Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: zo6nj1ExsNckXeHCJkeIxwpPa7QQNQQwtG9Hz4lpczs=
Subject key identifier: FD:B6:18:50:83:59:36:AF:24:9D:82:0B:59:09:DA:0E:FD:50:5C:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6586690DB435238F51FB67A0EE19D5471C89EE87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e2032393134.roa
Signing time: Tue 30 Jun 2026 07:25:52 +0000
ROA not before: Tue 30 Jun 2026 07:20:52 +0000
ROA not after: Tue 29 Jun 2027 07:25:52 +0000
asID: 2914
IP address blocks: 145.79.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:86:69:0d:b4:35:23:8f:51:fb:67:a0:ee:19:d5:47:1c:89:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 07:20:52 2026 GMT
Not After : Jun 29 07:25:52 2027 GMT
Subject: CN=FDB61850835936AF249D820B5909DA0EFD505C00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:45:d9:fe:3f:7a:ae:95:4a:dd:8d:d8:41:
57:57:69:c0:83:b4:b5:6d:14:84:4f:f5:f5:ab:d3:
92:86:1f:78:0d:4d:f2:a5:54:89:fb:f3:d9:fd:a7:
1a:e7:65:ce:38:98:b1:91:75:13:1a:b4:89:7b:2b:
12:85:59:ad:29:0a:17:3f:b7:30:3c:28:92:b6:71:
bf:21:ce:da:59:5d:7d:fa:e4:69:70:fe:be:a4:2e:
ea:a7:fc:f5:2b:62:62:4d:70:ec:35:9d:83:e4:71:
c1:52:4b:94:45:6d:83:10:08:bb:ac:9a:9d:62:c0:
10:8a:7e:ca:2d:af:6f:11:f3:6d:4f:5d:f9:db:e9:
98:20:d1:7e:19:d4:bf:38:8e:57:8e:24:3d:7f:bd:
23:6f:88:a0:62:6a:b5:2f:03:0d:7b:40:61:19:30:
c3:ed:9f:2d:d0:41:39:b4:94:a1:50:63:4d:ba:a3:
dd:c9:5e:1d:7f:ac:c7:9d:10:6e:a4:a2:60:73:84:
56:1c:b7:d7:98:68:2c:4b:a2:ea:b2:94:ae:6b:64:
1b:5f:31:31:11:a4:01:f7:8d:2d:f0:95:f1:11:e7:
c3:7d:01:db:81:6b:67:24:cb:ee:18:9d:5f:df:a6:
f9:9b:1d:a7:17:ab:46:ca:2d:3b:1b:fe:2c:4a:ab:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:18:50:83:59:36:AF:24:9D:82:0B:59:09:DA:0E:FD:50:5C:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.86.0/24
Signature Algorithm: sha256WithRSAEncryption
29:19:3f:61:49:87:f0:d9:4f:0a:85:6c:1c:79:ed:93:d2:27:
eb:03:c7:40:93:39:8c:22:f5:87:59:87:bd:8e:dc:17:e9:56:
86:dd:cf:6d:99:55:d7:13:f9:4b:aa:ef:18:8d:0f:4b:db:32:
42:a7:f6:1c:c2:87:ca:cc:f8:c9:e4:59:bd:d1:88:4e:61:3d:
7d:d8:d3:f5:51:a5:27:67:95:c8:6e:18:c4:7b:8d:96:ec:66:
26:90:eb:8e:db:fb:26:2f:99:e6:e2:c0:d4:eb:38:23:0b:37:
12:58:27:51:df:e7:10:62:de:af:20:93:73:1c:2d:6a:55:9f:
2c:2c:b4:b0:7a:c3:eb:70:d3:66:70:4c:2d:62:52:95:ef:7b:
3b:c1:cb:4e:97:cf:16:41:2c:80:38:e0:d1:ef:0d:c7:53:1a:
45:ab:ac:5b:79:ae:b9:c9:cd:a3:c1:27:68:d6:be:3c:b6:3d:
1b:4d:00:ad:a2:2e:b3:6d:84:4b:39:67:41:eb:33:71:8a:cd:
95:de:b9:ed:1e:6c:c3:6b:85:d1:0c:eb:b9:17:5c:76:d1:e3:
b9:1f:98:2c:ca:25:da:5f:56:35:69:f1:4c:04:21:4e:ed:03:
77:29:ad:1a:45:56:6e:da:4d:26:9f:7b:04:c2:51:0c:87:61:
1e:a3:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:09 2026 by rpki-client