Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3133352e302f32342d3234203d3e20323132323338.roa
File: 3134352e31342e3133352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: rgDMc+l45uT22jdpENhmos+cgpKL1YcRUh8Mo33OvNI=
Subject key identifier: E4:45:DF:1F:9A:61:B3:45:D0:74:28:09:67:22:09:E1:52:62:8A:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 345A4B0D34FE6E866AA5437FE106198566AEC171
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3133352e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:09 +0000
ROA not before: Tue 22 Sep 2026 13:24:09 +0000
ROA not after: Tue 21 Sep 2027 13:29:09 +0000
asID: 212238
IP address blocks: 145.14.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5a:4b:0d:34:fe:6e:86:6a:a5:43:7f:e1:06:19:85:66:ae:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:09 2026 GMT
Not After : Sep 21 13:29:09 2027 GMT
Subject: CN=E445DF1F9A61B345D0742809672209E152628A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:60:f0:2d:ec:15:9a:63:5a:21:53:28:88:
22:a0:1b:cb:a0:e2:48:8e:76:5b:d4:43:12:7f:fe:
ae:8a:d8:e7:50:97:c9:aa:3b:b4:4f:45:dd:53:47:
f6:be:fa:34:f4:c0:a1:6a:0b:d3:87:c4:0e:f6:9d:
18:87:6e:29:d4:33:21:d3:01:fc:de:b2:64:19:8b:
23:f4:4e:a2:e7:e4:53:09:23:d3:ee:f1:b2:fc:44:
e6:43:50:6e:07:a3:32:bd:e2:00:ef:a5:38:b7:1f:
18:c9:c0:ba:b4:72:93:46:43:68:70:d0:43:45:4e:
ed:8b:52:c9:34:43:e3:6f:17:4c:a3:c1:5e:34:3e:
53:a1:51:25:8a:f6:e9:ed:b6:5e:c8:ed:13:55:bf:
c2:74:ad:97:6f:2c:59:e1:d8:d9:00:56:ce:7f:c6:
19:59:9b:c0:93:f3:90:91:21:a3:08:f7:27:40:4f:
41:f3:cc:dd:ee:af:bd:2f:e4:36:a0:d0:78:c4:a3:
57:c4:ae:1d:36:9a:bd:5f:9b:d6:9b:88:9d:7e:ec:
07:0d:45:ea:b9:ad:99:dc:bd:47:0b:d7:e3:7b:54:
69:eb:38:b3:d9:7f:9b:af:01:47:f3:e3:9e:41:84:
5c:66:05:eb:93:a0:86:7c:8c:36:4e:a7:af:f5:ec:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:45:DF:1F:9A:61:B3:45:D0:74:28:09:67:22:09:E1:52:62:8A:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3133352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.135.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1e:97:37:ed:b5:57:7a:2b:5a:c4:8f:59:15:8b:a9:d6:1a:
c2:71:25:8c:bc:cb:c1:8d:ad:8c:d2:0a:45:14:24:9a:e8:9e:
f3:e5:5c:0d:d1:07:dd:47:18:0b:24:37:99:0f:54:b0:59:be:
61:e8:07:74:70:75:55:b3:ad:da:5e:c8:d6:75:46:a8:82:fd:
83:0b:46:44:69:4d:e7:ad:fa:a7:b1:cd:4e:00:01:9e:f9:b0:
15:21:dd:16:c1:ec:53:96:c2:a5:73:d5:d8:d6:eb:62:10:c6:
b9:29:59:03:8d:39:7d:bb:d7:66:80:a0:60:ee:8a:db:46:59:
55:ff:2b:da:aa:a8:ef:2e:e4:44:ef:86:d0:86:38:a0:c7:3a:
77:6a:d3:ca:04:9d:5f:7d:75:25:28:d0:f8:9e:4e:61:ca:b8:
c2:f3:2f:aa:6d:a5:0e:eb:6b:76:66:06:a5:dc:e7:f4:db:e9:
0e:a7:60:8c:a0:b1:ca:a6:17:05:01:04:59:79:70:7a:f2:1a:
7c:7b:94:d0:96:16:7c:f5:a3:a9:90:11:79:01:d3:31:71:48:
ab:2e:ed:cd:89:d3:af:b5:5b:c5:a6:75:03:39:30:a6:8a:c1:
31:bf:9e:14:db:f6:ce:d4:08:b1:48:98:82:98:5f:fc:9a:ea:
65:1b:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:21:14 2026 by rpki-client