Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38302e302f32312d3234203d3e20333939393535.roa
File: 3134352e31312e38302e302f32312d3234203d3e20333939393535.roa (raw, json)
Hash identifier: 8if8IPhQYwgPO6bKC8H3mBm4SDoBQi0x1R+2SzLh+kI=
Subject key identifier: 28:C7:34:FF:5C:4E:B4:EB:79:55:2B:75:B3:AD:AD:83:8A:62:04:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52DFEEFB4A5AC77DF96824DE14D449364F3E6690
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38302e302f32312d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:30 +0000
ROA not before: Thu 30 Apr 2026 13:41:30 +0000
ROA not after: Thu 29 Apr 2027 13:46:30 +0000
asID: 399955
IP address blocks: 145.11.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:df:ee:fb:4a:5a:c7:7d:f9:68:24:de:14:d4:49:36:4f:3e:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:30 2026 GMT
Not After : Apr 29 13:46:30 2027 GMT
Subject: CN=28C734FF5C4EB4EB79552B75B3ADAD838A6204F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:21:68:af:bf:8a:05:eb:d5:a0:23:5c:75:
9f:3c:6d:ec:f4:3f:68:b8:ae:c3:99:47:d7:49:88:
04:9e:99:52:c7:f2:e8:39:7b:92:17:00:73:27:5e:
67:81:72:a2:cc:15:7f:bf:74:99:5b:3e:d2:f4:d4:
15:a3:21:6c:e3:16:01:10:52:bf:aa:e0:aa:af:36:
ac:86:08:09:9e:3a:c4:b5:11:ca:00:de:72:5a:f7:
16:97:18:f5:f7:6f:82:3e:5b:da:51:d7:9c:03:5d:
fe:3a:c5:08:f9:ae:c0:15:2c:83:17:da:09:c8:cf:
0c:a3:e4:ba:2c:36:17:fc:24:44:c8:88:21:33:2e:
a5:13:0d:d0:9e:53:66:cf:42:8f:a4:78:ee:ca:11:
8c:9d:fb:8e:18:d3:6b:2f:87:4b:2b:0a:5e:db:b4:
33:23:96:76:df:6f:15:b7:d8:96:42:91:f2:12:3b:
30:45:fa:0c:73:e8:98:ea:21:1e:aa:5b:0e:1f:9e:
ea:31:43:bf:ab:9c:ed:61:02:79:57:38:6d:b7:d8:
51:bd:0f:47:e1:f9:e1:18:6d:e8:f5:12:74:77:7c:
36:fc:07:fc:af:b9:34:5b:24:d3:5c:90:f5:69:3a:
f6:83:3f:67:20:fa:31:93:7e:83:5e:2c:66:99:9b:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:34:FF:5C:4E:B4:EB:79:55:2B:75:B3:AD:AD:83:8A:62:04:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38302e302f32312d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.80.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:a4:ac:a6:c1:ba:c6:2b:72:06:e3:44:77:34:83:cc:76:ec:
ca:fd:0a:84:53:13:c1:8b:4c:44:1b:16:82:50:e2:e1:5e:1b:
6a:62:4f:01:15:00:6f:30:e9:78:05:6a:84:44:a1:ce:54:9e:
23:1c:6f:ca:a0:df:b0:d5:8e:b0:38:22:e6:ea:f9:eb:16:bb:
78:c9:79:58:10:76:59:01:bc:05:45:c3:df:f6:96:44:c4:e2:
15:72:69:8c:80:76:bd:43:1d:a6:fb:f5:6f:62:23:04:f8:c7:
ba:b0:a0:d4:7c:4e:35:44:36:b6:e4:db:c3:ac:82:96:29:c8:
b8:1f:ca:be:89:b6:54:ac:21:30:1e:cf:ff:43:5c:7f:34:16:
e5:da:a3:52:d3:1e:8a:0e:f2:22:31:5e:43:f5:0f:86:b6:25:
79:84:b5:85:52:aa:3f:25:52:6f:6e:40:9e:85:69:9e:df:91:
1f:bc:4b:d6:59:37:a1:9f:b1:e6:60:85:9f:01:ba:bd:81:41:
31:06:6a:34:35:24:74:0f:70:a7:f4:e1:19:b7:29:39:5e:01:
94:fd:7f:2c:e0:c4:cd:f4:09:2c:12:c8:37:88:9b:12:e6:81:
80:97:10:2d:c2:08:7b:4c:9d:9c:c3:2e:89:99:03:27:07:eb:
c1:16:80:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:01 2026 by rpki-client