Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38392e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e38392e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: 86sR546tGL1IbIYiIZ3LttQ1pMGGoJPTz7J6KXmut/g=
Subject key identifier: 38:DF:34:7A:6B:89:8F:6A:68:EE:02:62:7F:55:D3:79:DE:30:D7:BC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 699141DC5D1B290D4F2C8B618FDCF31BAD2E0D64
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38392e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 06 Aug 2026 12:27:45 +0000
ROA not before: Thu 06 Aug 2026 12:22:45 +0000
ROA not after: Thu 05 Aug 2027 12:27:45 +0000
asID: 214143
IP address blocks: 145.79.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:91:41:dc:5d:1b:29:0d:4f:2c:8b:61:8f:dc:f3:1b:ad:2e:0d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 6 12:22:45 2026 GMT
Not After : Aug 5 12:27:45 2027 GMT
Subject: CN=38DF347A6B898F6A68EE02627F55D379DE30D7BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:10:a4:56:dd:57:48:1c:04:ef:82:68:9e:
4d:06:05:4e:81:82:29:d2:d4:84:82:0c:8e:4c:ac:
80:37:1a:54:18:fb:34:50:21:20:4c:69:03:4a:73:
ea:85:15:73:f1:7b:e9:c3:8d:11:2a:03:7c:c4:f3:
e6:af:3e:d4:ba:04:3b:c3:1b:3f:d5:af:be:df:e5:
1c:51:46:2d:62:fc:8e:9b:d3:50:29:0e:06:b5:9c:
41:42:d2:1b:3d:cb:b3:6f:f7:92:a4:b8:6f:3d:ea:
10:82:e0:02:30:18:18:f0:f4:37:5f:b3:ad:26:27:
a6:86:05:ac:8c:56:20:f4:17:3a:0d:a7:a3:44:0e:
4f:33:74:e1:aa:47:ec:09:5e:95:23:39:2b:8b:53:
ce:62:bf:d1:59:2d:1c:51:fa:06:24:e5:44:f2:7f:
b0:76:c2:4e:cf:45:5a:59:d3:ad:55:da:fd:8b:de:
68:95:a7:cb:e9:81:f2:43:39:bd:85:9e:fe:df:f5:
fd:84:ae:88:bd:7e:d5:18:93:ff:fd:11:b7:1e:b9:
0e:9c:ad:42:7b:98:3b:15:a7:93:75:8c:9b:f8:06:
c0:dc:a5:61:81:83:b1:98:c3:34:29:44:e6:8c:9c:
c2:5e:e0:0e:26:23:95:9d:c4:2f:6f:cb:b9:d4:f3:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:34:7A:6B:89:8F:6A:68:EE:02:62:7F:55:D3:79:DE:30:D7:BC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38392e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.89.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bc:b3:05:da:e1:9f:58:6d:cf:14:ab:71:bb:27:50:0b:6c:
65:11:a1:3c:a9:97:10:bb:64:ba:74:6f:24:55:63:87:d1:06:
01:e9:3a:bd:8b:34:57:24:c0:71:e9:56:bb:a2:c6:21:05:73:
0a:2c:a1:ad:93:43:53:96:98:04:bd:3e:18:43:87:45:bb:4d:
69:0c:44:67:86:08:af:28:bc:84:90:ac:47:a5:84:ec:8d:bf:
45:66:de:ab:9e:0a:4b:ed:1d:06:38:dc:6a:6b:28:df:83:10:
47:23:56:5c:f4:7a:8c:74:66:ad:55:e2:0f:3f:29:88:ed:38:
89:52:b4:52:83:b8:6f:b2:db:e7:c2:df:e9:4b:f6:c4:f1:97:
e1:7d:1e:f3:c3:f5:41:0c:92:78:0f:5c:dc:9a:63:b8:a8:b4:
15:6c:a3:31:71:83:72:e7:b5:60:19:9b:ff:92:e6:2b:90:af:
6d:6b:5d:76:a6:f2:0c:b5:3e:76:c6:c7:7b:2f:78:77:d1:3e:
17:aa:82:15:f0:ba:9f:d3:dc:7b:a3:ec:c6:29:44:b2:c4:af:
97:1d:e7:1c:39:0b:8d:5b:87:49:13:5e:a9:87:74:04:f7:69:
89:00:5e:6a:28:c9:69:09:3e:3c:df:eb:49:64:5c:ed:ae:b8:
72:61:ec:da
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaZFB3F0bKQ1PLIthj9zzG60uDWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MDYxMjIyNDVaFw0yNzA4MDUxMjI3NDVaMDMxMTAvBgNV
BAMTKDM4REYzNDdBNkI4OThGNkE2OEVFMDI2MjdGNTVEMzc5REUzMEQ3QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22xCkVt1XSBwE74Jonk0GBU6B
ginS1ISCDI5MrIA3GlQY+zRQISBMaQNKc+qFFXPxe+nDjREqA3zE8+avPtS6BDvD
Gz/Vr77f5RxRRi1i/I6b01ApDga1nEFC0hs9y7Nv95KkuG896hCC4AIwGBjw9Ddf
s60mJ6aGBayMViD0FzoNp6NEDk8zdOGqR+wJXpUjOSuLU85iv9FZLRxR+gYk5UTy
f7B2wk7PRVpZ061V2v2L3miVp8vpgfJDOb2Fnv7f9f2Eroi9ftUYk//9EbceuQ6c
rUJ7mDsVp5N1jJv4BsDcpWGBg7GYwzQpROaMnMJe4A4mI5WdxC9vy7nU85ejAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUON80emuJj2po7gJif1XTed4w17wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzODM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzEzNDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU9ZMA0GCSqGSIb3DQEBCwUAA4IBAQBYvLMF2uGfWG3PFKtxuydQC2xlEaE8qZcQ
u2S6dG8kVWOH0QYB6Tq9izRXJMBx6Va7osYhBXMKLKGtk0NTlpgEvT4YQ4dFu01p
DERnhgivKLyEkKxHpYTsjb9FZt6rngpL7R0GONxqayjfgxBHI1Zc9HqMdGatVeIP
PymI7TiJUrRSg7hvstvnwt/pS/bE8ZfhfR7zw/VBDJJ4D1zcmmO4qLQVbKMxcYNy
57VgGZv/kuYrkK9ta112pvIMtT52xsd7L3h30T4XqoIV8Lqf09x7o+zGKUSyxK+X
HeccOQuNW4dJE16ph3QE92mJAF5qKMlpCT483+tJZFztrrhyYeza
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:32:06 2026 by rpki-client