Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e2036303739.roa
File: 3134352e31312e3131322e302f32312d3234203d3e2036303739.roa (raw, json)
Hash identifier: kEYmgHlBD56I1pFomOaK2rpH0K3uIQcOKsEsKqqChX4=
Subject key identifier: E8:1F:12:AF:36:2A:97:87:E8:57:35:04:38:A9:B7:55:5B:E0:FF:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3439AC846F24D9F243BD210340C7CE187953293D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e2036303739.roa
Signing time: Thu 30 Apr 2026 13:46:20 +0000
ROA not before: Thu 30 Apr 2026 13:41:20 +0000
ROA not after: Thu 29 Apr 2027 13:46:20 +0000
asID: 6079
IP address blocks: 145.11.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:39:ac:84:6f:24:d9:f2:43:bd:21:03:40:c7:ce:18:79:53:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:20 2026 GMT
Not After : Apr 29 13:46:20 2027 GMT
Subject: CN=E81F12AF362A9787E857350438A9B7555BE0FFDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fc:0c:91:92:1b:8d:f7:61:f9:7e:db:66:44:
07:67:ae:95:ba:9c:b5:d3:be:c3:fc:6d:2c:cc:00:
c6:f8:94:5d:40:f3:d7:d1:7a:40:76:67:b5:c9:a8:
a5:3c:64:c0:9c:f5:83:1a:04:d1:27:f1:76:15:c8:
89:1f:15:7c:9b:10:65:5a:fa:79:26:f4:08:0e:b4:
52:e5:a6:d4:32:b2:75:8b:08:06:3f:08:30:6d:ee:
c8:c6:36:19:df:90:20:62:88:e5:bd:ee:4f:20:db:
1a:2c:a2:c0:6f:23:23:d9:74:d5:9f:6b:71:ee:d5:
e1:d0:97:7c:3c:cc:8f:9e:c7:fc:ab:b1:ef:df:82:
05:bf:0c:d9:cd:27:36:17:f8:b2:52:67:94:5a:23:
9b:3c:38:fc:d6:b7:c6:8f:ec:5a:19:69:fb:61:38:
a4:a2:52:98:57:21:98:d9:7b:80:86:e0:17:25:85:
33:77:6d:ad:83:9b:e7:89:2d:c1:ec:67:a1:cd:a0:
47:b2:a4:c9:b4:78:3f:81:e1:a4:76:24:2a:18:4b:
7e:68:5f:50:74:58:65:6a:f3:49:09:5b:d4:5e:49:
d7:5c:9a:52:92:27:94:ea:ae:36:be:6c:6b:3c:10:
d2:eb:22:08:74:b1:96:27:cc:52:68:4c:b7:29:e5:
57:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:12:AF:36:2A:97:87:E8:57:35:04:38:A9:B7:55:5B:E0:FF:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.112.0/21
Signature Algorithm: sha256WithRSAEncryption
61:35:1f:64:e5:18:fd:f1:a9:7a:f4:6f:49:ca:2f:c4:98:38:
17:0b:cf:a4:f7:a8:5d:8b:46:60:91:1e:5b:b4:52:6e:bb:f6:
a8:71:81:d9:e5:24:e7:da:a7:25:a3:a0:61:c1:15:c0:b8:c1:
ba:42:bf:80:0c:57:b5:4f:62:85:a8:c4:a2:6f:f1:28:8f:95:
96:0d:5f:65:2e:d3:36:52:52:5b:d3:03:66:09:af:71:7c:72:
92:e9:5d:b8:fd:a8:86:b9:24:e5:68:5c:53:db:10:6c:f5:35:
f2:54:92:bf:72:8c:87:f4:f5:14:e6:4d:9a:eb:e4:83:be:98:
4e:0d:e0:39:af:bb:b9:18:0e:2e:32:32:39:a1:c2:02:0d:e6:
ff:02:29:44:31:9f:ce:5d:b4:6e:45:5d:f4:4a:13:a6:13:22:
a9:74:25:5a:37:87:98:d3:99:42:27:db:df:d2:47:26:2b:54:
1a:92:e8:d7:2d:6c:2b:9d:86:de:73:ad:63:71:13:af:2c:f9:
af:69:18:a3:d1:44:f4:6a:80:d8:75:12:3b:d2:6a:0f:b2:bf:
fb:a7:d1:c0:24:6f:2d:91:a2:b0:40:55:f8:28:d7:5a:46:1c:
60:f0:56:0e:bc:47:44:dc:a3:84:20:97:14:38:52:c9:48:97:
6b:4f:3c:51
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNDmshG8k2fJDvSEDQMfOGHlTKT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MzAxMzQxMjBaFw0yNzA0MjkxMzQ2MjBaMDMxMTAvBgNV
BAMTKEU4MUYxMkFGMzYyQTk3ODdFODU3MzUwNDM4QTlCNzU1NUJFMEZGREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/AyRkhuN92H5fttmRAdnrpW6
nLXTvsP8bSzMAMb4lF1A89fRekB2Z7XJqKU8ZMCc9YMaBNEn8XYVyIkfFXybEGVa
+nkm9AgOtFLlptQysnWLCAY/CDBt7sjGNhnfkCBiiOW97k8g2xososBvIyPZdNWf
a3Hu1eHQl3w8zI+ex/yrse/fggW/DNnNJzYX+LJSZ5RaI5s8OPzWt8aP7FoZafth
OKSiUphXIZjZe4CG4BclhTN3ba2Dm+eJLcHsZ6HNoEeypMm0eD+B4aR2JCoYS35o
X1B0WGVq80kJW9ReSddcmlKSJ5Tqrja+bGs8ENLrIgh0sZYnzFJoTLcp5Vf5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6B8SrzYql4foVzUEOKm3VVvg/9swHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzMTMxMmUzMTMx
MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5EL
cDANBgkqhkiG9w0BAQsFAAOCAQEAYTUfZOUY/fGpevRvScovxJg4FwvPpPeoXYtG
YJEeW7RSbrv2qHGB2eUk59qnJaOgYcEVwLjBukK/gAxXtU9ihajEom/xKI+Vlg1f
ZS7TNlJSW9MDZgmvcXxykulduP2ohrkk5WhcU9sQbPU18lSSv3KMh/T1FOZNmuvk
g76YTg3gOa+7uRgOLjIyOaHCAg3m/wIpRDGfzl20bkVd9EoTphMiqXQlWjeHmNOZ
Qifb39JHJitUGpLo1y1sK52G3nOtY3ETryz5r2kYo9FE9GqA2HUSO9JqD7K/+6fR
wCRvLZGisEBV+CjXWkYcYPBWDrxHRNyjhCCXFDhSyUiXa088UQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:58 2026 by rpki-client