Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: QO3S2NrJReDhSy/nK3SbLvW5bQvLsvCmrwCtBNWoMSI=
Subject key identifier: 55:5E:91:0C:54:DC:B6:11:E0:9F:28:E8:CD:88:20:22:01:42:3C:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 137A4FD37097334103AA4C3653E4497D07FAA8F2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39312e302f32342d3234203d3e2032393134.roa
Signing time: Tue 30 Jun 2026 07:25:54 +0000
ROA not before: Tue 30 Jun 2026 07:20:54 +0000
ROA not after: Tue 29 Jun 2027 07:25:54 +0000
asID: 2914
IP address blocks: 145.79.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7a:4f:d3:70:97:33:41:03:aa:4c:36:53:e4:49:7d:07:fa:a8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 07:20:54 2026 GMT
Not After : Jun 29 07:25:54 2027 GMT
Subject: CN=555E910C54DCB611E09F28E8CD88202201423CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:aa:dd:06:4c:02:11:56:c8:ea:13:e3:a7:
ca:08:bd:ce:25:d4:9e:90:7e:0d:ba:e6:c6:8e:bc:
e2:65:f8:e1:31:5c:75:06:4d:b4:21:9e:e9:d9:5d:
0f:b4:e6:1b:94:e8:91:5b:c9:2e:c2:ca:40:39:a9:
96:55:7c:0b:1c:23:ad:eb:a0:34:20:76:4c:45:fe:
10:0a:9c:a7:1a:a7:79:cb:73:07:22:89:93:76:ae:
08:be:4d:9f:c6:52:8f:1f:a1:08:00:89:b9:f9:4e:
44:69:6c:76:06:82:08:5b:c7:29:d5:af:9e:1f:52:
6b:65:17:2b:cf:00:58:c3:38:0a:d0:c2:d7:41:15:
0b:f4:05:bd:97:62:ed:5d:f8:15:1a:28:d5:86:ed:
af:02:66:2f:61:2b:83:94:6f:43:ba:a6:37:cd:90:
9a:c2:ec:65:39:8d:d3:14:28:8a:2f:89:21:a4:5c:
e8:03:70:e7:06:0b:2c:c6:19:54:f4:2a:ba:2d:8c:
2c:ff:cd:58:f5:0e:0c:41:d3:d1:5f:d1:e6:01:97:
5a:6f:fb:53:2b:29:67:cb:fa:a1:a3:c3:18:fb:d3:
59:3f:63:c8:e8:8c:d9:46:f0:92:b7:94:52:08:a0:
e3:4c:9a:7e:41:7b:88:13:f2:43:19:c2:f6:f6:d9:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5E:91:0C:54:DC:B6:11:E0:9F:28:E8:CD:88:20:22:01:42:3C:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d8:f0:4b:28:22:f5:7f:57:63:3e:76:a4:67:7d:80:f9:a7:
4b:f0:6c:2f:47:b6:76:e8:e4:90:ca:e8:f7:89:37:ad:3e:f9:
a7:c4:b7:d0:83:8f:db:5b:b7:3b:00:5a:38:8d:ed:53:fb:fe:
c1:45:e2:9c:04:94:fd:25:13:fa:f5:43:6f:bf:65:d9:ba:f5:
d8:77:1a:a6:7e:76:c1:65:cd:97:1b:71:9d:f3:45:50:1f:2d:
9f:ca:af:69:5c:e9:26:89:5e:9f:fa:1c:61:f0:f8:66:f3:53:
27:ab:8c:5c:1a:f8:50:a4:20:5c:86:b3:72:2e:6a:5b:36:40:
e7:ac:68:e4:85:f2:e5:02:b0:67:50:68:0c:14:ec:55:1a:0c:
5d:58:fd:9e:a5:39:9a:19:56:b9:6a:39:a7:93:2e:f8:e1:da:
35:44:b8:c8:d7:05:51:80:c3:3a:f7:4f:ca:eb:80:62:67:f7:
1c:1a:49:4b:21:ec:e9:5c:ea:69:58:ef:57:ed:5f:e2:5c:ee:
42:29:f8:41:59:b1:bd:5b:72:2f:81:96:07:05:f8:a3:2c:d5:
c5:1f:62:bd:0a:9f:30:04:8f:8e:14:61:13:5a:10:84:b0:90:
dd:df:6c:9a:06:63:7d:84:41:2b:83:04:4c:3f:22:47:e7:9b:
90:b4:da:46
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUE3pP03CXM0EDqkw2U+RJfQf6qPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MzAwNzIwNTRaFw0yNzA2MjkwNzI1NTRaMDMxMTAvBgNV
BAMTKDU1NUU5MTBDNTREQ0I2MTFFMDlGMjhFOENEODgyMDIyMDE0MjNDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9qrdBkwCEVbI6hPjp8oIvc4l
1J6Qfg265saOvOJl+OExXHUGTbQhnunZXQ+05huU6JFbyS7CykA5qZZVfAscI63r
oDQgdkxF/hAKnKcap3nLcwciiZN2rgi+TZ/GUo8foQgAibn5TkRpbHYGgghbxynV
r54fUmtlFyvPAFjDOArQwtdBFQv0Bb2XYu1d+BUaKNWG7a8CZi9hK4OUb0O6pjfN
kJrC7GU5jdMUKIoviSGkXOgDcOcGCyzGGVT0KrotjCz/zVj1DgxB09Ff0eYBl1pv
+1MrKWfL+qGjwxj701k/Y8jojNlG8JK3lFIIoONMmn5Be4gT8kMZwvb22VVVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUVV6RDFTcthHgnyjozYggIgFCPPswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzOTMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT1sw
DQYJKoZIhvcNAQELBQADggEBACrY8EsoIvV/V2M+dqRnfYD5p0vwbC9Htnbo5JDK
6PeJN60++afEt9CDj9tbtzsAWjiN7VP7/sFF4pwElP0lE/r1Q2+/Zdm69dh3GqZ+
dsFlzZcbcZ3zRVAfLZ/Kr2lc6SaJXp/6HGHw+GbzUyerjFwa+FCkIFyGs3Iuals2
QOesaOSF8uUCsGdQaAwU7FUaDF1Y/Z6lOZoZVrlqOaeTLvjh2jVEuMjXBVGAwzr3
T8rrgGJn9xwaSUsh7Olc6mlY71ftX+Jc7kIp+EFZsb1bci+BlgcF+KMs1cUfYr0K
nzAEj44UYRNaEISwkN3fbJoGY32EQSuDBEw/Ikfnm5C02kY=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:14 2026 by rpki-client