Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: uCmxJ316vhJDQguenBmwiXDFbn7zLvJRfeDUQuA3bk0=
Subject key identifier: 40:89:C8:76:07:8F:00:3A:73:8D:78:6C:B9:53:23:6E:6A:FA:D8:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D49B34E26A607AAE66F8C4295A660E308F1695C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38372e302f32342d3234203d3e2032393134.roa
Signing time: Tue 30 Jun 2026 07:25:52 +0000
ROA not before: Tue 30 Jun 2026 07:20:52 +0000
ROA not after: Tue 29 Jun 2027 07:25:52 +0000
asID: 2914
IP address blocks: 145.79.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:49:b3:4e:26:a6:07:aa:e6:6f:8c:42:95:a6:60:e3:08:f1:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 07:20:52 2026 GMT
Not After : Jun 29 07:25:52 2027 GMT
Subject: CN=4089C876078F003A738D786CB953236E6AFAD828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:78:93:5d:5c:76:af:b6:fd:dc:78:79:ed:
09:6c:58:0d:be:6f:ce:9b:13:61:5f:d0:d0:18:5e:
b1:9a:f0:5a:f2:13:89:f9:45:b0:ac:10:f5:bc:66:
ce:fd:fb:53:53:45:4f:7e:91:1a:3b:9e:4e:46:83:
51:eb:f8:e1:b3:ac:81:89:72:7c:e1:9b:9d:cb:c5:
fa:b3:7c:43:4a:83:29:be:85:70:7b:56:6a:18:ff:
43:ab:ee:76:a9:d3:74:e0:fc:36:59:cc:5e:75:de:
0c:76:5d:25:f8:11:2a:ee:c4:d0:62:ce:26:4b:97:
1e:3d:25:ec:2e:f8:3b:02:61:99:dc:dd:d0:09:91:
f8:ea:4a:13:f1:5c:9e:44:54:40:71:8f:8d:fa:54:
00:05:15:46:d9:6d:ec:40:fc:63:53:d1:19:0a:aa:
6b:fa:fd:4c:88:1a:cd:82:79:f7:30:c2:24:33:23:
6e:ab:f8:73:cb:cb:36:9b:77:88:47:28:b1:bf:88:
aa:4c:a3:7b:ac:2c:3b:a0:42:39:d8:5c:d6:f1:05:
e9:82:0a:61:3a:c7:e3:af:28:5c:13:0d:db:1d:45:
f1:bb:5a:a8:a1:ff:0a:c4:6c:48:6a:c7:7e:b0:7b:
82:d9:d8:93:53:9f:8f:fb:ed:14:10:e7:ee:31:50:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:89:C8:76:07:8F:00:3A:73:8D:78:6C:B9:53:23:6E:6A:FA:D8:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8d:27:9f:9c:75:1f:5e:45:f2:4f:b1:9d:8e:27:4c:8b:e0:
8f:a8:fd:90:d6:bb:b9:8b:84:e1:80:cb:b1:4a:62:fb:4e:3c:
3b:55:1b:1d:59:29:d7:7e:3f:7a:02:37:1f:04:ba:c0:c5:25:
49:1c:2e:74:03:87:f3:95:61:70:7f:1b:09:ac:33:e3:24:3a:
c1:67:a4:35:42:30:71:e2:95:c2:94:12:08:a4:a8:d2:07:30:
e3:8b:0b:7b:18:5a:14:38:34:f4:4b:be:b7:46:69:1d:f2:dc:
d5:2e:8e:f2:af:60:f8:00:9c:c5:c2:ce:8b:3f:35:75:c6:c7:
f2:d0:7e:d0:72:47:5b:db:d2:75:a6:95:7f:fd:d8:7e:d4:17:
cb:da:6a:3e:d0:7a:78:f9:a6:9c:57:da:b7:1d:a4:d4:c4:81:
31:14:a9:d1:64:7e:e8:10:a6:e8:c7:b5:64:f2:6e:b3:be:9a:
92:3e:ba:0f:fc:f9:96:f9:20:c9:86:3c:d5:bf:57:f6:7d:5c:
91:2a:a1:bf:74:c6:69:bd:74:7d:15:f7:52:ef:18:9b:9b:56:
77:92:f3:71:e7:76:9d:37:aa:70:b5:b5:1c:31:14:8f:97:63:
eb:7f:15:1b:4a:25:fd:6d:b9:d5:48:34:1d:ae:70:2d:c3:40:
24:d0:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:14 2026 by rpki-client