Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: X0MHXHSDubIgW5c017tBUyL5ne3ekzVujqrjF6z0xDA=
Subject key identifier: D4:BB:F4:31:76:5D:47:BC:05:27:DD:00:72:BE:1D:10:73:35:99:9E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58E902E650DEAEB7358C2DE3848A05B3E0246899
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 07 Sep 2026 13:28:36 +0000
ROA not before: Mon 07 Sep 2026 13:23:36 +0000
ROA not after: Mon 06 Sep 2027 13:28:36 +0000
asID: 136787
IP address blocks: 145.79.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e9:02:e6:50:de:ae:b7:35:8c:2d:e3:84:8a:05:b3:e0:24:68:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 13:23:36 2026 GMT
Not After : Sep 6 13:28:36 2027 GMT
Subject: CN=D4BBF431765D47BC0527DD0072BE1D107335999E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:6e:b2:0b:29:35:a0:a6:37:79:81:f8:4b:
03:ff:41:1b:3c:23:56:9b:e0:2a:cf:37:9d:77:ee:
ba:50:0c:d0:58:82:0a:5a:d5:cb:f0:07:b6:08:50:
dd:b4:8a:3a:66:a0:30:a4:3c:80:06:fa:cc:90:fa:
e0:3e:18:54:8a:e8:bc:b2:2a:3f:93:67:59:7d:e5:
39:34:c4:70:8a:da:ad:8d:79:77:b2:c1:dd:48:12:
8a:d1:a5:08:96:8b:1b:4a:af:30:4f:a0:ad:34:da:
00:68:94:a2:3d:48:77:ea:04:9f:a0:e2:3c:73:49:
a5:2a:5d:1c:ed:c7:ea:38:2c:23:8c:91:13:d0:82:
29:0e:d3:bc:2f:42:c3:3f:2d:ea:c2:f6:d9:8c:1b:
86:38:ef:83:7f:6d:37:35:20:e5:e2:71:fe:ea:70:
fa:2d:1d:49:1f:65:b3:50:f1:db:0b:8d:31:32:e9:
d4:5c:27:f7:ca:d2:48:7a:d9:4d:8d:15:02:ba:7e:
c3:ef:a2:d5:b9:45:96:81:17:4c:17:55:4c:18:b8:
50:31:4d:55:96:1d:9a:9c:13:83:1b:b9:1a:a7:96:
9a:ef:23:60:d5:f4:14:f2:9f:f4:8b:3c:3d:e7:5c:
e6:e4:4a:01:35:7a:d6:a3:af:74:fa:20:0d:d9:1c:
00:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:F4:31:76:5D:47:BC:05:27:DD:00:72:BE:1D:10:73:35:99:9E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:35:ea:96:42:ef:4a:dd:b8:50:e1:50:fd:dc:6f:c4:63:50:
1f:e9:fc:37:62:89:69:5c:62:d3:7e:e0:e1:ab:3d:ff:c0:7b:
27:43:3d:30:48:c7:ee:b4:b2:47:87:0b:d3:43:82:d5:a8:71:
37:6d:0d:f8:e3:27:9c:33:7f:05:42:9e:10:03:d6:73:04:85:
03:f1:54:32:3a:a1:af:1c:2b:0c:b3:34:7e:63:f5:13:4b:a4:
16:17:48:e0:a8:c0:4c:c1:98:0e:96:d2:9f:52:20:a8:6e:9e:
62:e1:8b:1d:6e:85:89:7a:97:18:7f:30:ea:55:42:fc:39:47:
6e:54:a2:30:9b:81:c5:ba:82:83:bb:7b:fd:7b:d1:bf:f7:7a:
83:1d:3f:d0:a1:6a:ef:2e:0a:6a:a4:92:38:2a:b2:51:96:f9:
72:eb:99:96:f9:f3:8f:c9:33:b4:4a:89:7a:1f:d9:35:5c:48:
99:f0:a7:ff:49:56:d8:b4:2b:25:b0:a8:8b:9a:0b:2b:1f:c5:
b4:d6:b9:b3:bd:f0:b5:df:6e:7a:04:14:4d:97:6e:4e:6e:1e:
07:67:b8:f5:e4:2b:6e:9c:57:2b:86:ef:6e:26:e0:e3:bc:bb:
27:62:ec:69:14:c6:f6:ff:29:06:4e:47:a2:c2:a8:bd:49:7e:
c1:66:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:53:19 2026 by rpki-client