Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e2037303239.roa
File: 3134352e37392e34342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: NVDvQ24HyCWv1GrHNyuohBet2iVJ4UT4XYyEix1S8uw=
Subject key identifier: 69:35:40:A5:E2:CA:D7:2C:3B:09:9B:1B:48:BD:B7:83:8B:4F:E7:F0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CC234F4D975B4A1A1F7CDB88D89C34E9F80EE58
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e2037303239.roa
Signing time: Wed 27 May 2026 18:24:37 +0000
ROA not before: Wed 27 May 2026 18:19:37 +0000
ROA not after: Wed 26 May 2027 18:24:37 +0000
asID: 7029
IP address blocks: 145.79.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c2:34:f4:d9:75:b4:a1:a1:f7:cd:b8:8d:89:c3:4e:9f:80:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 27 18:19:37 2026 GMT
Not After : May 26 18:24:37 2027 GMT
Subject: CN=693540A5E2CAD72C3B099B1B48BDB7838B4FE7F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:32:31:cb:e6:89:e4:60:f4:4d:fd:e4:e4:
d2:9c:d1:ed:b2:90:6f:a6:ee:da:2b:de:08:7e:66:
fc:db:b0:5b:9a:8d:cf:89:75:bb:55:65:65:81:28:
1d:a6:9a:8d:fd:10:b1:2e:df:2a:ec:cd:39:fa:3f:
64:8d:11:52:3c:21:59:d3:92:ae:9f:0f:13:02:90:
61:3b:01:cc:0c:97:dc:8c:e8:a0:79:0d:74:ed:a3:
58:44:85:7a:02:78:fb:49:f9:5e:ce:4b:5d:f7:78:
96:f1:94:03:ba:2e:8a:6c:7a:87:6b:1f:45:0e:83:
25:58:42:e8:47:03:92:1a:d7:f9:a9:1c:e8:af:e7:
dc:e0:8f:ca:3e:82:66:07:49:04:ab:7f:e1:4d:75:
da:0b:6a:81:46:9e:94:ae:3b:29:2c:cc:ca:6e:bf:
13:d7:f2:9b:74:c4:e3:3b:bc:60:b4:a8:b6:e5:0a:
dc:0c:28:36:b6:4c:17:5f:99:11:f0:f1:e0:52:53:
ec:0c:76:96:11:4f:e3:be:f6:85:c0:97:b5:8b:54:
dc:50:25:f0:1f:d2:4f:37:77:22:b5:c2:3f:dc:6b:
b5:04:b1:ca:1f:3a:40:84:a4:2e:f0:23:1c:fb:88:
14:49:80:4f:7a:b7:18:27:d1:f0:a7:2c:ab:58:06:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:35:40:A5:E2:CA:D7:2C:3B:09:9B:1B:48:BD:B7:83:8B:4F:E7:F0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34342e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.44.0/22
Signature Algorithm: sha256WithRSAEncryption
16:dc:66:33:09:37:9f:aa:e7:b8:00:63:33:0c:ba:9a:25:c5:
c9:10:02:ea:d2:39:a6:f9:76:66:08:f7:8a:9f:a2:ec:dc:1a:
bc:83:1e:b5:c6:5a:7e:5a:a4:40:62:a3:28:91:2f:70:87:e1:
1f:8e:43:95:0c:42:2a:12:0f:2c:1f:c3:82:41:ce:3e:8c:da:
91:4d:38:07:33:82:92:8d:7f:ae:5e:3b:1b:2f:ff:9e:7a:31:
ff:a1:68:d2:cb:f6:4b:31:ad:db:58:f1:b5:0f:56:cb:bd:cd:
af:20:a3:54:a4:d4:7b:37:67:ec:42:c1:23:46:79:02:b5:d5:
e3:71:d5:a0:be:1f:c2:c9:d1:5f:fb:31:4e:55:f6:d9:51:4f:
e0:da:32:23:66:c9:95:eb:39:55:19:73:20:6c:fe:6f:f9:95:
68:7b:7e:de:de:7b:7e:cb:8c:10:cb:1a:ce:46:d5:ea:5c:cf:
5c:f3:0f:90:a4:92:a1:1f:0e:96:29:6c:de:de:a7:d3:39:5c:
39:c2:ca:d1:0f:2e:39:05:60:4d:d4:e1:3e:ed:1d:be:b0:2c:
e6:bc:76:ae:24:3d:74:c6:05:a8:cf:fa:1f:81:80:ef:85:18:
83:38:6e:82:74:54:82:b6:32:1c:ca:32:ca:96:3f:0f:3e:39:
03:ba:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:18:52 2026 by rpki-client