Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37382e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: AsLCK2N6SmNqJAymRkWNfw2PE4v5iV+rKWv2FQlG9Rk=
Subject key identifier: EB:88:F9:33:73:62:08:DF:32:58:81:72:49:D2:1D:49:FF:F3:AB:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 01AD5C552EE0845909CDC5686FB0DD72C1094B73
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e2032393134.roa
Signing time: Tue 30 Jun 2026 07:25:52 +0000
ROA not before: Tue 30 Jun 2026 07:20:52 +0000
ROA not after: Tue 29 Jun 2027 07:25:52 +0000
asID: 2914
IP address blocks: 145.79.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ad:5c:55:2e:e0:84:59:09:cd:c5:68:6f:b0:dd:72:c1:09:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 07:20:52 2026 GMT
Not After : Jun 29 07:25:52 2027 GMT
Subject: CN=EB88F933736208DF3258817249D21D49FFF3ABCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:3d:f7:04:ae:4d:5b:60:12:19:4e:9d:f8:
69:42:97:2a:f3:d2:09:9f:b6:b9:35:cb:f0:ec:6d:
39:88:4c:84:84:88:28:46:f4:f9:b1:db:50:ae:fc:
5e:1e:19:66:95:51:a5:3f:c5:48:e3:10:89:cf:ea:
c4:9c:c2:e8:51:3b:dc:28:4e:ef:3b:7b:43:75:b2:
dd:79:69:ec:dd:a9:c8:13:df:db:8a:a4:01:50:9c:
fd:48:8e:12:91:a0:cd:a5:b4:16:a1:3c:9a:e4:c6:
af:d6:84:44:62:9f:46:2e:33:3c:ec:7d:58:5d:01:
6f:7c:e1:57:02:d9:ba:76:b4:f9:40:c8:10:7c:f9:
b6:86:60:47:58:03:11:da:c2:9b:e1:f5:ef:95:1d:
23:fa:b1:02:ca:58:8f:89:88:5c:35:c9:be:69:09:
e5:a7:02:23:be:8b:31:e2:a1:1c:00:2e:43:af:d7:
99:14:41:28:fd:c7:4c:6a:e5:93:65:9b:6f:94:c1:
a4:ac:30:dd:ea:50:ea:6b:dc:12:44:c0:94:07:2d:
ef:d7:53:25:8f:35:f1:1d:cf:41:a4:fc:9a:07:64:
27:aa:c8:96:1a:e0:b6:08:3b:ed:fd:2e:53:44:8d:
fe:a5:9e:01:2e:72:a2:79:97:1c:de:37:34:83:d0:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:F9:33:73:62:08:DF:32:58:81:72:49:D2:1D:49:FF:F3:AB:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37382e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.78.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3b:1a:b9:25:d4:9c:90:83:86:72:a0:a1:be:ab:f6:a8:b9:
2b:be:16:56:0f:53:3e:7e:3f:35:e8:3a:ce:be:09:6b:ec:ae:
22:90:20:03:1f:03:02:24:fa:93:44:da:50:be:79:6a:2f:f6:
ed:e3:d6:21:2c:f4:08:d0:49:af:a1:b7:c6:23:73:7e:68:29:
e2:f0:8a:83:25:55:26:e5:c0:c3:7f:51:e7:85:d5:12:22:af:
3e:28:18:20:1a:ad:cf:96:ff:21:d4:c6:37:16:3b:57:1e:1b:
e0:c0:4f:11:3e:7f:93:7f:7e:35:52:27:7d:59:25:7a:4d:b7:
e7:12:bc:08:41:ac:a5:d1:5c:fa:f9:5d:8b:01:21:60:36:19:
eb:1f:ca:2d:99:18:ef:3d:9b:90:7f:ce:80:b2:d9:1e:87:18:
9a:20:2e:a7:ef:74:ad:0f:46:b2:75:60:07:04:a7:49:17:f3:
5e:5e:53:1b:48:96:71:e0:36:a8:ea:a6:26:e0:a4:99:6e:4d:
ed:fd:2d:e2:e1:7a:a7:be:ea:58:15:2a:30:1d:3b:16:69:fd:
5b:91:66:e2:c4:5b:e4:de:69:9c:98:41:3f:bc:62:af:d8:10:
c6:c8:86:47:a2:82:dd:1a:54:08:31:1c:68:a3:75:98:35:cb:
5b:71:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:10 2026 by rpki-client