Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: BqcSTfDKM/jqlOSWmKY3Iim8IuLIWhlQLZhWq+RrMQI=
Subject key identifier: 02:A2:E0:AB:73:BF:1A:30:83:C5:B9:AD:A7:B7:40:16:00:9C:BC:54
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C6CD5EAC7604BC2FAF277780001CEBA62233831
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:28 +0000
ROA not before: Thu 23 Jul 2026 07:21:28 +0000
ROA not after: Thu 22 Jul 2027 07:26:28 +0000
asID: 2914
IP address blocks: 145.79.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:6c:d5:ea:c7:60:4b:c2:fa:f2:77:78:00:01:ce:ba:62:23:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:28 2026 GMT
Not After : Jul 22 07:26:28 2027 GMT
Subject: CN=02A2E0AB73BF1A3083C5B9ADA7B74016009CBC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:ee:59:df:55:1c:64:af:7c:16:f7:a9:f9:
2b:3e:f8:16:1a:18:14:19:e0:b5:27:c8:73:7d:bd:
37:be:0a:f7:d6:3c:66:54:b6:ab:c2:7b:cd:23:70:
90:2a:1b:81:8b:c1:be:28:cd:dc:9a:ef:2e:a1:47:
ba:a0:56:c3:d0:c5:4b:e3:51:6f:8c:82:c7:18:df:
f6:af:e1:aa:25:4b:cd:7d:83:c7:2a:4e:44:82:b0:
71:b1:64:2c:ac:2a:d4:e4:8b:bb:c9:3e:cc:c2:6c:
e6:e4:6f:bc:f9:ba:bc:61:91:d9:0a:57:9a:f1:b5:
2b:b2:16:da:6b:b2:03:3c:0f:33:0d:81:e7:23:fe:
e3:65:78:02:7f:9d:b9:ac:d6:60:69:31:63:b9:33:
6a:a5:e3:1a:c6:b9:f3:32:3d:73:d1:7a:0b:e3:cc:
7d:e6:73:ea:98:6b:c5:4b:05:5a:e8:a9:03:70:fb:
82:1a:ba:87:04:93:be:54:cf:6b:ba:bc:14:e1:63:
13:05:82:80:fe:d2:c4:92:5c:73:ed:9c:df:25:5a:
32:5f:e0:81:56:4c:0b:bc:4f:47:c6:e9:03:24:77:
26:c2:5b:1b:34:cd:53:a5:0c:06:88:e4:0f:96:ae:
7e:11:56:08:76:38:ef:df:0b:91:06:b5:eb:d8:a5:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:E0:AB:73:BF:1A:30:83:C5:B9:AD:A7:B7:40:16:00:9C:BC:54
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.107.0/24
Signature Algorithm: sha256WithRSAEncryption
09:48:e4:ba:b9:a3:b8:9c:63:a9:63:d8:06:bf:22:eb:a2:02:
d2:5c:f8:93:14:f5:66:e2:cb:a1:16:a7:bc:12:9d:07:7b:30:
81:d4:06:6e:47:57:8f:82:28:5f:c3:13:64:37:65:4a:94:77:
37:12:0d:d8:40:69:0e:ac:5c:cd:d1:f7:1f:cc:08:0d:f8:9a:
8a:49:7f:e1:53:d4:2f:ce:42:49:b7:88:c5:4a:76:b7:ba:79:
24:7f:c6:b3:c7:40:c0:db:35:18:90:2f:e5:c1:95:14:7c:da:
4e:43:d0:9b:66:3a:65:9e:b8:86:80:ac:92:19:ff:3a:ff:9a:
2d:cf:3f:f3:1f:b1:d1:87:d4:4e:24:14:9c:6a:45:73:c2:93:
dc:51:ac:7f:b1:a4:15:fc:ba:e9:0d:48:43:cd:7f:e6:32:4a:
90:53:55:4a:3b:8d:19:78:27:20:30:87:80:37:f3:56:5d:7e:
07:2a:a7:15:50:f2:e5:54:aa:36:a3:a9:4d:4d:5c:34:6b:38:
e1:b7:c7:27:9b:0c:6b:4a:ea:ac:0f:91:57:ce:61:ea:0e:c7:
f7:66:e4:4f:ea:d7:ae:5f:91:f3:8f:42:d6:69:34:ef:37:19:
6e:00:35:38:7c:bc:99:cb:b9:4f:bd:38:e9:eb:e6:44:9b:70:
3d:77:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:45 2026 by rpki-client