Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e302e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: u9X2yDCgUy2jaVbVuulmy1NSrX8sp/9i/qGNxFW5bTs=
Subject key identifier: A7:E0:83:56:1B:B0:C0:4A:06:CE:80:F6:68:5E:E2:02:79:36:C3:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 340BDC4CF58779DBBF13447DBA7DF7098C4A2903
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e302e302f32312d3234203d3e203437353833.roa
Signing time: Thu 12 Mar 2026 10:23:24 +0000
ROA not before: Thu 12 Mar 2026 10:18:24 +0000
ROA not after: Thu 11 Mar 2027 10:23:24 +0000
asID: 47583
IP address blocks: 145.79.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0b:dc:4c:f5:87:79:db:bf:13:44:7d:ba:7d:f7:09:8c:4a:29:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 12 10:18:24 2026 GMT
Not After : Mar 11 10:23:24 2027 GMT
Subject: CN=A7E083561BB0C04A06CE80F6685EE2027936C303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:14:13:f5:6a:83:87:f4:c9:7a:15:ca:3e:7f:
ed:af:47:cb:ec:ae:27:e6:0b:c2:b7:33:1f:53:96:
f2:de:a2:90:b7:22:26:53:74:8f:2d:e1:f4:6f:dd:
22:8a:b0:6a:3c:ad:35:54:ba:ae:7d:7d:19:cf:5c:
04:f9:dc:e8:28:df:26:68:0e:31:2a:a8:8e:12:34:
cd:0a:d5:b3:02:01:a1:5f:35:a1:86:25:02:73:68:
71:28:3b:c8:2a:8d:b2:a5:81:65:a8:74:84:37:80:
e4:27:85:e6:30:59:1f:7b:6e:f4:a3:12:71:ea:ba:
42:92:f5:5e:79:2a:79:70:13:70:05:03:a7:c2:31:
af:61:b9:62:dd:d5:32:44:e8:71:b9:a9:a5:31:06:
37:a2:7b:ce:59:dd:96:0f:55:03:ab:57:28:09:36:
38:48:6f:3a:d4:9c:6a:e7:e7:7e:9b:87:bf:26:de:
9a:97:ac:5a:77:87:1f:11:01:5a:0a:9d:22:2c:e3:
48:66:ed:d6:bd:3e:78:ba:6f:b5:4d:41:c7:d3:1c:
03:cb:87:c8:c1:37:45:39:b3:82:0e:57:1c:36:ec:
15:04:ab:e5:04:7d:30:ba:1a:cd:79:46:1d:a1:3d:
60:23:a8:ca:57:e4:52:24:e6:fb:0e:e4:ee:a2:dc:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E0:83:56:1B:B0:C0:4A:06:CE:80:F6:68:5E:E2:02:79:36:C3:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/21
Signature Algorithm: sha256WithRSAEncryption
08:8a:87:09:7e:e3:64:e8:83:cf:f6:85:7e:84:7d:7b:a0:bb:
04:4b:c9:97:76:b3:e2:34:11:bb:2a:26:0f:af:d1:7b:ef:0b:
47:c9:79:98:8e:2f:81:07:70:8c:b8:66:49:83:90:86:60:52:
bd:01:19:6f:91:1e:9b:56:6e:d7:50:ef:5b:7a:16:4e:6d:93:
48:af:41:f1:93:83:7a:00:b5:2c:85:82:89:3e:8e:b1:39:d5:
fd:ce:a8:13:c9:d4:58:4c:9e:32:e3:0d:25:a6:5d:33:19:db:
8d:73:d2:e7:68:49:28:7b:c0:c4:9d:e7:b7:59:36:33:c4:67:
ca:39:e2:36:4e:4d:df:ea:41:c4:d7:67:4d:04:84:11:21:f1:
69:a0:f8:7b:25:b5:f0:55:aa:65:20:09:5a:ee:c3:0d:cc:26:
0c:13:9b:b5:6c:b0:51:6a:81:fc:84:b7:22:23:d3:10:dd:8a:
a4:85:0c:77:50:be:de:fe:7c:50:88:2a:e0:2a:9f:79:27:c7:
8c:44:29:f8:eb:fb:ba:42:70:ea:3b:28:26:ef:d7:d1:94:63:
34:8e:1a:3f:9a:c7:04:11:c1:5a:75:b9:ad:ae:3b:35:8d:dd:
25:eb:7e:be:b8:0c:fc:3a:57:e8:1c:ef:c1:f6:63:21:ce:99:
10:91:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:46 2026 by rpki-client