Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e37392e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: v8EdscUagm49BVVeo0riUA8xBwkEnLhEI6VU9Cp6NUo=
Subject key identifier: E1:0A:7D:49:DD:F1:FA:C2:B6:AF:D3:CB:FD:0C:9E:53:CB:1F:28:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79491B8E52522A5B2F6D0E02B8ABD86A0AB1345D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 06 Aug 2026 12:27:43 +0000
ROA not before: Thu 06 Aug 2026 12:22:43 +0000
ROA not after: Thu 05 Aug 2027 12:27:43 +0000
asID: 214143
IP address blocks: 145.79.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:49:1b:8e:52:52:2a:5b:2f:6d:0e:02:b8:ab:d8:6a:0a:b1:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 12:22:43 2026 GMT
Not After : Aug 5 12:27:43 2027 GMT
Subject: CN=E10A7D49DDF1FAC2B6AFD3CBFD0C9E53CB1F2805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:24:2e:ba:33:52:e1:7f:4c:cd:06:d1:a0:
c1:ee:2d:69:d1:a0:f5:79:b1:1c:eb:5d:96:15:29:
b1:bc:cc:ad:1c:5c:1d:4f:7a:a1:92:b9:e0:7a:43:
0d:7c:a6:1f:4a:f1:c0:df:ad:d8:96:12:58:9b:49:
db:d4:ee:ec:54:5c:ff:56:f8:ac:7c:6b:54:51:38:
40:c1:f9:d2:9f:5e:26:34:0e:8b:43:a5:e4:67:5c:
68:d1:db:26:45:75:83:7d:bd:07:a5:ec:93:77:67:
ea:b0:60:4a:d0:fc:cd:a9:fd:63:ce:67:22:7b:a9:
3c:1e:ab:45:c6:db:4f:14:d4:35:f5:45:35:03:33:
cd:67:9a:23:4d:42:6a:ec:11:f8:95:ee:50:b7:06:
be:ef:ff:6f:02:df:3a:69:fb:69:98:66:a9:30:62:
83:5f:b7:7b:aa:c3:72:c2:71:1f:7c:50:21:b2:9d:
20:9f:38:3c:36:bd:45:7b:85:4b:71:cc:14:41:db:
b5:19:97:93:9f:52:0f:22:93:d9:2e:6f:01:e8:cb:
ec:5a:20:7e:49:c7:4e:d8:14:a5:a3:f1:49:67:84:
e6:d2:ef:45:1e:a2:41:00:1f:5f:00:49:d8:0e:24:
81:22:9a:21:99:86:f4:a3:d4:60:2f:e9:cb:16:79:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:7D:49:DD:F1:FA:C2:B6:AF:D3:CB:FD:0C:9E:53:CB:1F:28:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:93:18:df:3c:1e:06:a6:87:37:9f:74:a4:a1:0f:3e:ea:a4:
cc:8d:fb:26:80:88:46:6e:31:9c:a6:9d:3f:fa:47:8b:20:9b:
88:19:7f:ee:5e:32:6c:16:67:68:35:1a:f3:60:db:cf:2e:fa:
58:29:d8:58:84:ba:a6:e6:ed:3d:49:7a:94:50:f8:2f:8d:78:
d3:f2:c4:c0:af:6a:b4:93:31:d0:46:73:10:fe:29:60:a8:ad:
c1:e4:99:b9:b6:a6:8c:78:8b:92:4e:d9:74:ef:9b:ee:2d:c7:
b2:f3:09:b3:6c:7c:74:f5:0d:0b:20:b5:a0:12:d6:d3:c2:37:
ca:ea:25:99:af:ee:a8:ad:30:61:59:a2:32:21:cd:7d:b7:91:
5a:57:de:a0:f4:f7:e4:74:e9:7f:f3:7d:08:93:7f:46:03:14:
f0:17:d2:10:a9:c5:83:51:61:df:18:42:6d:47:76:cb:33:d9:
1a:a3:16:dd:5b:73:ab:0a:a7:8e:4f:55:3c:06:9d:96:2b:de:
36:76:b0:36:2e:bf:d7:11:7a:80:b3:e9:a4:1c:e8:7e:90:7f:
44:fa:60:2d:3e:c1:9b:aa:aa:5a:61:7d:a1:82:27:8b:e8:4f:
e9:0d:6a:cd:d4:15:57:00:bd:15:d6:b8:0f:bb:7f:db:ae:a3:
5d:82:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:02 2026 by rpki-client