Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203133333437.roa
File: 3134352e37392e34342e302f32322d3234203d3e203133333437.roa (raw, json)
Hash identifier: zBg6wBzRoOivgu41o2Ff5MSD2UkY6eEWR+33AAYbZgo=
Subject key identifier: 1F:4D:E8:A1:CB:6E:4F:E0:38:BB:CF:EB:31:0B:81:1C:0D:98:15:1F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B7EFB3DC8631EDD32D95ECB76F5CA7ABB58B823
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203133333437.roa
Signing time: Wed 27 May 2026 18:24:37 +0000
ROA not before: Wed 27 May 2026 18:19:37 +0000
ROA not after: Wed 26 May 2027 18:24:37 +0000
asID: 13347
IP address blocks: 145.79.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7e:fb:3d:c8:63:1e:dd:32:d9:5e:cb:76:f5:ca:7a:bb:58:b8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 27 18:19:37 2026 GMT
Not After : May 26 18:24:37 2027 GMT
Subject: CN=1F4DE8A1CB6E4FE038BBCFEB310B811C0D98151F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:46:0f:02:c1:5a:09:55:99:b9:20:94:85:
64:4a:97:70:bd:d1:bb:6c:38:cd:7b:13:ab:79:fc:
4a:0f:8a:36:a2:56:ee:56:b6:e2:d1:01:3a:d3:d1:
60:29:c7:2c:08:82:23:aa:23:ba:63:6c:0c:cf:b6:
1c:df:b6:a2:c8:76:c7:45:cd:81:67:c3:99:a1:36:
08:7d:ae:c2:d7:a5:27:d6:12:66:81:da:72:b2:02:
ce:46:bc:30:f0:50:86:b2:9f:82:a2:dc:14:dc:bd:
de:68:b2:05:9d:0a:d2:46:4d:f2:93:e1:17:24:c4:
1e:dc:2a:04:f2:73:b6:28:d6:29:63:91:d6:94:82:
7d:33:c1:54:f3:84:1a:9a:05:c2:4c:46:ce:b4:be:
64:ec:fb:3b:95:5f:de:b7:18:7f:c2:31:ef:94:0a:
a3:7b:9c:d9:13:a8:0a:a9:17:4d:38:ac:f6:14:17:
dc:2f:36:1a:2a:c0:e2:2f:66:16:6f:62:b6:e8:a6:
93:a7:66:b5:b5:dd:44:21:16:05:b7:56:4a:e8:87:
6a:95:09:5b:08:32:e2:ae:f3:bf:ea:21:22:03:5f:
98:d3:b3:ab:65:e8:28:31:e9:6e:51:05:da:9a:67:
58:e4:6b:f0:d5:a2:72:4a:c8:a5:da:7c:ba:a9:5d:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:E8:A1:CB:6E:4F:E0:38:BB:CF:EB:31:0B:81:1C:0D:98:15:1F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.44.0/22
Signature Algorithm: sha256WithRSAEncryption
27:8c:0a:e0:ca:ca:d0:19:ad:ef:ab:67:e4:68:fc:60:12:3e:
43:94:80:c9:20:9a:27:87:06:ff:cd:e2:16:68:5f:ac:88:ce:
d4:69:de:aa:56:f1:6f:4a:58:c6:bd:ec:7b:0f:64:b2:aa:ee:
a4:c4:34:b0:cc:59:8e:4f:6e:06:c6:de:18:70:5a:83:e1:b8:
4e:c5:f0:99:9b:46:b1:42:5b:02:49:55:d4:ef:4c:46:1f:6b:
9e:39:ff:c4:a8:b3:3e:ae:3b:1d:e9:03:32:ed:2a:41:50:78:
29:e8:ee:a0:94:31:d9:1a:e6:6f:04:01:40:9c:f1:65:65:4c:
f8:82:ac:87:9c:2d:0b:2a:d8:1d:91:cf:30:0b:5a:9d:42:5e:
bd:e4:a6:96:dd:50:60:7b:f9:23:93:49:db:8c:d2:f8:2c:57:
c4:c1:46:c5:cf:af:d9:48:25:63:47:57:54:30:34:53:09:de:
d0:59:63:73:33:a5:f2:39:1e:d5:fb:2a:b0:97:cc:38:e5:c8:
e6:18:4c:5a:91:b5:f3:08:24:e8:b1:3f:e9:26:62:64:bd:cb:
d6:86:1f:ad:83:6e:49:d8:24:f2:5d:50:71:4d:a2:1e:16:ff:
ad:43:88:bb:43:e3:5d:8a:a9:d3:74:7f:2e:5f:c9:3e:53:a4:
f1:4f:90:49
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUS377PchjHt0y2V7LdvXKertYuCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MjcxODE5MzdaFw0yNzA1MjYxODI0MzdaMDMxMTAvBgNV
BAMTKDFGNERFOEExQ0I2RTRGRTAzOEJCQ0ZFQjMxMEI4MTFDMEQ5ODE1MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXkYPAsFaCVWZuSCUhWRKl3C9
0btsOM17E6t5/EoPijaiVu5WtuLRATrT0WApxywIgiOqI7pjbAzPthzftqLIdsdF
zYFnw5mhNgh9rsLXpSfWEmaB2nKyAs5GvDDwUIayn4Ki3BTcvd5osgWdCtJGTfKT
4RckxB7cKgTyc7Yo1iljkdaUgn0zwVTzhBqaBcJMRs60vmTs+zuVX963GH/CMe+U
CqN7nNkTqAqpF004rPYUF9wvNhoqwOIvZhZvYrboppOnZrW13UQhFgW3Vkroh2qV
CVsIMuKu87/qISIDX5jTs6tl6Cgx6W5RBdqaZ1jka/DVonJKyKXafLqpXUSbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUH03ooctuT+A4u8/rMQuBHA2YFR8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNDM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzMzMzQzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApFP
LDANBgkqhkiG9w0BAQsFAAOCAQEAJ4wK4MrK0Bmt76tn5Gj8YBI+Q5SAySCaJ4cG
/83iFmhfrIjO1Gneqlbxb0pYxr3sew9ksqrupMQ0sMxZjk9uBsbeGHBag+G4TsXw
mZtGsUJbAklV1O9MRh9rnjn/xKizPq47HekDMu0qQVB4KejuoJQx2RrmbwQBQJzx
ZWVM+IKsh5wtCyrYHZHPMAtanUJeveSmlt1QYHv5I5NJ24zS+CxXxMFGxc+v2Ugl
Y0dXVDA0Uwne0FljczOl8jke1fsqsJfMOOXI5hhMWpG18wgk6LE/6SZiZL3L1oYf
rYNuSdgk8l1QcU2iHhb/rUOIu0PjXYqp03R/Ll/JPlOk8U+QSQ==
-----END CERTIFICATE-----
Generated at Fri Jun 5 14:08:03 2026 by rpki-client