Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: sJhsVDIOOIDd4FZRfnceoekyZApbwdgtraYjL1ZP/wA=
Subject key identifier: 94:CC:B8:51:06:B4:CC:D6:66:85:3E:1B:BB:41:C2:4D:5C:29:A6:21
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5E33A7749B9F41BF1C440937CF41227E5F9FE115
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:25 +0000
ROA not before: Thu 23 Jul 2026 07:21:25 +0000
ROA not after: Thu 22 Jul 2027 07:26:25 +0000
asID: 2914
IP address blocks: 145.79.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:33:a7:74:9b:9f:41:bf:1c:44:09:37:cf:41:22:7e:5f:9f:e1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:25 2026 GMT
Not After : Jul 22 07:26:25 2027 GMT
Subject: CN=94CCB85106B4CCD666853E1BBB41C24D5C29A621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:77:6b:7f:06:ba:71:b1:79:41:18:73:47:
27:81:0b:2c:2e:38:66:4c:91:a1:8b:9a:3b:54:53:
f8:a7:f7:36:b6:85:8d:3a:f4:69:6d:82:c3:01:af:
a5:5a:08:01:4f:f4:42:ab:06:ed:94:21:dc:be:09:
d7:ea:19:44:a2:90:09:5a:a7:82:34:76:ed:cc:18:
cc:10:c0:1e:ea:d5:2c:d7:e9:89:d9:d7:7c:49:83:
83:de:55:2b:b8:ad:c6:b5:91:61:9a:9e:52:05:2b:
24:9a:24:e9:b2:0c:8b:1b:3b:d9:a0:0d:a6:ca:0b:
d4:e2:cf:74:03:16:8d:c8:9a:07:8c:4a:65:6f:49:
2f:03:ab:16:97:4d:06:93:93:aa:cf:1a:d0:57:c0:
5a:ce:f3:40:0e:f9:fb:4b:67:ea:9b:73:10:27:20:
bb:a1:93:bf:5b:fa:7f:a6:8b:08:bb:cb:b0:53:23:
04:65:17:e6:53:60:94:4f:00:03:cb:a6:ef:35:e0:
42:3e:df:58:27:cb:9e:cf:0d:01:60:68:82:96:ed:
da:5b:58:4a:f4:65:4a:3e:39:16:ec:83:0c:f3:9a:
80:42:7a:a0:b2:c6:5c:96:01:e0:cd:77:cf:14:a0:
9a:0a:cf:1c:19:0a:0c:0d:b6:5e:06:2f:5d:7c:98:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CC:B8:51:06:B4:CC:D6:66:85:3E:1B:BB:41:C2:4D:5C:29:A6:21
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0c:b9:3f:3c:d7:1f:6b:14:a9:b7:0a:7c:8a:a7:21:c7:f6:
58:0d:74:d6:15:e0:e1:3b:c3:f7:d6:f1:b1:97:2d:5f:57:e6:
39:c3:21:8c:ff:90:81:b7:d3:30:5e:49:45:47:b3:44:0b:9c:
fd:d6:d9:c1:b5:22:21:d7:17:ca:1d:77:83:61:d4:cc:46:bf:
92:66:9d:0c:f2:dd:1f:0e:ec:13:66:9b:1f:82:05:dc:6b:3d:
d5:64:a0:65:63:d6:c6:16:e0:88:d9:7d:d2:3d:14:75:a0:82:
83:83:ef:bd:19:d0:aa:da:db:e3:df:e0:17:9e:46:61:0d:6d:
5a:13:a0:26:d8:55:6a:bc:aa:37:cf:27:43:71:7e:12:80:dd:
39:c2:04:14:4f:5f:8e:a8:37:2e:ea:83:31:67:98:d1:c5:de:
e4:96:12:71:66:1d:c1:91:7d:4c:08:50:96:eb:00:c2:57:9a:
bf:78:ff:e2:72:93:6a:06:71:4d:78:5b:fa:66:23:06:14:f6:
79:ae:e1:4c:28:ee:d0:6d:6f:09:5a:3f:9c:70:2d:64:7f:54:
20:45:c2:80:b0:3a:fc:c1:9e:48:8d:fd:fd:e5:10:f4:0b:a5:
b9:0a:a4:bd:58:33:72:8b:eb:6b:73:a3:58:9b:f4:57:c9:17:
51:e1:cd:bf
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXjOndJufQb8cRAk3z0Eifl+f4RUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjMwNzIxMjVaFw0yNzA3MjIwNzI2MjVaMDMxMTAvBgNV
BAMTKDk0Q0NCODUxMDZCNENDRDY2Njg1M0UxQkJCNDFDMjRENUMyOUE2MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRXdrfwa6cbF5QRhzRyeBCywu
OGZMkaGLmjtUU/in9za2hY069GltgsMBr6VaCAFP9EKrBu2UIdy+CdfqGUSikAla
p4I0du3MGMwQwB7q1SzX6YnZ13xJg4PeVSu4rca1kWGanlIFKySaJOmyDIsbO9mg
DabKC9Tiz3QDFo3ImgeMSmVvSS8DqxaXTQaTk6rPGtBXwFrO80AO+ftLZ+qbcxAn
ILuhk79b+n+miwi7y7BTIwRlF+ZTYJRPAAPLpu814EI+31gny57PDQFgaIKW7dpb
WEr0ZUo+ORbsgwzzmoBCeqCyxlyWAeDNd88UoJoKzxwZCgwNtl4GL118mDFPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUlMy4UQa0zNZmhT4bu0HCTVwppiEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
ZTANBgkqhkiG9w0BAQsFAAOCAQEADgy5PzzXH2sUqbcKfIqnIcf2WA101hXg4TvD
99bxsZctX1fmOcMhjP+QgbfTMF5JRUezRAuc/dbZwbUiIdcXyh13g2HUzEa/kmad
DPLdHw7sE2abH4IF3Gs91WSgZWPWxhbgiNl90j0UdaCCg4PvvRnQqtrb49/gF55G
YQ1tWhOgJthVaryqN88nQ3F+EoDdOcIEFE9fjqg3LuqDMWeY0cXe5JYScWYdwZF9
TAhQlusAwleav3j/4nKTagZxTXhb+mYjBhT2ea7hTCju0G1vCVo/nHAtZH9UIEXC
gLA6/MGeSI39/eUQ9AuluQqkvVgzcovra3OjWJv0V8kXUeHNvw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:12 2026 by rpki-client