Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 0NQhU2Ypj+DV9vrhM3BUPnLuKP+OYO44H3GM+w7hpAU=
Subject key identifier: 2F:8B:08:9F:31:62:66:8A:BA:5A:33:B7:21:2E:A2:9A:7B:51:1D:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 659F6F1479ED93CFF5670B6883D157BA81B5353B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:27 +0000
ROA not before: Thu 23 Jul 2026 07:21:27 +0000
ROA not after: Thu 22 Jul 2027 07:26:27 +0000
asID: 2914
IP address blocks: 145.79.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9f:6f:14:79:ed:93:cf:f5:67:0b:68:83:d1:57:ba:81:b5:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:27 2026 GMT
Not After : Jul 22 07:26:27 2027 GMT
Subject: CN=2F8B089F3162668ABA5A33B7212EA29A7B511DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:c3:6e:62:29:5f:72:3e:3c:b0:bf:cf:90:
b2:72:1a:3c:b3:a3:f6:e1:bf:ab:60:57:14:40:80:
b5:ff:5a:23:bf:e2:36:0f:52:ec:13:09:9c:0d:06:
28:a4:58:69:72:6a:17:bc:b8:0b:b1:b7:c4:37:63:
72:8c:4a:40:8e:78:f1:b5:00:c0:9d:4e:fb:fa:6e:
f8:e4:51:b0:c1:45:be:a6:ec:58:bd:48:e0:75:3d:
95:2b:3b:22:6c:cc:9a:6a:0d:65:97:2b:17:47:de:
5c:59:e1:8c:b3:3d:93:30:8b:ce:00:87:38:ce:6f:
d0:03:5f:55:ff:6f:7a:2f:6c:2f:fc:d1:e0:e6:6b:
be:b0:15:d5:24:06:eb:ba:1d:b5:de:c0:c2:6d:53:
51:22:f9:ee:31:fb:3d:27:ed:53:34:7b:70:17:a6:
67:35:41:12:a8:8c:cf:d3:a0:41:39:cc:52:97:b0:
a0:46:fe:46:dd:8c:7c:24:57:25:20:37:d1:b8:61:
e5:5a:70:f0:27:dc:ea:98:ba:9b:11:b8:f2:c2:d7:
6b:6c:d0:d1:75:54:0a:de:5b:88:75:8a:1a:bd:3f:
14:97:67:7e:94:8d:6b:6e:bc:70:64:a3:50:56:34:
50:2c:ef:1e:f7:12:72:bc:2c:dc:f0:17:d3:54:8a:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:08:9F:31:62:66:8A:BA:5A:33:B7:21:2E:A2:9A:7B:51:1D:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.103.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2d:1d:46:48:6d:7e:36:3b:66:58:12:5e:9d:35:1e:b3:a6:
1b:aa:ba:0f:53:69:47:ff:51:e8:cf:19:e1:86:5c:89:df:51:
63:26:af:60:f0:b7:12:b9:f0:a3:30:74:f4:11:50:3e:11:ab:
8f:76:1d:9c:1c:7b:dc:ba:44:8f:5d:aa:98:65:32:96:c3:db:
61:c5:3d:c3:1a:1f:61:07:bb:7a:25:f1:25:61:1b:41:10:3a:
28:0e:05:ec:3a:b2:6e:86:9d:8e:83:e3:eb:14:95:3d:81:12:
6e:0b:c2:cd:2a:c4:53:68:d6:ba:bf:15:44:49:2d:82:26:88:
2d:fe:f3:75:38:26:b1:0e:de:f3:73:38:f6:48:29:a6:30:c7:
59:cf:5b:4a:bf:eb:f2:43:68:f6:18:31:a7:2e:bb:65:a1:a0:
43:ff:f9:3e:21:3a:56:c5:68:dc:60:8c:23:af:16:1e:33:66:
61:ed:23:8f:75:95:af:b9:83:b1:d6:6b:80:4f:da:76:cc:16:
5d:14:74:01:f2:b3:f2:d4:19:8e:86:4d:65:16:85:47:9e:e4:
82:32:7e:02:28:d4:07:87:09:61:d7:42:73:bb:38:a3:58:22:
11:fc:1c:18:c4:58:f3:60:5f:d6:b5:55:a0:71:f3:40:37:58:
c0:3e:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:15 2026 by rpki-client