Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232302e302f32322d3234203d3e203437353833.roa
File: 3134352e37392e3232302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: aTPXGw1zfN3rpyyjGP1eX6H2BKsfT3/N5sx3Z1kze2E=
Subject key identifier: 50:97:2F:74:8B:10:20:71:79:1A:4B:2E:3E:C8:54:B1:87:F2:E1:D1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5CD0AB9F2637162B1A80CF86445CDA85041EC698
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232302e302f32322d3234203d3e203437353833.roa
Signing time: Wed 01 Jul 2026 11:26:57 +0000
ROA not before: Wed 01 Jul 2026 11:21:57 +0000
ROA not after: Wed 30 Jun 2027 11:26:57 +0000
asID: 47583
IP address blocks: 145.79.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d0:ab:9f:26:37:16:2b:1a:80:cf:86:44:5c:da:85:04:1e:c6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 11:21:57 2026 GMT
Not After : Jun 30 11:26:57 2027 GMT
Subject: CN=50972F748B102071791A4B2E3EC854B187F2E1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:ca:61:b3:e7:ff:ff:65:12:29:7a:4c:0c:
29:8e:0c:93:b5:de:48:f9:18:79:41:b8:75:fd:8b:
d6:52:e5:8c:2c:44:04:25:c4:f1:ae:a7:e9:cd:db:
38:35:a9:61:2b:15:cc:ff:8d:2e:9f:c3:77:8f:76:
96:89:25:ad:55:5c:c8:c1:06:cf:75:5d:70:94:d7:
e2:2e:12:c8:f4:6f:41:e4:18:af:f1:03:6e:4c:e4:
f3:c6:40:4d:69:19:52:a2:c2:ac:7a:76:99:27:e4:
05:b4:d8:72:67:85:ad:6f:36:72:8c:7c:ba:50:f9:
cd:10:26:42:30:3a:db:8a:28:7a:b0:44:a1:e4:aa:
31:f8:35:cc:5b:5a:b0:15:bc:c4:8d:0f:de:7d:1b:
79:5b:b0:01:03:4d:ea:fc:42:c0:7f:41:f6:9d:a6:
13:28:5e:f8:b0:49:db:60:51:45:82:7e:87:3d:f6:
09:e7:90:38:87:1e:00:b4:6e:ac:ec:6b:d1:f7:be:
f6:4a:96:4c:86:93:a3:18:49:28:91:ea:fe:4f:93:
84:55:7a:32:5a:11:7d:1c:9b:33:d7:b9:4c:d4:23:
a2:08:e1:c1:ad:db:e5:79:1f:ad:f1:25:d5:3e:df:
84:f3:34:34:12:76:39:85:31:07:e5:07:49:3b:e5:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:2F:74:8B:10:20:71:79:1A:4B:2E:3E:C8:54:B1:87:F2:E1:D1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
90:f2:52:15:a7:37:6d:58:3d:67:37:f1:cd:10:2c:b6:a1:1a:
a4:d8:de:56:55:53:14:96:95:6e:12:b3:10:16:b3:70:d3:88:
2c:22:b2:28:e3:19:32:f9:e8:99:07:1b:df:b2:51:ee:f1:5d:
82:53:cd:15:8a:0f:41:2d:4c:56:2a:b3:0d:52:1e:82:e1:0d:
47:89:0a:86:8c:f5:5c:65:2f:e1:82:ea:e5:e3:57:99:cd:08:
58:8d:da:ea:86:98:48:72:fb:a6:07:f4:d8:3a:c4:29:85:55:
c6:43:dc:80:a1:f1:a5:7a:39:29:bf:02:5a:47:1c:d2:f3:b1:
47:e2:37:c3:69:a0:44:b4:a8:56:72:4a:4d:61:3c:8d:05:d1:
43:87:8a:dc:28:74:99:8e:ae:12:2d:f8:10:81:eb:a0:30:ed:
5f:e8:f2:76:79:8e:45:2f:c3:c0:0b:b5:dd:1d:21:3d:2a:f5:
ac:bb:f6:4a:9e:42:0d:c1:ec:d2:ec:d8:77:42:28:ab:a5:9b:
88:26:87:ce:2e:c1:37:02:5b:b6:50:04:9d:17:11:9a:db:02:
d5:84:f8:f3:48:92:49:b2:5a:c5:11:30:14:63:f4:d2:9d:89:
ce:6f:fe:5e:a7:8c:69:3f:0f:7d:33:48:c6:cf:f2:80:a2:c3:
c6:37:03:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:50 2026 by rpki-client