Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38392e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: ECWU+GBwS3xnW6Ek3h8IZLasjTgi3TXl6c5pcxbbH5w=
Subject key identifier: F8:B0:74:EA:59:D5:D2:E0:69:29:9B:87:10:86:F8:6D:91:B2:F3:10
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 488EC7ED0D2B0EE30D3774D59039884D602A4FD6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38392e302f32342d3234203d3e2032393134.roa
Signing time: Tue 30 Jun 2026 07:25:53 +0000
ROA not before: Tue 30 Jun 2026 07:20:53 +0000
ROA not after: Tue 29 Jun 2027 07:25:53 +0000
asID: 2914
IP address blocks: 145.79.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:8e:c7:ed:0d:2b:0e:e3:0d:37:74:d5:90:39:88:4d:60:2a:4f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 07:20:53 2026 GMT
Not After : Jun 29 07:25:53 2027 GMT
Subject: CN=F8B074EA59D5D2E069299B871086F86D91B2F310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:e1:e1:2d:35:a8:c1:0a:0b:67:8a:6e:bd:
d6:1e:7d:4a:5d:1b:d7:b6:0f:ff:87:67:ef:bf:0e:
49:6c:08:88:5a:aa:51:97:68:04:52:92:af:5a:c5:
08:4c:5a:96:69:75:33:4a:2b:0b:04:d5:03:56:b3:
ef:01:c6:76:24:b9:a7:ec:cb:5c:51:83:84:a3:aa:
ba:f4:56:38:ae:05:67:5d:ff:61:7e:0a:2b:cf:35:
1d:cd:83:2c:b8:4a:c8:8c:88:e7:81:11:64:9b:ca:
c9:54:00:00:ea:d5:b3:a3:2a:f5:6c:ae:a7:5f:cd:
13:be:ae:70:1b:1c:ff:30:92:8f:a1:87:27:df:c4:
71:28:ab:81:10:9d:3c:81:d6:ea:3b:32:90:54:3e:
75:7d:42:c3:dc:0d:de:a4:6c:37:97:6b:16:73:b4:
ae:15:6e:a8:cd:65:ef:7e:a4:cd:55:ad:b5:fe:e3:
ab:28:f7:23:54:be:ae:f7:f8:b2:07:2e:d7:9e:14:
b2:4a:f5:05:69:9f:9e:6e:65:52:8d:b2:51:61:27:
3b:ad:8c:fb:60:29:52:5c:c4:77:fa:9d:44:c2:23:
29:a0:34:fd:86:03:b2:ae:ff:e3:94:c8:5b:ec:01:
c1:2d:61:d5:58:42:2c:27:0d:50:ea:41:d8:0a:3d:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:74:EA:59:D5:D2:E0:69:29:9B:87:10:86:F8:6D:91:B2:F3:10
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.89.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9e:01:da:d7:9b:9c:ab:65:8f:94:84:d7:17:39:e1:09:ca:
d1:bd:0d:01:c9:c1:f8:03:33:24:15:fa:2f:3d:e6:db:5c:91:
f5:5d:6f:f9:91:7a:a0:bb:45:81:86:01:a4:d4:57:7e:f7:ef:
88:ff:60:16:4e:af:3f:04:ab:a6:70:42:fd:d0:ef:4a:bb:ca:
13:0c:31:72:a5:54:3d:3e:f4:45:25:8a:ec:00:4c:67:75:8a:
a9:81:8e:2f:f6:f1:d8:38:8e:fd:7d:2f:00:19:15:4d:7e:c0:
88:f5:5f:23:b5:46:9b:29:c9:fd:ff:7d:19:18:5f:8a:fd:50:
3d:13:b2:f1:91:ef:d0:90:4d:ea:b0:2f:4d:4d:73:65:f7:f9:
7b:66:9e:a1:0f:c3:eb:bd:38:8c:e5:1e:75:55:fe:11:77:83:
92:ad:d6:69:4a:b1:92:f5:56:1f:db:15:0b:b4:27:21:4c:69:
08:8b:27:fb:4d:b7:bb:e4:9e:ea:ba:9f:5b:b5:82:01:e9:8a:
5b:cd:1e:85:e9:55:da:d5:e3:b1:a9:bd:f9:a5:46:c1:87:46:
11:dc:55:9b:ad:9b:ea:e3:a4:2c:e7:87:85:86:9b:04:e4:26:
8d:13:32:45:99:a0:d0:48:6c:f5:7c:1a:c7:06:9c:1c:76:ae:
fb:49:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:26 2026 by rpki-client