Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e36372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: N52EY+X89QOQh5rovohR2+bmbzub0ia0nCsUKz6XsXI=
Subject key identifier: 82:04:86:B3:D3:0A:B2:DA:3D:C5:13:EF:CB:52:B4:6A:41:28:6A:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7BC5F51749BCEBDA68695445D25E5EDB54AD9184
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36372e302f32342d3234203d3e2032393134.roa
Signing time: Tue 14 Jul 2026 11:39:24 +0000
ROA not before: Tue 14 Jul 2026 11:34:24 +0000
ROA not after: Tue 13 Jul 2027 11:39:24 +0000
asID: 2914
IP address blocks: 145.79.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c5:f5:17:49:bc:eb:da:68:69:54:45:d2:5e:5e:db:54:ad:91:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 14 11:34:24 2026 GMT
Not After : Jul 13 11:39:24 2027 GMT
Subject: CN=820486B3D30AB2DA3DC513EFCB52B46A41286A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:64:e7:5f:0a:6d:16:df:30:dd:de:f0:2e:
52:6f:e5:a4:5a:62:f1:c2:d4:24:0c:66:72:11:b0:
b5:10:20:55:ef:46:61:90:fe:8f:c7:cd:df:34:7b:
7b:23:90:69:d2:c5:71:2a:f2:2a:7d:3d:f3:ad:5a:
17:51:b6:a0:d6:91:57:c4:f2:65:c4:46:2c:d7:6d:
66:0a:b2:a8:7f:89:ab:a6:e0:e5:da:c2:32:fe:a4:
3f:a7:0d:53:51:7e:1a:33:fa:89:5f:c3:f0:c9:87:
f0:5d:02:bf:3d:eb:d1:f2:1d:55:11:c8:14:ab:86:
6a:81:c5:2b:de:57:bb:80:1c:9a:a8:21:0b:3f:98:
a0:68:c5:eb:18:13:55:3c:d5:15:71:30:6c:7a:6e:
59:37:e5:fc:95:9c:26:e6:1b:01:af:31:73:3c:22:
fb:83:59:b8:ed:15:d1:d4:9f:df:c9:fe:5e:ee:84:
08:7a:40:59:53:bd:00:39:fd:f6:88:e0:1b:c4:b5:
f3:14:b5:a5:bd:ce:ef:30:1d:b9:4f:5a:4b:32:15:
b0:ab:90:75:7c:1a:b0:ee:82:01:a6:f6:fc:dd:a1:
e5:ec:7d:fe:4a:c6:b9:ec:04:ef:d2:31:eb:7a:b9:
cd:26:85:7e:03:58:31:46:6d:33:c9:52:19:2f:c0:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:86:B3:D3:0A:B2:DA:3D:C5:13:EF:CB:52:B4:6A:41:28:6A:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.67.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cc:7a:e4:08:52:e0:73:82:7b:42:e3:0d:a1:83:8e:c4:54:
23:c7:60:2e:6d:8b:64:a9:b9:0f:8e:ae:22:73:ea:7b:56:8b:
76:9f:f6:5f:a7:d2:c7:ca:88:7c:3d:13:71:07:51:83:71:6e:
b9:4d:13:52:46:08:e8:6d:d7:1f:0a:fa:c1:f2:e4:a7:fd:51:
8f:78:57:c1:f5:05:1f:6d:71:73:b2:8b:fc:93:e6:ca:df:1f:
00:28:19:26:fc:05:26:6d:6f:12:56:40:69:14:50:d7:2b:6b:
4f:6b:a7:82:85:e9:9f:45:1d:b6:00:00:f7:6e:d1:f6:5e:32:
2e:e0:f9:3e:f6:ac:57:33:af:0d:23:8b:9e:e5:30:85:a7:4e:
90:ac:3b:90:4f:53:94:91:36:f7:ae:32:3c:7b:27:1e:a0:b7:
c2:80:06:7c:d9:88:13:e5:da:bd:ae:dd:93:6c:37:4f:0e:83:
3f:d3:8b:70:50:03:46:a6:33:1f:53:23:72:62:a3:30:6e:0a:
a3:32:3c:df:c1:bd:94:d8:8e:e5:ab:5a:73:c0:db:64:4d:dc:
6f:fe:0a:cf:45:ad:be:d3:a2:a3:b2:e1:03:51:f2:66:f4:2c:
3e:2e:25:07:e3:5d:95:21:c0:5c:dc:73:46:0f:f8:70:1c:3a:
d2:0b:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:52 2026 by rpki-client