Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e36342e302f32312d3234203d3e20333939393535.roa
File: 3134352e31312e36342e302f32312d3234203d3e20333939393535.roa (raw, json)
Hash identifier: 4U2fIjEWi6ZTF+T/t1U0GztaVMy3ekby4A0FZJaWZ60=
Subject key identifier: 4B:DB:76:C7:D2:80:FC:FA:FF:62:E9:40:67:67:7C:56:8A:EC:CD:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1A4BC99B18A03FCE8E5E1178FCD9DBBF51013CE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e36342e302f32312d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:29 +0000
ROA not before: Thu 30 Apr 2026 13:41:29 +0000
ROA not after: Thu 29 Apr 2027 13:46:29 +0000
asID: 399955
IP address blocks: 145.11.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:4b:c9:9b:18:a0:3f:ce:8e:5e:11:78:fc:d9:db:bf:51:01:3c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:29 2026 GMT
Not After : Apr 29 13:46:29 2027 GMT
Subject: CN=4BDB76C7D280FCFAFF62E94067677C568AECCD00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:f6:8d:7c:d1:38:4f:6c:43:82:62:19:94:
cf:aa:28:87:28:75:06:d8:22:07:14:da:a2:1d:eb:
52:75:94:75:42:e1:f6:bd:fa:23:a9:82:b9:63:0c:
a2:42:06:41:6b:b5:3e:e8:34:bd:e0:a5:d6:0d:ec:
9d:f5:e5:8f:68:f6:8e:34:b2:c0:ca:5a:7f:54:0b:
a2:10:4b:b8:aa:29:e2:25:7f:01:43:6f:3f:d8:39:
c7:fb:67:42:d0:0f:c8:32:1a:92:c9:26:ea:03:b4:
1b:16:d6:e2:de:a8:3a:57:75:6f:61:28:2b:56:26:
7f:ef:a4:1e:c2:2a:9d:b2:91:07:6e:fd:97:2d:39:
89:99:d2:f8:3c:fa:72:0a:8a:94:21:9c:4b:0f:88:
11:87:6e:2e:84:99:2b:1d:05:1d:da:bd:21:bd:92:
ae:a2:f2:d4:20:fb:d1:4e:d7:8c:cd:6a:c0:4d:be:
d4:a7:72:83:5c:24:27:d0:4e:93:19:38:9a:19:61:
2d:6a:a3:61:3d:d7:69:01:c1:6a:ee:34:a0:d5:26:
49:d5:93:65:38:f9:c2:18:6f:3e:d9:b5:bb:8b:d9:
2d:c3:86:fe:54:58:c0:a8:2b:43:8b:52:1e:b3:c7:
f3:8f:d7:6e:3b:1e:9a:3b:ab:d8:53:29:e8:4b:2f:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:76:C7:D2:80:FC:FA:FF:62:E9:40:67:67:7C:56:8A:EC:CD:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e36342e302f32312d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:36:26:4d:8b:97:16:25:38:c9:7e:dd:75:84:80:a5:bd:9f:
80:05:81:b1:8d:d6:d9:6e:98:76:fd:a5:96:f1:cd:9f:08:ff:
a2:55:c9:d5:21:e1:40:2c:74:1c:b0:11:5a:b3:bc:ea:e8:0d:
13:1c:9c:93:99:0d:32:0b:dd:44:f9:00:2e:66:39:69:70:35:
52:29:62:0a:4d:e2:a1:2b:c1:50:a9:24:54:c5:72:59:f7:5f:
ad:dd:72:ce:ff:ed:68:4c:72:f8:d5:15:95:17:4f:35:9b:7e:
b0:08:00:0c:c1:25:de:a2:bd:24:cb:f8:f3:4f:62:38:bc:b7:
d3:6f:7d:85:7e:4a:2f:61:24:38:e8:58:84:99:94:31:1f:1a:
af:69:2d:fe:2f:a3:6a:58:da:53:87:7f:0e:2c:d9:7e:21:56:
84:00:8a:ad:b8:31:0c:a2:aa:47:8a:0b:89:f3:66:b6:4f:11:
ec:40:b5:ec:95:ab:67:fa:e0:3a:aa:7f:bf:64:db:56:96:33:
ca:eb:43:3a:bc:36:9a:a4:81:d0:c3:b0:94:ba:b8:23:a9:8f:
69:a3:24:d0:1f:5c:c4:fe:61:c2:3c:cd:be:ef:6d:c9:c5:29:
de:cc:f9:70:89:e4:c0:bc:d5:68:82:92:8c:cc:a4:0c:30:da:
cf:d5:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:37 2026 by rpki-client