332d3234203d3e2038383831.roa (raw, json)
Hash identifier: 0GQDFBy4dQmlHrgoakXLj919oJNHaliJMpv00udiYk4=
Subject key identifier: C8:E5:64:E4:20:1B:6A:FA:B4:1E:F1:E2:25:0A:17:47:5A:CE:4D:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2135B732C02188F9832E3CF6CCBB40A1252939D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32332d3234203d3e2038383831.roa
Signing time: Mon 10 Aug 2026 12:29:07 +0000
ROA not before: Mon 10 Aug 2026 12:24:07 +0000
ROA not after: Mon 09 Aug 2027 12:29:07 +0000
asID: 8881
IP address blocks: 145.79.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:35:b7:32:c0:21:88:f9:83:2e:3c:f6:cc:bb:40:a1:25:29:39:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 10 12:24:07 2026 GMT
Not After : Aug 9 12:29:07 2027 GMT
Subject: CN=C8E564E4201B6AFAB41EF1E2250A17475ACE4D4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:25:3c:8b:5c:15:95:50:e4:79:b6:06:32:
df:68:dd:18:b2:fc:f3:93:a8:46:8d:b1:0d:49:e9:
4e:19:f9:93:ff:e5:a3:f7:76:92:13:31:5e:94:35:
2a:8b:4d:99:da:ca:9b:79:7b:a2:f4:34:20:ec:83:
d8:48:bf:9c:9f:f1:35:a6:b7:95:da:63:f6:a9:6c:
ca:93:48:ed:59:45:d6:ec:d8:6b:4f:61:c0:ba:9b:
1e:24:98:d6:92:7a:bc:30:7d:90:81:fe:94:9c:88:
4f:9e:55:e6:44:9f:f7:37:67:ac:b9:f0:05:70:be:
c4:6d:a5:ad:16:b5:c0:bb:9c:8e:62:16:b0:3d:42:
5b:f5:8a:bd:66:08:7f:02:58:90:e8:f4:4b:cf:54:
f4:28:58:eb:27:61:01:6b:84:0d:ca:44:a8:91:2a:
b5:9d:9e:4d:5f:0d:47:6d:71:df:c9:26:da:a6:0c:
a7:77:4d:61:d2:80:6c:eb:f5:26:7a:91:ef:14:ab:
af:51:4e:f8:e3:94:62:a3:2a:70:01:86:e8:74:38:
92:b5:59:5d:9d:c7:10:76:47:21:6f:ca:a6:9b:54:
93:3d:5a:a0:64:b1:64:e6:f9:51:4d:2f:0b:f6:3f:
6c:03:b4:35:85:5d:2f:43:e2:0d:3a:72:3c:6b:fa:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:64:E4:20:1B:6A:FA:B4:1E:F1:E2:25:0A:17:47:5A:CE:4D:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139302e302f32332d3234203d3e2038383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.190.0/23
Signature Algorithm: sha256WithRSAEncryption
70:64:22:98:90:f4:8a:3d:8d:77:73:ae:2d:a2:e0:1a:d8:98:
93:77:e0:b9:23:b1:12:1d:20:65:e8:92:f5:d2:95:55:b4:52:
36:6a:c5:57:de:dd:e1:11:83:19:5e:aa:f0:30:2c:f4:77:3d:
34:cf:46:0b:ea:29:2d:dc:dc:19:98:60:20:78:5a:da:d0:f1:
84:01:13:7e:e3:44:ef:9c:8e:ca:0f:de:9f:d3:8f:40:8d:b0:
52:d3:3d:3a:11:d7:0a:39:92:e5:76:7b:74:1d:0f:55:52:1f:
82:f5:57:f0:ce:0f:b9:63:11:60:04:b7:6f:40:f6:12:30:a6:
2a:c4:21:41:14:e1:6d:48:d6:87:32:09:c5:93:37:25:6a:57:
06:bc:21:34:db:70:32:b3:98:c4:1a:3a:f1:e7:c7:80:aa:20:
1c:b3:26:d0:e1:4e:12:17:42:71:32:99:71:74:d8:41:35:68:
36:64:44:d5:d1:5a:c5:6f:c8:65:d2:02:f2:c7:e1:dd:9d:95:
b6:d8:8a:13:6d:fa:5e:d3:8f:8e:d9:ab:94:71:8b:80:e9:ac:
fa:4a:df:a6:6a:40:b0:e0:b0:a5:f8:fc:0e:9a:a6:eb:04:2d:
64:4d:a9:95:a2:11:8a:06:18:b0:e0:b2:b2:bd:51:2e:ff:93:
1d:cd:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:28 2026 by rpki-client