Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: c7gqa4zy49aLsRKs481BsNC8cW/CLSqDgMorcVG/hLQ=
Subject key identifier: E3:8B:4A:D0:22:E0:4C:5B:EF:05:61:67:D1:AA:4B:AE:3F:EF:86:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3CE5C6C40DBA2D9D395D0DB81D8DC85236616B52
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e2032393134.roa
Signing time: Tue 21 Apr 2026 10:58:29 +0000
ROA not before: Tue 21 Apr 2026 10:53:29 +0000
ROA not after: Tue 20 Apr 2027 10:58:29 +0000
asID: 2914
IP address blocks: 145.79.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e5:c6:c4:0d:ba:2d:9d:39:5d:0d:b8:1d:8d:c8:52:36:61:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 10:53:29 2026 GMT
Not After : Apr 20 10:58:29 2027 GMT
Subject: CN=E38B4AD022E04C5BEF056167D1AA4BAE3FEF86E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:4c:2b:44:b1:61:7c:24:d7:f6:0a:1d:f6:
1e:6a:5c:e0:da:42:7d:87:49:5e:2d:6d:e0:f8:6b:
84:5d:16:7a:a2:8f:dd:56:39:85:7e:ed:14:8d:95:
75:5a:d1:9d:2f:eb:cd:79:08:df:95:49:74:04:0f:
be:51:7a:01:d7:a2:76:43:8e:7d:a0:29:72:d5:ea:
21:32:e1:45:e2:53:3f:88:a5:a8:36:7c:3f:04:0f:
81:8e:71:5b:ff:e8:cb:eb:a7:01:f3:33:06:98:60:
61:f6:08:84:cd:f7:6e:09:73:57:79:10:ca:b2:ec:
97:c2:7a:3c:18:fa:8e:58:64:0f:8d:68:60:ab:9b:
23:b5:ad:d6:4a:01:60:c3:c7:25:57:b6:94:dd:a7:
72:3d:f6:c6:52:bf:1c:f5:ad:b6:18:d5:65:c5:b9:
bf:7b:20:e0:df:2e:77:22:12:25:c0:c4:b8:25:7f:
94:f2:cf:52:13:34:e4:37:df:e2:22:ab:57:b7:e2:
d2:e8:c4:46:bd:26:bd:c2:f1:f2:9c:46:3c:68:5a:
0c:67:96:bc:a3:04:11:bd:98:65:3a:8b:6b:42:19:
f6:5b:e1:91:8d:09:1f:b2:24:48:5e:74:f4:55:e7:
24:1c:72:75:3c:aa:ef:43:8b:3b:b2:42:11:25:f7:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:4A:D0:22:E0:4C:5B:EF:05:61:67:D1:AA:4B:AE:3F:EF:86:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.105.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bc:40:a1:c8:09:05:d2:5b:1c:7c:57:3f:59:38:8e:0f:d6:
e3:fe:25:01:66:26:c2:d3:2f:22:72:f6:a2:e0:3f:c6:9c:66:
b0:7a:5d:21:91:fa:0b:38:e5:c3:65:63:dc:13:9e:7d:9b:ee:
15:36:77:37:34:31:30:67:fb:a9:25:10:db:04:b2:36:a2:18:
be:8d:c2:ba:8c:54:fa:c9:ea:1f:f9:68:02:30:97:01:71:e7:
20:bb:2d:d5:2a:9b:23:7b:13:47:a9:3d:7d:a6:fb:c0:68:4e:
29:2b:aa:25:62:d0:e2:4b:6e:1d:4d:19:9e:ac:64:a8:1c:c3:
17:12:e5:6b:47:5d:20:72:3e:5b:46:b8:da:e6:6b:af:8e:39:
02:c9:48:33:62:3b:e7:72:2e:68:95:ed:71:cd:ef:3e:5b:4e:
c7:f2:d7:80:8f:e8:86:d8:f5:1f:a1:84:cf:ce:a6:cf:42:0a:
54:41:32:9d:47:a3:c4:ff:55:72:7d:30:46:95:9c:ba:cf:a6:
fd:40:5d:8c:3d:7e:2c:42:57:a1:08:4c:2a:29:ed:dc:2a:1e:
fe:ba:06:36:69:c5:1e:81:9d:b9:b2:e4:0a:59:46:8a:9d:7a:
9e:eb:3a:44:bd:b7:e0:01:eb:0f:62:c4:72:a1:de:6b:31:32:
2f:40:09:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:06 2026 by rpki-client