Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2035363530.roa
File: 3134352e37392e3233322e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: 7ETqAzMc4TgnlZfrhzKceivsryca43NwKZ3LdDV1hSw=
Subject key identifier: 14:77:AF:CC:58:0B:42:C8:AC:85:BF:F9:18:C6:88:18:8B:8E:A8:7B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7579420380052995CF160915CFB582C73DD445A5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2035363530.roa
Signing time: Wed 12 Aug 2026 14:27:53 +0000
ROA not before: Wed 12 Aug 2026 14:22:53 +0000
ROA not after: Wed 11 Aug 2027 14:27:53 +0000
asID: 5650
IP address blocks: 145.79.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:79:42:03:80:05:29:95:cf:16:09:15:cf:b5:82:c7:3d:d4:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 14:22:53 2026 GMT
Not After : Aug 11 14:27:53 2027 GMT
Subject: CN=1477AFCC580B42C8AC85BFF918C688188B8EA87B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:eb:7e:85:d9:33:ee:b6:1e:d7:10:7b:b9:
8d:6e:0e:ec:0e:2d:9c:25:8a:f9:45:7c:64:0f:10:
25:e8:36:40:ca:14:ea:a1:3e:34:8d:32:77:a7:d6:
09:41:97:ec:c6:b9:22:0a:f6:51:92:23:3b:df:c9:
1b:14:29:9b:e7:a7:92:5e:c2:de:aa:95:54:10:64:
59:10:ca:15:1f:7e:fc:e8:00:2a:ab:10:fb:d8:9e:
e2:2e:12:42:1a:5a:66:b0:74:f2:e5:fb:e1:84:b2:
2a:01:ad:36:6a:12:c3:5c:2a:fc:2f:34:0e:80:ff:
cd:36:0a:71:0c:73:c5:79:12:8d:cb:e6:e3:97:03:
eb:6d:36:17:7c:58:cb:aa:3b:dd:b4:1b:b3:e9:0f:
3f:a4:43:c2:5d:aa:c1:2f:a0:5b:47:23:94:b9:51:
a6:06:6b:16:9c:d6:08:c9:7f:40:3f:aa:da:68:fe:
8c:4d:c3:8a:18:ed:2e:59:82:51:4a:d0:fe:07:39:
fc:04:b8:71:c9:af:c6:d5:8f:9d:ab:ec:10:bc:21:
10:e1:22:7c:c8:77:0f:fa:98:ac:5d:ac:ff:b2:1c:
0d:a0:10:48:ea:81:4f:a7:36:51:5a:11:40:5d:79:
90:ca:96:bb:6e:26:78:12:5f:ad:45:dd:de:7e:ae:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:AF:CC:58:0B:42:C8:AC:85:BF:F9:18:C6:88:18:8B:8E:A8:7B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:4a:6f:21:1d:0f:42:c7:83:7d:21:0e:46:82:9d:66:74:33:
05:37:ae:ec:14:d5:4a:5e:30:04:b9:5a:7a:4c:09:97:6d:1c:
b3:97:8e:b2:90:f8:57:07:fe:8a:5a:af:74:63:56:34:8c:69:
fd:cf:71:71:05:1d:53:50:47:9a:b7:ed:51:44:f0:ab:d6:ea:
41:2f:0b:c3:20:d0:0e:4b:05:eb:b5:fa:cc:f4:a6:92:d1:20:
29:26:9d:0b:60:bb:43:db:92:54:a2:ba:ce:01:12:80:b6:28:
1b:f9:b5:e4:6c:11:7a:87:8b:b7:cc:fd:3c:93:d6:98:0f:8d:
61:0d:e1:39:a5:68:31:a7:d8:23:bd:9e:f2:46:69:62:9d:60:
be:87:e1:e4:53:d5:d1:40:85:0e:44:f0:49:dc:2a:dc:7f:f0:
54:84:96:60:ed:a5:dd:b8:b8:8d:35:d6:0c:44:41:4d:55:a4:
51:8a:b0:65:5f:d5:39:1b:2d:98:7a:18:a4:13:dc:12:40:d4:
0f:a6:70:56:38:c9:26:b4:ae:96:ac:d7:65:db:29:84:8f:43:
0d:c7:cc:ea:9d:22:16:0c:f3:98:39:e1:24:d9:9b:1e:4c:f4:
c2:a3:2c:1d:6b:29:fc:3b:9e:27:46:12:6e:42:d5:e5:9c:7b:
76:be:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:43:17 2026 by rpki-client