Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e20333939393535.roa
File: 3134352e31312e3130342e302f32312d3234203d3e20333939393535.roa (raw, json)
Hash identifier: ZG2aZoroVxDDuTZPBhKHutYTeoDnYaSH5CVAfGD83bg=
Subject key identifier: D6:0D:7C:26:50:64:3B:6C:43:BA:29:2F:83:B8:58:19:F0:71:93:E0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3974B94AFD36C1C9CF8FCB44454C487C35B3B2E5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:32 +0000
ROA not before: Thu 30 Apr 2026 13:41:32 +0000
ROA not after: Thu 29 Apr 2027 13:46:32 +0000
asID: 399955
IP address blocks: 145.11.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:74:b9:4a:fd:36:c1:c9:cf:8f:cb:44:45:4c:48:7c:35:b3:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:32 2026 GMT
Not After : Apr 29 13:46:32 2027 GMT
Subject: CN=D60D7C2650643B6C43BA292F83B85819F07193E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:07:c2:67:35:93:92:3e:9c:1d:33:69:76:
0b:18:ae:65:9b:51:1f:e5:2e:f9:d5:2b:0b:0c:64:
17:c4:08:10:a1:f4:be:d4:e6:0b:f2:15:90:13:12:
84:69:19:6b:b4:e9:ab:c7:be:f9:05:22:09:f8:12:
78:8a:3c:9f:a7:0b:fe:65:70:b0:5a:b6:8b:f5:72:
19:b7:7e:0f:b7:9a:b3:d7:3d:b3:bf:d8:69:dd:b9:
c6:ca:46:a3:63:23:6e:ba:59:c1:4d:48:e6:16:f3:
15:40:8c:71:93:b7:75:e9:62:ec:98:4c:96:84:7a:
65:5d:9c:57:5e:a7:31:73:ff:cf:e7:f8:9f:cc:ba:
1b:cc:08:4e:b3:c1:f3:dc:08:85:fb:14:ae:ee:22:
15:ce:7c:46:c2:23:51:e5:2a:39:18:41:e1:26:8e:
89:89:04:9a:67:8d:5d:0c:d7:30:3e:b2:c5:f7:b5:
d5:f2:f2:0d:f8:64:be:9e:55:8d:f6:3f:e8:9a:30:
95:da:ea:6d:20:3c:ab:e4:42:40:88:b6:83:a9:21:
dc:6e:16:79:ea:de:c5:3a:4a:77:a0:76:88:b2:33:
5f:3f:c7:3f:ea:5c:e3:71:56:db:26:af:ad:f6:12:
c8:85:05:2f:aa:a2:ab:3b:ce:b4:91:45:1a:ad:50:
0f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:7C:26:50:64:3B:6C:43:BA:29:2F:83:B8:58:19:F0:71:93:E0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.104.0/21
Signature Algorithm: sha256WithRSAEncryption
71:a1:9f:0c:85:6c:c5:37:d0:7d:5a:c1:f6:a9:09:8c:86:ae:
21:b6:18:77:61:f9:ee:0d:fe:c6:12:b4:a8:0a:09:e6:76:28:
74:4a:89:74:03:e9:7f:b3:75:e0:39:64:c9:42:b9:ed:45:25:
2a:f9:84:d4:24:60:8d:ba:5e:ef:20:56:ec:2a:40:c3:43:4c:
7f:8a:1a:ec:93:10:83:30:7b:c8:91:34:a8:6f:cb:b7:f4:8f:
9a:74:c0:0d:29:5b:d2:c9:ac:ed:f7:0b:9c:70:be:e1:02:15:
f4:1a:f5:da:6f:c4:f3:9a:d9:b9:03:47:a8:40:30:36:6c:0c:
d3:cc:50:69:ab:21:c4:a1:83:7c:bb:1f:43:1b:7e:51:90:c6:
2c:73:6f:5b:84:77:56:26:00:57:5e:26:28:bf:62:1c:27:79:
da:07:ea:7d:42:7c:53:f4:de:21:be:66:4e:63:06:b0:a0:b2:
d9:68:9b:07:26:ed:84:86:2d:23:b3:3e:2e:53:ec:8c:cd:ca:
9d:33:68:6a:b5:7a:79:e5:15:be:1d:94:e3:70:f7:f1:9b:ed:
d3:4d:aa:2c:fe:41:44:e6:fd:c8:9a:ac:f6:36:3b:48:ff:6b:
70:5d:bb:d9:c5:6f:d5:51:d6:43:46:49:df:0a:cd:f0:af:01:
b3:1e:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:26 2026 by rpki-client