Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e37382e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: Wyt5grLNBoSGz4GhsSquFOGt5Pa6MwlxJumK3+0Z37E=
Subject key identifier: 70:7F:B7:46:AC:0C:AD:12:7D:F4:19:32:81:3C:F4:E6:5D:BA:89:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 45BB0E7E35773D448A6685EDD67D84B2A5F65D33
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 06 Aug 2026 12:27:43 +0000
ROA not before: Thu 06 Aug 2026 12:22:43 +0000
ROA not after: Thu 05 Aug 2027 12:27:43 +0000
asID: 214143
IP address blocks: 145.79.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bb:0e:7e:35:77:3d:44:8a:66:85:ed:d6:7d:84:b2:a5:f6:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 12:22:43 2026 GMT
Not After : Aug 5 12:27:43 2027 GMT
Subject: CN=707FB746AC0CAD127DF41932813CF4E65DBA89BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:4b:9b:7d:75:54:af:17:8d:0b:8a:5d:bd:
e4:0f:bb:ff:9b:4f:1b:f8:5e:e5:cc:af:b4:5d:71:
a2:74:fc:bf:c7:d0:3e:db:e9:87:13:2c:c0:50:c5:
ae:f9:02:0b:ac:9e:32:69:88:90:91:0d:05:44:e0:
70:3a:17:2e:95:23:0a:c7:e2:df:62:71:e7:93:e4:
73:b9:94:11:46:ab:69:40:c0:84:79:49:4e:b2:5f:
bf:d9:b7:11:0b:b6:c5:37:c4:7f:ba:5e:59:ca:68:
99:46:92:9b:ec:ae:8c:31:18:15:9e:74:c4:18:43:
d2:bf:d4:02:a0:3d:a5:e3:7c:d3:89:19:3b:20:2d:
df:ac:fb:f2:0e:e3:60:95:15:51:08:29:4b:44:c7:
2d:77:4d:61:23:e3:4b:af:c7:4d:ec:5c:18:fe:03:
12:97:e5:8f:13:d0:93:d5:5f:36:8a:82:cf:78:92:
f3:ae:c0:3f:f3:73:44:6e:7e:14:58:06:13:e4:38:
ea:d9:28:42:3c:8d:31:f9:16:ed:a2:94:7d:59:3c:
e9:61:dd:35:53:e9:cd:c9:5b:ee:89:d8:aa:d3:62:
63:ab:79:e5:43:f9:2a:f6:c8:f2:dd:ee:08:bc:cc:
89:d9:8e:d3:bd:ea:ea:56:d4:8e:9e:59:8c:ec:3c:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:B7:46:AC:0C:AD:12:7D:F4:19:32:81:3C:F4:E6:5D:BA:89:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.78.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8b:e5:c9:d7:ee:91:d0:80:d6:af:c2:8f:1f:2a:ed:89:04:
3c:44:a2:9f:68:e1:d9:c0:74:2f:a4:4e:b9:de:4d:4e:e4:97:
ba:a7:d4:e8:0f:33:fa:99:66:bd:9a:06:6c:bb:71:d0:65:56:
df:a0:27:c9:fe:66:cb:55:d9:d9:c1:24:84:73:fd:72:44:b8:
b3:ac:42:7c:0b:b3:bc:0a:02:02:07:43:6f:2f:14:b9:7e:39:
5a:ca:81:c1:6e:5e:73:71:9f:ce:6e:a2:f2:1d:a2:c1:17:dc:
bb:aa:63:53:a1:cb:ae:76:2e:f3:f5:cc:b9:2d:68:6e:33:0e:
32:f0:da:51:52:64:78:5d:70:ce:56:20:29:d7:26:90:c0:0e:
01:75:9c:04:be:50:3c:db:44:9e:d4:c6:04:32:bb:d4:5a:1c:
d8:b4:5f:7a:e3:5c:3e:fb:60:2d:c8:3f:ec:07:66:ba:84:18:
a1:01:6e:3a:32:8c:1a:86:13:92:50:5b:57:2e:ad:bc:42:07:
0e:fa:62:f3:f5:f4:13:65:5b:33:4e:dd:5a:18:d9:24:66:f6:
2d:63:7c:5d:cc:57:8a:ff:bc:47:a0:c5:43:0c:ed:3d:3c:7e:
a3:b7:57:6e:67:ff:2d:1b:c3:eb:6c:f0:30:3f:d0:c4:de:66:
54:1c:ce:ce
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIURbsOfjV3PUSKZoXt1n2EsqX2XTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDYxMjIyNDNaFw0yNzA4MDUxMjI3NDNaMDMxMTAvBgNV
BAMTKDcwN0ZCNzQ2QUMwQ0FEMTI3REY0MTkzMjgxM0NGNEU2NURCQTg5QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSrUubfXVUrxeNC4pdveQPu/+b
Txv4XuXMr7RdcaJ0/L/H0D7b6YcTLMBQxa75AgusnjJpiJCRDQVE4HA6Fy6VIwrH
4t9iceeT5HO5lBFGq2lAwIR5SU6yX7/ZtxELtsU3xH+6XlnKaJlGkpvsrowxGBWe
dMQYQ9K/1AKgPaXjfNOJGTsgLd+s+/IO42CVFVEIKUtExy13TWEj40uvx03sXBj+
AxKX5Y8T0JPVXzaKgs94kvOuwD/zc0RufhRYBhPkOOrZKEI8jTH5Fu2ilH1ZPOlh
3TVT6c3JW+6J2KrTYmOreeVD+Sr2yPLd7gi8zInZjtO96upW1I6eWYzsPHYNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUcH+3RqwMrRJ99BkygTz05l26ibwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNzM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzEzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU9OMA0GCSqGSIb3DQEBCwUAA4IBAQCZi+XJ1+6R0IDWr8KPHyrtiQQ8RKKfaOHZ
wHQvpE653k1O5Je6p9ToDzP6mWa9mgZsu3HQZVbfoCfJ/mbLVdnZwSSEc/1yRLiz
rEJ8C7O8CgICB0NvLxS5fjlayoHBbl5zcZ/ObqLyHaLBF9y7qmNTocuudi7z9cy5
LWhuMw4y8NpRUmR4XXDOViAp1yaQwA4BdZwEvlA820Se1MYEMrvUWhzYtF9641w+
+2AtyD/sB2a6hBihAW46MowahhOSUFtXLq28QgcO+mLz9fQTZVszTt1aGNkkZvYt
Y3xdzFeK/7xHoMVDDO09PH6jt1duZ/8tG8PrbPAwP9DE3mZUHM7O
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:02 2026 by rpki-client