Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38302e302f32312d3234203d3e2036303739.roa
File: 3134352e31312e38302e302f32312d3234203d3e2036303739.roa (raw, json)
Hash identifier: ty1o7FXdy1kyutnLoE5dEB2BFpDkvYQGrgkwc/4W11c=
Subject key identifier: 10:43:AA:7B:52:ED:4A:80:CC:DD:5F:52:38:94:FD:DB:89:15:2F:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 071113BCA69EEE086899CEE3EE80E8F114473932
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38302e302f32312d3234203d3e2036303739.roa
Signing time: Thu 30 Apr 2026 13:46:18 +0000
ROA not before: Thu 30 Apr 2026 13:41:18 +0000
ROA not after: Thu 29 Apr 2027 13:46:18 +0000
asID: 6079
IP address blocks: 145.11.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:11:13:bc:a6:9e:ee:08:68:99:ce:e3:ee:80:e8:f1:14:47:39:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:18 2026 GMT
Not After : Apr 29 13:46:18 2027 GMT
Subject: CN=1043AA7B52ED4A80CCDD5F523894FDDB89152F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:22:bb:0f:1e:5c:21:2d:fc:27:dd:ae:18:
32:db:c0:03:5e:0f:61:aa:da:96:9c:ca:14:eb:be:
68:03:f7:62:9e:86:37:f4:90:2d:fb:22:fb:f2:b4:
cd:63:b2:d2:12:85:bf:4d:d0:c8:d9:db:ee:75:62:
1f:68:3d:b6:57:03:e5:25:3b:3f:74:8b:43:96:a6:
c2:b2:7e:f9:6f:4b:9c:d1:df:a5:5d:a2:c3:78:97:
31:3d:b2:b8:d4:c3:92:9f:ae:fc:d1:8a:32:ce:29:
69:3a:a1:fa:f6:e0:6a:29:36:cc:7a:ca:6a:b5:27:
51:2c:7c:0e:20:7e:04:93:2f:0a:cf:47:96:5b:59:
6d:84:f2:d2:e5:b0:42:24:a4:02:d8:b4:9b:aa:25:
d2:89:39:f9:a4:9e:c5:ea:75:7b:f7:5b:2a:d5:56:
42:53:d1:88:10:f3:f5:4f:4c:76:11:61:01:4d:12:
9d:ef:dd:0e:c8:e7:bb:c3:6b:d1:cc:30:1c:25:38:
24:28:1d:06:af:93:e2:94:5e:fc:78:f2:9a:f0:a3:
76:1e:65:d3:48:01:9c:c3:e5:99:fc:a0:0c:78:2b:
f7:1e:d3:41:ff:20:35:a1:4c:a0:29:61:f6:7c:15:
1d:21:4a:5f:65:10:19:ea:3c:cc:27:2d:30:e8:03:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:AA:7B:52:ED:4A:80:CC:DD:5F:52:38:94:FD:DB:89:15:2F:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38302e302f32312d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.80.0/21
Signature Algorithm: sha256WithRSAEncryption
73:53:b1:d6:49:40:4c:73:cd:a7:fb:41:d3:f4:b1:7b:6e:1e:
48:72:fc:96:e5:66:0b:8b:98:ac:ab:af:06:74:f0:ca:df:09:
26:08:7a:25:30:d9:ad:a1:f1:ce:05:44:e4:f7:13:c9:d7:ea:
81:b5:e8:a7:10:c9:20:fc:de:d2:8c:88:24:ac:44:85:07:bd:
6b:a1:67:d0:9b:40:11:22:c2:de:66:ca:d0:65:21:4a:85:f4:
51:31:d7:16:ae:e5:8a:c2:f9:19:bb:9b:d9:19:d9:e5:cd:2a:
5a:26:22:2e:b5:a7:c0:6c:eb:ee:f9:96:fc:fb:66:79:4d:8b:
75:70:98:b9:2f:dc:c7:74:17:8b:6e:70:f6:5d:62:94:f5:7a:
d1:c6:f3:25:95:58:1a:66:15:40:fb:a7:e2:6e:53:e0:2e:4e:
6d:f9:ba:ae:f8:70:07:f7:52:c1:f7:20:c0:c9:01:1e:81:87:
b7:81:e0:e7:ae:12:36:71:bc:1b:88:4e:d4:d0:2f:a5:0e:38:
99:2d:92:7b:c1:12:0d:51:e9:0e:da:f1:d9:50:38:46:2f:89:
04:0b:0d:78:89:40:70:74:a4:ed:36:59:50:24:fc:d1:20:cf:
6c:81:db:84:04:14:2b:d8:fa:b0:a0:1a:53:a1:29:9b:f1:59:
d8:e0:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:24 2026 by rpki-client