Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2036303739.roa
File: 3134352e31312e3130342e302f32312d3234203d3e2036303739.roa (raw, json)
Hash identifier: nG49l2khSTI0d3JtxAhfz3gqjprlJqJ+Zu0cJ8uHPvw=
Subject key identifier: 20:BA:F3:99:2D:F4:9D:94:A1:4B:E5:AB:43:17:94:8E:C0:F1:F7:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51CCA36D44359BFC981BD08DB3FB97BE340333C5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2036303739.roa
Signing time: Thu 30 Apr 2026 13:46:20 +0000
ROA not before: Thu 30 Apr 2026 13:41:20 +0000
ROA not after: Thu 29 Apr 2027 13:46:20 +0000
asID: 6079
IP address blocks: 145.11.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:cc:a3:6d:44:35:9b:fc:98:1b:d0:8d:b3:fb:97:be:34:03:33:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:20 2026 GMT
Not After : Apr 29 13:46:20 2027 GMT
Subject: CN=20BAF3992DF49D94A14BE5AB4317948EC0F1F75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:fc:4b:22:dc:ad:12:98:5e:d7:f1:60:a1:
68:dd:17:31:a9:78:38:e3:8b:48:80:0b:26:e5:69:
3c:99:cf:17:71:30:d6:1e:ed:ad:6a:97:11:64:8d:
66:71:76:45:d2:81:41:4f:28:6d:4f:77:48:b6:3b:
43:fa:9f:0c:39:59:70:f6:86:52:14:be:9e:9d:53:
1a:a5:34:83:fc:3e:b6:ab:b8:b4:22:f0:ff:dd:ef:
d1:f1:a9:3d:ac:7b:4f:c6:b0:d8:20:d0:e2:01:88:
c1:1b:97:df:91:18:aa:29:82:bf:cf:f8:9f:5e:5c:
1c:62:93:c3:21:84:6b:19:eb:39:9b:2f:84:7e:b7:
37:fd:ca:9a:7e:77:c1:2c:77:c8:dd:07:14:63:12:
32:31:86:2a:21:4e:08:db:95:9a:b7:4e:65:d9:12:
b5:37:f0:bf:5d:76:11:d0:55:bf:68:98:fe:57:52:
c5:e8:a7:5b:37:7f:47:9e:6b:28:80:e8:ec:23:24:
6e:c8:fa:ad:1f:86:4e:43:0a:0d:a5:94:06:22:37:
87:30:9b:12:18:f5:8a:6d:69:6c:c9:03:10:df:62:
54:5b:5f:38:b6:f6:86:01:15:e0:80:f3:68:e4:69:
19:cb:2b:10:c7:b8:61:a2:11:69:5b:b9:14:ca:73:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:F3:99:2D:F4:9D:94:A1:4B:E5:AB:43:17:94:8E:C0:F1:F7:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.104.0/21
Signature Algorithm: sha256WithRSAEncryption
97:00:e2:00:9c:85:67:85:ea:a2:fd:be:a5:c7:2a:9a:c8:e4:
79:cc:78:e5:42:db:65:06:b7:55:e0:12:db:d9:18:1e:e8:db:
53:a3:de:1a:15:49:ff:46:60:62:a5:c3:e1:32:df:8f:ce:24:
26:4f:62:48:6c:6f:7e:70:f8:19:fc:b0:80:f7:5d:36:0d:97:
f1:01:d1:b0:de:46:78:af:e9:cf:cf:6f:04:12:5a:12:a7:03:
54:38:a9:39:e0:ed:05:32:30:02:d4:2d:cb:6c:44:75:93:d4:
14:b9:1a:5c:33:bf:51:ae:4e:e9:aa:9d:f8:46:f2:61:a4:a5:
06:2d:64:49:be:82:46:77:86:bc:d1:12:e3:f3:59:23:cd:e1:
d2:dc:1a:e6:d1:2f:a9:82:01:f9:66:60:24:34:a8:15:f5:0e:
0b:dd:02:e3:f0:05:3b:1b:ad:33:50:68:04:54:18:2a:72:7c:
24:a0:4b:6d:8d:32:4d:41:f9:99:4c:03:6b:3a:54:5c:7d:8d:
5a:94:19:53:b5:21:d6:52:61:aa:f4:94:5d:7a:a6:9d:ed:49:
06:da:45:0b:86:59:24:0f:90:78:29:70:27:81:6d:3d:29:be:
1c:71:9b:66:88:5b:69:d0:95:cb:98:9f:86:a4:42:8e:43:18:
8a:9b:79:dc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUcyjbUQ1m/yYG9CNs/uXvjQDM8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MzAxMzQxMjBaFw0yNzA0MjkxMzQ2MjBaMDMxMTAvBgNV
BAMTKDIwQkFGMzk5MkRGNDlEOTRBMTRCRTVBQjQzMTc5NDhFQzBGMUY3NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1u/xLItytEphe1/FgoWjdFzGp
eDjji0iACyblaTyZzxdxMNYe7a1qlxFkjWZxdkXSgUFPKG1Pd0i2O0P6nww5WXD2
hlIUvp6dUxqlNIP8PraruLQi8P/d79HxqT2se0/GsNgg0OIBiMEbl9+RGKopgr/P
+J9eXBxik8MhhGsZ6zmbL4R+tzf9ypp+d8Esd8jdBxRjEjIxhiohTgjblZq3TmXZ
ErU38L9ddhHQVb9omP5XUsXop1s3f0eeayiA6OwjJG7I+q0fhk5DCg2llAYiN4cw
mxIY9YptaWzJAxDfYlRbXzi29oYBFeCA82jkaRnLKxDHuGGiEWlbuRTKc8UhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUILrzmS30nZShS+WrQxeUjsDx91wwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzMTMxMmUzMTMw
MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5EL
aDANBgkqhkiG9w0BAQsFAAOCAQEAlwDiAJyFZ4Xqov2+pccqmsjkecx45ULbZQa3
VeAS29kYHujbU6PeGhVJ/0ZgYqXD4TLfj84kJk9iSGxvfnD4GfywgPddNg2X8QHR
sN5GeK/pz89vBBJaEqcDVDipOeDtBTIwAtQty2xEdZPUFLkaXDO/Ua5O6aqd+Eby
YaSlBi1kSb6CRneGvNES4/NZI83h0twa5tEvqYIB+WZgJDSoFfUOC90C4/AFOxut
M1BoBFQYKnJ8JKBLbY0yTUH5mUwDazpUXH2NWpQZU7Uh1lJhqvSUXXqmne1JBtpF
C4ZZJA+QeClwJ4FtPSm+HHGbZohbadCVy5ifhqRCjkMYipt53A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:53 2026 by rpki-client