Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: nqM+iwxXkDAh9oLNS2COGwCCBhSfh0Fhiw0919z8HZ0=
Subject key identifier: 81:D3:CC:A2:B7:62:44:67:E7:5D:14:83:CF:5C:E0:DF:81:EA:B8:A6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D3C930204D8D106D684398AA1E448F94CEA0CD8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:22 +0000
ROA not before: Thu 23 Jul 2026 07:21:22 +0000
ROA not after: Thu 22 Jul 2027 07:26:22 +0000
asID: 2914
IP address blocks: 145.79.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3c:93:02:04:d8:d1:06:d6:84:39:8a:a1:e4:48:f9:4c:ea:0c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:22 2026 GMT
Not After : Jul 22 07:26:22 2027 GMT
Subject: CN=81D3CCA2B7624467E75D1483CF5CE0DF81EAB8A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:df:ce:04:f1:5f:ab:c1:ce:39:68:b5:90:
9f:26:c0:0e:85:b8:c4:14:9e:67:cd:92:0b:58:33:
92:3b:7e:61:64:c0:59:1f:ef:73:54:75:26:82:bf:
ef:97:5e:d8:f4:ca:41:95:50:e3:d5:fa:22:0f:b2:
7c:b4:50:4d:c3:ec:ff:8f:98:44:01:3e:68:0f:08:
b6:ac:95:72:2e:cd:da:5d:2b:e7:95:b3:1a:23:05:
38:ec:35:d2:09:59:d8:bb:ad:4b:f7:bd:ca:d6:f1:
7a:9e:94:c5:ed:e8:a3:cc:52:da:f9:24:a3:b6:cc:
ad:12:49:1a:01:a4:ed:ab:44:03:d4:d6:d0:aa:c8:
e2:e1:e5:da:f7:d2:d9:50:50:8b:93:b9:cd:1f:dc:
a0:2e:b9:40:f7:12:72:12:83:1a:11:52:d9:1e:bb:
18:51:6c:36:49:71:c4:97:a4:78:da:0d:88:24:a9:
91:b1:15:7b:66:e0:95:e2:e9:36:12:7c:fd:37:fc:
aa:7d:07:4e:b5:3c:a2:c6:e7:b9:03:63:b9:5e:94:
58:97:97:97:e9:e5:aa:52:85:d4:d6:f1:82:f7:e2:
43:a7:f6:b3:b8:3d:96:fc:1b:91:d7:a9:0a:cd:3a:
2a:09:c2:27:ce:06:5a:e6:4b:2f:ca:20:af:1e:f8:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:CC:A2:B7:62:44:67:E7:5D:14:83:CF:5C:E0:DF:81:EA:B8:A6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.104.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4d:d3:6d:d1:21:7d:c9:72:ca:53:1c:ec:22:42:64:1c:a4:
67:a6:8e:d9:1b:2f:3a:cf:e1:f8:b6:d0:b5:13:0a:20:1d:e0:
69:96:bf:42:d1:04:25:4e:48:66:08:3b:b2:4f:12:d7:c4:74:
e4:4a:7f:7e:5e:26:13:52:78:cc:b1:02:da:70:97:68:62:d3:
14:92:9c:45:a6:78:10:98:55:d1:c2:f9:69:ec:a0:09:e4:c9:
4a:18:ac:5c:8d:30:90:49:88:8c:92:87:90:da:d4:1a:44:00:
09:19:e7:93:a6:a6:de:ca:8d:20:28:bd:7b:ee:dc:0a:11:2d:
d3:36:e3:ce:b4:a0:5d:f1:9f:ab:7c:52:81:5f:4e:18:5b:19:
e1:82:a9:3c:39:44:7b:f3:50:3c:50:8e:45:e1:0e:d8:b1:a7:
cf:5c:97:fc:1e:c1:95:86:73:3c:42:bd:30:5d:73:81:cc:24:
43:bb:2a:05:23:02:80:cd:95:56:29:ae:07:00:35:6b:05:1c:
0e:cb:f5:8e:db:f0:33:e0:da:d3:aa:6b:22:b6:43:2a:f5:fd:
f7:a7:6b:c7:27:0a:a5:81:10:fe:40:68:97:06:ff:b4:9e:06:
1b:1d:9b:e0:7a:69:21:64:95:d3:ea:0e:72:bb:79:af:1f:e8:
a6:b8:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:06 2026 by rpki-client