Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: jgo46WAiZ2DWPfdypahOuTjgHGxBGIIe3OtIpivwZKQ=
Subject key identifier: C8:F0:1B:FC:ED:CB:D7:38:8C:9F:29:6F:A2:E4:C5:C3:45:3B:6E:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18F233778E890227590D786F9C142D1CE23AD63A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 30 Jul 2026 10:27:26 +0000
ROA not before: Thu 30 Jul 2026 10:22:26 +0000
ROA not after: Thu 29 Jul 2027 10:27:26 +0000
asID: 136787
IP address blocks: 145.79.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f2:33:77:8e:89:02:27:59:0d:78:6f:9c:14:2d:1c:e2:3a:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 10:22:26 2026 GMT
Not After : Jul 29 10:27:26 2027 GMT
Subject: CN=C8F01BFCEDCBD7388C9F296FA2E4C5C3453B6EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:fd:49:45:a1:55:c7:08:e1:23:f3:34:de:
d5:60:5d:6b:af:55:5b:af:89:0f:5e:c1:cd:97:f1:
48:6c:2e:48:8f:78:e4:f4:e2:ef:2c:e0:de:1b:91:
e3:96:03:0c:92:21:96:d6:18:01:4b:28:72:2f:7e:
68:c7:f1:8c:94:03:e0:ba:ef:25:b1:2f:e3:d6:0f:
ae:b9:04:f0:41:84:1a:63:55:78:fa:5e:0f:40:9c:
dc:c3:e4:18:b2:64:46:29:03:07:b0:09:87:1c:e0:
e1:0e:16:1d:bb:1e:b9:e8:7f:72:6d:6e:e7:51:e5:
ee:9d:74:19:7f:32:40:65:d5:af:7b:f5:4b:a1:19:
1f:29:88:82:87:01:3c:f5:d2:f7:c9:aa:fc:8a:03:
78:9a:6a:c7:6c:e4:f1:1b:aa:3e:b0:18:a0:17:0a:
f5:05:ac:99:a0:af:7e:b5:46:6d:8e:81:30:01:06:
0b:3f:57:2f:73:04:ca:e8:0a:28:76:d0:c9:4b:6d:
6e:97:27:e7:d8:1a:7d:3b:61:c7:1b:7c:19:c8:55:
15:92:8d:a6:2f:37:a1:3d:09:a5:bc:e7:df:08:ea:
ad:25:ab:97:62:5b:cf:ae:67:74:ab:64:82:ca:32:
51:3f:d9:f0:57:05:8f:c1:c6:68:b4:43:01:92:74:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F0:1B:FC:ED:CB:D7:38:8C:9F:29:6F:A2:E4:C5:C3:45:3B:6E:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:27:ec:9e:cd:f9:5f:57:74:ad:0b:94:25:c9:04:8a:94:72:
f0:1f:23:5e:d8:b5:b1:d5:86:88:df:58:1a:8d:47:d5:bc:9f:
78:1c:f5:18:a8:e6:d5:b8:8d:a4:be:f8:d7:6a:39:bc:c1:4d:
05:38:91:35:0d:b8:97:02:86:2d:4f:b8:f4:f1:ed:b3:bb:60:
db:83:2b:9b:aa:8a:76:d9:f5:3b:02:05:81:66:88:24:3e:cb:
79:91:48:b7:cd:d3:53:c6:03:4f:28:48:0e:b5:b8:90:47:00:
da:be:f1:1d:48:f0:40:8d:4a:27:5b:a5:ba:f7:76:f3:0d:af:
ec:b9:3c:56:f7:e7:36:89:1c:68:5f:23:71:75:c2:c7:90:f1:
b7:69:82:71:0d:36:6c:2a:e7:bc:30:29:dd:cd:57:92:d4:46:
10:73:a8:4b:6b:56:8e:46:f4:44:12:61:30:ba:9c:91:99:0b:
56:0b:71:ba:3a:52:21:df:f8:9e:7a:f0:87:ff:87:76:98:a8:
28:6c:7c:9c:7c:64:35:b1:22:2a:6c:75:66:31:e1:c6:68:76:
6d:28:a8:01:34:90:e7:db:9e:76:bf:67:0d:1c:8c:34:55:5c:
6d:d1:9d:be:2f:71:45:be:99:e6:ad:8e:ab:a7:c7:29:94:0d:
71:bc:56:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:54 2026 by rpki-client