Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 2LRVuAkARuTvSkQumYj0k2elvF2JjmOvK0QaFFPbYQc=
Subject key identifier: 7F:B9:6C:01:63:55:3B:B7:B2:B5:E4:81:82:53:B1:93:49:84:BA:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 751369FE97BC1360A443F30A632D3EA8513E6913
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e2032393134.roa
Signing time: Tue 30 Jun 2026 07:25:53 +0000
ROA not before: Tue 30 Jun 2026 07:20:53 +0000
ROA not after: Tue 29 Jun 2027 07:25:53 +0000
asID: 2914
IP address blocks: 145.79.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:13:69:fe:97:bc:13:60:a4:43:f3:0a:63:2d:3e:a8:51:3e:69:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 07:20:53 2026 GMT
Not After : Jun 29 07:25:53 2027 GMT
Subject: CN=7FB96C0163553BB7B2B5E4818253B1934984BA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:35:39:8d:2d:eb:ab:5a:42:17:4a:3f:0f:
67:f1:45:9d:91:88:d8:2a:12:26:b3:67:b8:f8:f7:
0d:4a:84:c6:4d:36:1c:01:38:7d:ce:6d:d5:91:50:
24:b0:c9:5a:9b:b2:41:74:ec:80:24:c9:69:5b:5d:
51:d3:e9:d6:bf:d1:93:16:e4:3c:66:4a:96:3a:dc:
c4:ce:5e:3a:59:01:f0:37:66:c2:7f:8c:87:26:87:
ff:59:88:47:77:db:c1:a5:f1:b1:e8:fa:09:91:46:
dd:24:82:66:b7:7f:f8:5c:f7:cb:a2:30:cc:e3:3f:
21:65:50:47:91:c9:46:4b:2b:b1:dc:92:14:30:50:
5d:01:2b:c7:e2:80:4f:52:56:1f:32:40:d1:4c:2a:
c6:44:06:a2:06:87:f2:72:75:29:06:7d:98:4e:22:
6b:78:ce:1e:14:bb:54:d0:33:96:18:2e:da:1f:9b:
42:f0:79:4a:fe:c9:4e:0e:96:30:b7:90:3f:4a:81:
11:1b:4a:32:9a:bd:7b:6b:4c:1a:ec:62:dc:29:e0:
a8:f6:3f:33:6a:48:a9:29:27:d9:0a:c5:23:94:98:
1a:e0:8a:6a:08:60:6f:fc:7a:e3:71:ef:4d:cc:8b:
43:b1:a0:34:73:9a:2e:3f:4f:d3:a9:3d:bd:f8:e4:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:6C:01:63:55:3B:B7:B2:B5:E4:81:82:53:B1:93:49:84:BA:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.79.0/24
Signature Algorithm: sha256WithRSAEncryption
54:1c:44:4c:35:f3:96:d5:e8:9c:6b:e5:52:b6:e8:4b:e0:59:
0c:bf:84:a6:76:06:f4:25:f4:a1:1a:ce:37:9c:d6:9b:a8:33:
54:e1:57:f4:07:09:86:c7:d8:e6:80:1e:d4:b8:33:83:cd:46:
db:61:a0:a3:66:05:96:d2:de:b6:24:26:4e:b3:a9:e0:fe:ee:
70:24:fc:24:27:c9:8d:f2:ec:68:c6:09:58:8b:70:c4:18:db:
6a:ae:ef:c3:05:df:99:01:a1:9a:25:98:28:e0:8f:97:38:2b:
9d:73:06:e0:16:8a:9a:6d:f4:07:67:52:13:23:9f:21:bc:3d:
00:29:af:a8:55:57:eb:4e:af:60:1f:c7:77:c4:79:59:8c:9c:
e1:ab:f1:f3:8f:48:f6:a1:02:1c:73:5c:18:0e:b8:9f:29:54:
ef:d3:07:ad:ab:9b:25:3b:6c:ba:84:bd:e0:fe:c1:77:fb:72:
3e:90:f7:5e:01:b3:64:bb:10:0d:ed:6c:8e:35:1f:91:2a:6b:
13:5a:81:da:56:c9:5b:51:17:64:e7:4d:20:af:55:c7:be:8a:
d0:e4:e9:f7:cb:82:15:a6:3c:d8:fa:72:1d:3a:39:25:01:7b:
c2:74:ae:94:40:3f:5c:16:6d:3d:94:0e:06:1f:86:b6:70:14:
8c:04:72:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:06 2026 by rpki-client