Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20323132323338.roa
File: 3134352e37392e3139362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: eMhsbFEpTtoPVU/s25vsRN9RLz6C94UpBZKVKRYsdmI=
Subject key identifier: 78:92:8F:2D:BC:5A:83:1C:D5:FE:BF:46:2A:B0:7D:B5:DB:A2:AA:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12FC5DC3809EBBABEC71C11B2DE157B560008FF6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 10 Sep 2026 09:28:42 +0000
ROA not before: Thu 10 Sep 2026 09:23:42 +0000
ROA not after: Thu 09 Sep 2027 09:28:42 +0000
asID: 212238
IP address blocks: 145.79.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fc:5d:c3:80:9e:bb:ab:ec:71:c1:1b:2d:e1:57:b5:60:00:8f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 09:23:42 2026 GMT
Not After : Sep 9 09:28:42 2027 GMT
Subject: CN=78928F2DBC5A831CD5FEBF462AB07DB5DBA2AA63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:37:82:61:fe:6f:5d:d0:b3:c9:f1:a9:a4:
82:95:95:57:d6:fe:b0:56:2c:5f:5f:8b:93:c0:40:
77:3a:76:97:32:b1:9f:1c:1c:15:7a:9e:3c:5b:0d:
a4:90:7b:5d:6d:7f:cc:8b:70:83:52:4c:45:63:a1:
ed:16:b5:83:55:7c:f0:27:5a:d1:9b:1f:8e:76:fc:
ef:81:23:70:98:21:37:18:ca:00:cd:bd:f8:af:e4:
06:b9:fc:04:19:47:54:a6:46:9c:cf:f9:65:83:22:
eb:58:9e:d8:6a:09:00:1f:bf:0e:2d:8d:e0:4c:f2:
cc:92:51:59:20:4b:c4:7d:d6:b2:c0:05:9f:d8:e2:
80:7d:bf:0c:74:83:d1:14:28:d5:1d:66:07:27:d3:
46:d1:26:9f:2d:85:4d:91:f3:a9:91:be:01:79:c1:
b0:37:09:bd:c3:6f:bb:84:15:17:dc:88:63:ba:82:
f8:31:8d:d8:a9:14:c4:c4:72:b3:89:6e:f1:e1:0a:
89:29:dd:71:9b:9f:f6:d5:8e:02:27:6e:e1:35:f9:
87:c7:61:32:67:16:a8:e7:11:1e:00:ac:33:cb:ee:
34:cf:eb:d3:92:40:35:12:f4:44:5a:3f:fa:4d:11:
d3:52:15:dc:dd:6a:74:f7:cd:30:05:f7:82:38:24:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:8F:2D:BC:5A:83:1C:D5:FE:BF:46:2A:B0:7D:B5:DB:A2:AA:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:b6:cb:e1:8e:98:90:3d:41:f6:04:18:90:7c:d7:c1:00:
bb:0a:2b:03:84:6d:4f:a9:c9:ef:dd:72:27:e0:65:2c:24:76:
3a:5b:0b:ee:41:b0:4c:33:4c:33:a8:63:3c:7b:61:61:5e:df:
dd:99:d4:e5:24:a3:5d:a5:7d:77:52:7c:d5:21:dd:2b:28:70:
d9:17:3a:7a:6c:d6:44:7e:e7:d3:27:3f:35:00:96:2a:06:6f:
88:e9:1c:56:18:01:2e:eb:78:e6:72:5f:d8:60:c5:3c:b0:20:
0f:18:62:15:dd:10:4e:dc:f0:67:80:2d:b3:f7:56:e7:19:28:
f9:10:40:89:4e:ff:16:50:7e:b8:9e:90:92:07:73:e2:20:26:
37:35:63:64:00:1e:c3:f3:a5:8c:84:01:25:86:81:b5:45:e6:
d2:f4:41:3b:92:8d:52:83:9d:68:04:33:29:2a:7d:23:b1:a3:
33:b8:c2:4f:98:e7:73:f0:a5:74:11:6d:28:ee:8d:29:1c:e1:
8e:ec:ca:57:59:b0:1a:98:d0:1e:1e:f4:cd:ef:7b:5b:71:b1:
b9:c9:3d:2a:03:bf:d4:8e:0b:0d:4d:94:4e:a3:fb:04:a5:f3:
b2:8e:0d:c8:ef:6e:3b:40:9c:42:55:a6:25:82:7c:44:21:26:
83:a0:41:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:06:11 2026 by rpki-client