Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203132303833.roa
File: 3134352e37392e34342e302f32322d3234203d3e203132303833.roa (raw, json)
Hash identifier: jybYE1nuSTPHu9ii5/A92bM6L1iMDONrZuHJDGD9wHU=
Subject key identifier: E7:AF:BA:63:72:41:C1:4C:B8:1A:16:2A:28:EB:B8:FB:77:1D:BA:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 086712448B317FAD92D7FCBB0D48FAFA5F1C1A91
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203132303833.roa
Signing time: Fri 10 Jul 2026 22:48:55 +0000
ROA not before: Fri 10 Jul 2026 22:43:55 +0000
ROA not after: Fri 09 Jul 2027 22:48:55 +0000
asID: 12083
IP address blocks: 145.79.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:67:12:44:8b:31:7f:ad:92:d7:fc:bb:0d:48:fa:fa:5f:1c:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 10 22:43:55 2026 GMT
Not After : Jul 9 22:48:55 2027 GMT
Subject: CN=E7AFBA637241C14CB81A162A28EBB8FB771DBAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:6f:cf:1a:97:7c:17:cb:9c:88:61:ba:d5:
b9:5c:7f:51:6e:c4:d3:b9:5e:e0:f2:5e:31:da:0c:
5c:99:d5:b9:4e:3c:60:8e:c4:be:74:6f:c5:05:b9:
6c:fe:98:c0:ee:06:da:f3:6b:12:62:05:e9:c6:17:
d4:0c:d1:94:c8:ee:7d:97:ab:1f:95:d9:63:fd:ee:
18:39:7a:73:f7:bc:81:09:b1:1e:7d:d9:9b:36:23:
71:27:ab:c3:21:ba:ce:99:4d:32:ff:34:04:37:97:
b6:97:e2:a3:13:fe:73:74:bd:a3:22:50:68:15:02:
c9:97:70:aa:14:cb:91:1b:4f:fd:25:1b:c1:aa:0b:
73:0d:60:53:cd:a6:f6:a2:37:47:8c:a5:c5:a8:0c:
68:39:e4:db:7d:bb:09:67:4a:c6:ab:f9:42:db:96:
49:ec:df:e8:0b:bd:b9:a8:b9:8e:10:33:d1:ae:66:
3d:bd:3a:3a:7c:68:af:c4:a0:a2:b7:b9:55:91:52:
3f:70:78:5f:45:d7:ca:b1:ea:6e:6e:0e:b3:fc:34:
57:b3:d4:24:de:2c:a8:d2:f6:28:84:11:7b:05:82:
5f:8f:29:0d:59:0c:af:a6:99:0b:43:64:ef:27:8a:
06:41:b2:0e:ad:65:6c:9a:3d:0c:3e:b0:83:47:0e:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AF:BA:63:72:41:C1:4C:B8:1A:16:2A:28:EB:B8:FB:77:1D:BA:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203132303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.44.0/22
Signature Algorithm: sha256WithRSAEncryption
00:e8:f5:a7:52:5b:d5:c1:b9:cc:4b:04:39:79:4a:68:3e:02:
10:e4:82:67:cd:40:2f:8f:2f:29:6e:60:ae:13:63:d4:3f:97:
96:f2:25:27:91:ab:00:61:d2:7d:63:2a:d0:9a:c7:7c:0d:2e:
68:17:4b:7b:1c:2e:ab:a7:7b:f0:60:24:97:34:82:6e:2b:96:
a0:02:5c:c5:84:c1:0c:d8:52:22:00:bb:a1:a1:d1:c3:b4:ee:
20:2c:04:93:2d:6e:91:2e:8b:c7:7b:d3:e5:1e:f1:62:fe:6d:
99:d5:17:95:14:0c:ff:9a:29:b4:b6:33:e6:bc:fb:0c:97:ef:
b8:25:f4:1b:22:b5:a0:5d:b1:91:19:a0:4f:4b:2f:ae:af:c4:
64:0b:ef:75:2a:b9:9b:44:47:4b:68:ca:75:e7:c9:7e:50:ab:
09:91:55:ff:e9:f9:1c:92:a8:dd:b0:cf:a5:93:f1:ca:b9:80:
c7:10:8d:0b:81:03:ca:7e:a5:01:fb:16:d0:40:d8:fe:68:ca:
8b:c1:b0:7b:1a:ed:04:f3:12:26:ea:8c:b3:a8:b5:82:f7:96:
ac:4a:91:43:ce:01:d3:da:e9:41:51:2d:a0:94:72:6f:a6:8e:
2d:9d:4b:8d:c8:69:d1:5d:c4:13:28:02:56:7d:82:ef:87:bc:
fe:77:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client