Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: GIVVUmhTrow7kUMkrg3a3/wTxxNSv4ZgoaNsQNXZ+w0=
Subject key identifier: 37:C5:0C:C6:28:4D:24:80:8D:5F:8F:55:54:84:5B:71:A8:70:16:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7601ACD9A0C654477EB5AF62EEAD45202C769DAB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:30 +0000
ROA not before: Thu 23 Jul 2026 07:21:30 +0000
ROA not after: Thu 22 Jul 2027 07:26:30 +0000
asID: 2914
IP address blocks: 145.79.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:01:ac:d9:a0:c6:54:47:7e:b5:af:62:ee:ad:45:20:2c:76:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:30 2026 GMT
Not After : Jul 22 07:26:30 2027 GMT
Subject: CN=37C50CC6284D24808D5F8F5554845B71A870164F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:d1:19:e5:cb:b1:c9:90:15:18:2e:14:91:
d6:51:3f:25:37:11:94:61:f6:e1:22:8a:9c:8f:e1:
8c:73:4f:f4:d5:1b:3f:4c:94:e5:11:24:8a:52:83:
27:f3:4b:2e:46:c9:a2:a6:42:c7:83:2f:f6:f6:2a:
6b:89:38:d4:cc:b6:ab:3b:53:f8:63:a5:6e:f0:29:
7a:20:54:6b:6a:88:1f:69:b9:d9:f3:ed:fb:79:8d:
72:1a:16:6e:08:46:35:42:ab:bf:90:ac:63:df:d1:
ad:a2:e5:c4:1b:85:3a:57:43:1f:0d:6f:6d:88:3c:
3a:2d:28:a5:96:37:74:d0:51:1c:56:4a:00:9d:3f:
3c:a9:23:49:3d:f8:a5:a4:d9:43:ae:02:48:b7:f7:
23:29:97:32:7c:3e:c9:8a:64:91:58:fc:25:21:e0:
ec:00:d2:8a:f2:d4:23:a4:94:52:44:e8:59:da:4b:
1d:6c:6e:4d:09:a6:44:49:74:98:26:9a:db:73:34:
7a:17:df:83:37:bc:0d:5e:ec:06:9d:9f:92:f6:26:
f6:7b:da:3f:d3:7c:32:dd:24:b7:ed:36:52:e6:1a:
04:8c:3f:cd:f7:8e:d7:de:aa:c2:90:ec:7c:94:ca:
4d:c0:ee:fe:51:31:ee:20:7b:e9:a5:ce:db:71:0c:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C5:0C:C6:28:4D:24:80:8D:5F:8F:55:54:84:5B:71:A8:70:16:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.100.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1c:19:68:1e:37:67:f8:f0:07:ab:3a:c7:d8:fa:85:1e:ec:
03:8e:70:1b:01:d3:e6:d5:ce:69:03:4e:8f:df:28:88:bb:2e:
c3:2e:a0:7a:13:7c:9a:8c:1a:fe:ae:9d:e1:07:b5:c2:7d:88:
4e:81:85:69:4e:c4:47:6a:3e:bb:5f:88:3a:91:e5:3c:a8:12:
eb:d6:f2:7f:85:93:49:4a:66:25:e4:67:47:c3:cc:ce:0a:d1:
b1:41:fd:f5:1b:01:33:86:6f:a3:39:87:2b:96:52:30:af:e5:
13:b0:0b:01:1e:9c:61:4b:30:38:ca:63:78:96:08:4e:f5:5b:
f4:7b:ca:a3:20:ca:92:22:27:d2:9e:71:31:b1:a2:a3:c7:fe:
62:df:fe:5f:38:cd:f6:29:de:c8:d3:23:9b:92:c5:bf:77:da:
f2:18:47:c3:ea:bf:9f:e4:80:f7:71:e3:11:fb:5f:88:ff:02:
a6:db:5c:87:17:dd:5c:46:da:54:40:5f:2d:5f:68:ef:d9:de:
16:a3:1b:f8:59:0b:29:71:33:1d:b0:9d:d8:43:e6:62:59:76:
b8:52:8e:8a:e1:a9:c6:bb:32:57:29:22:9a:e7:d8:6a:9e:9f:
4a:52:65:db:bb:68:9e:2a:8c:c6:a7:2a:ab:80:17:3b:a3:33:
91:cc:2f:ac
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdgGs2aDGVEd+ta9i7q1FICx2naswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjMwNzIxMzBaFw0yNzA3MjIwNzI2MzBaMDMxMTAvBgNV
BAMTKDM3QzUwQ0M2Mjg0RDI0ODA4RDVGOEY1NTU0ODQ1QjcxQTg3MDE2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaodEZ5cuxyZAVGC4UkdZRPyU3
EZRh9uEiipyP4YxzT/TVGz9MlOURJIpSgyfzSy5GyaKmQseDL/b2KmuJONTMtqs7
U/hjpW7wKXogVGtqiB9pudnz7ft5jXIaFm4IRjVCq7+QrGPf0a2i5cQbhTpXQx8N
b22IPDotKKWWN3TQURxWSgCdPzypI0k9+KWk2UOuAki39yMplzJ8PsmKZJFY/CUh
4OwA0ory1COklFJE6FnaSx1sbk0JpkRJdJgmmttzNHoX34M3vA1e7Aadn5L2JvZ7
2j/TfDLdJLftNlLmGgSMP833jtfeqsKQ7HyUyk3A7v5RMe4ge+mlzttxDHX/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUN8UMxihNJICNX49VVIRbcahwFk8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMw
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
ZDANBgkqhkiG9w0BAQsFAAOCAQEAFRwZaB43Z/jwB6s6x9j6hR7sA45wGwHT5tXO
aQNOj98oiLsuwy6gehN8mowa/q6d4Qe1wn2IToGFaU7ER2o+u1+IOpHlPKgS69by
f4WTSUpmJeRnR8PMzgrRsUH99RsBM4ZvozmHK5ZSMK/lE7ALAR6cYUswOMpjeJYI
TvVb9HvKoyDKkiIn0p5xMbGio8f+Yt/+XzjN9ineyNMjm5LFv3fa8hhHw+q/n+SA
93HjEftfiP8CpttchxfdXEbaVEBfLV9o79neFqMb+FkLKXEzHbCd2EPmYll2uFKO
iuGpxrsyVykimufYap6fSlJl27toniqMxqcqq4AXO6MzkcwvrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:33 2026 by rpki-client