Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20323032303336.roa
File: 3134352e37392e38332e302f32342d3234203d3e20323032303336.roa (raw, json)
Hash identifier: 1vk4vEg08Ff9W/IK7IBeK9zIh4QsDx3tH1pODrRMA9o=
Subject key identifier: 45:F2:9A:DE:06:F5:64:54:B3:B3:DC:1B:68:95:6F:BA:1B:34:A1:82
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77839F3FF87366BA13C3E32CC324E4F1703490D4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20323032303336.roa
Signing time: Tue 19 May 2026 18:24:29 +0000
ROA not before: Tue 19 May 2026 18:19:29 +0000
ROA not after: Tue 18 May 2027 18:24:29 +0000
asID: 202036
IP address blocks: 145.79.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:83:9f:3f:f8:73:66:ba:13:c3:e3:2c:c3:24:e4:f1:70:34:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 19 18:19:29 2026 GMT
Not After : May 18 18:24:29 2027 GMT
Subject: CN=45F29ADE06F56454B3B3DC1B68956FBA1B34A182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:e0:0a:fc:3f:cd:49:9e:22:30:01:5e:ec:
0d:64:d3:9e:54:c7:b8:df:70:b1:26:f7:bd:62:ab:
05:ef:4b:b1:ff:59:5c:d1:ea:fa:8e:ee:ff:a5:75:
7c:7f:e9:df:89:11:1b:58:e4:bc:cc:0f:d7:e7:11:
0b:69:60:18:05:0b:ac:be:f0:9b:63:55:00:8f:f6:
6e:75:53:40:83:82:36:6a:8f:77:80:1e:55:b5:7a:
a3:c9:05:4f:55:49:4a:9a:96:9a:d3:74:7a:c8:1f:
c7:29:9d:69:ec:70:ec:44:da:4e:09:df:37:2b:7b:
0e:98:40:52:d2:c5:2f:0b:c4:b6:d3:0e:0a:1f:4f:
bf:a5:6e:5f:bf:4b:b3:b0:f4:33:4b:b1:51:7c:67:
a5:73:7e:fd:26:87:2b:54:1d:48:77:d5:57:c1:0b:
7d:df:e3:fa:bf:6e:99:6c:b5:a0:d6:10:e6:2a:3f:
1d:b1:36:08:49:ef:54:09:93:ba:b9:cd:c7:2b:ff:
38:a0:dd:87:05:83:25:54:b4:7b:5d:ba:10:80:8c:
d9:b6:5c:3f:76:0a:ea:8d:13:64:e1:f6:e3:6a:05:
4f:e8:60:66:fa:51:65:0c:48:05:4e:cf:6c:9e:81:
4f:cc:85:bb:c5:7d:f7:8a:40:08:2b:d3:eb:1e:9d:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F2:9A:DE:06:F5:64:54:B3:B3:DC:1B:68:95:6F:BA:1B:34:A1:82
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20323032303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.83.0/24
Signature Algorithm: sha256WithRSAEncryption
55:95:9b:6d:d4:37:be:c7:c4:e4:14:87:08:8c:67:fd:63:35:
89:9e:a5:60:4c:b0:e7:c7:27:51:2a:30:78:88:b6:12:06:d5:
dc:6f:29:7f:ff:d1:b5:aa:74:88:12:07:15:7e:be:f1:ac:aa:
5d:8d:13:b8:a5:d9:49:fb:97:61:ad:9a:fd:24:c6:9e:67:62:
74:0b:ab:cb:f0:82:59:03:2e:f9:2e:ff:eb:e7:b6:a5:26:ac:
9b:49:dd:dc:bd:bc:94:f4:54:0c:06:94:42:f2:c3:64:c7:ea:
06:47:a9:e5:9b:89:6f:cc:3d:78:e8:e7:43:b8:00:12:32:d9:
ea:ff:7e:df:8d:ed:e7:de:5e:10:cc:e3:8d:19:ef:8b:61:05:
16:59:62:43:7b:89:d6:b3:b4:96:d7:33:11:5f:58:95:03:f0:
1f:70:32:2f:a9:7d:0f:28:c7:c2:90:52:63:a2:0a:ed:50:5f:
76:14:92:7c:95:fa:78:e8:96:6c:df:56:a4:05:22:f1:ef:c9:
2e:39:42:b0:87:d5:e9:31:f4:69:83:80:27:fb:a7:71:6b:6d:
cb:f8:8f:f0:8f:ff:3d:46:19:ee:36:a6:f0:b0:13:ad:b2:cc:
c8:27:5b:54:62:e0:8f:0a:b8:8f:37:fd:ef:52:96:0a:6c:cb:
6f:85:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:02 2026 by rpki-client