Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130382e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130382e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: e7lcTZO/pJuhFFpSeMGjoMXFp/Gfk2kelz2QUi8yI2c=
Subject key identifier: 92:1F:CE:06:A9:20:2A:12:17:29:C7:8B:BA:DB:2E:0E:8C:64:13:06
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6DE2B8DFE678827F9CA3DE5E7B08E72742FFAADD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130382e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:25 +0000
ROA not before: Thu 23 Jul 2026 07:21:25 +0000
ROA not after: Thu 22 Jul 2027 07:26:25 +0000
asID: 2914
IP address blocks: 145.79.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e2:b8:df:e6:78:82:7f:9c:a3:de:5e:7b:08:e7:27:42:ff:aa:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:25 2026 GMT
Not After : Jul 22 07:26:25 2027 GMT
Subject: CN=921FCE06A9202A121729C78BBADB2E0E8C641306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:e9:bc:87:39:df:c6:cc:23:79:88:3e:be:
d1:23:80:0b:6a:9b:6b:e6:80:18:7b:7b:d2:7c:d0:
ff:1a:80:7c:cc:31:fa:24:2b:14:d1:97:c5:b0:2e:
85:5a:93:27:24:a8:c9:96:d3:e0:48:b7:95:87:cd:
9a:88:44:79:c6:82:fe:66:38:ce:01:dd:7b:e2:ae:
ea:56:b0:d2:ee:75:9f:8d:31:ce:a9:96:8a:3b:e7:
b0:e0:e3:15:16:4e:4d:21:2a:aa:f3:85:03:d5:e8:
bc:3a:1d:e5:fe:40:da:c1:37:57:62:60:af:7e:2f:
81:46:5d:40:e5:88:e7:74:65:c5:99:d1:20:5d:d4:
15:f0:81:fc:1e:e9:a0:cb:03:91:35:78:46:26:0f:
ce:49:10:32:b6:e6:05:cb:7e:d4:db:d2:bf:67:8b:
7d:56:36:72:cc:9e:c4:15:9f:82:2c:1c:9c:b2:8b:
a6:29:c6:0c:ba:4c:54:69:10:da:8b:ec:7f:8c:b5:
a8:0f:25:5a:dd:e2:ae:00:64:e2:9f:ea:5b:e3:97:
25:4c:61:de:d0:ef:d8:35:46:7c:7e:48:ac:4f:e9:
a1:32:5a:8e:14:9b:00:0b:2b:3b:f3:ef:ef:f3:1d:
e6:a2:a8:0a:33:b4:1e:a7:a2:86:5b:26:d0:1e:0f:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:CE:06:A9:20:2A:12:17:29:C7:8B:BA:DB:2E:0E:8C:64:13:06
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130382e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3c:00:3f:54:80:fc:d6:01:54:5e:ba:f6:24:c2:0f:9e:5a:
67:2c:af:97:19:35:92:18:60:e2:31:cf:92:9a:36:57:f3:8e:
71:58:66:bd:93:87:b2:4b:14:1d:84:62:bb:3f:b4:c2:15:50:
4e:6e:2f:8c:c1:7b:87:7a:c2:15:33:aa:2c:b2:48:7d:15:3a:
19:38:47:5d:ef:ad:39:b3:31:70:ae:26:14:5c:77:8d:f6:81:
2e:07:ae:88:8c:9a:39:7f:2e:c7:87:c0:86:fa:d1:16:de:2e:
4f:c1:47:a5:9e:44:28:51:2e:bb:cc:b7:a0:35:f4:48:c9:25:
d3:a5:22:ed:7a:90:50:1f:5b:ab:9b:57:3d:8d:ef:cd:82:7a:
a0:ac:5e:60:80:14:0d:69:39:0b:a7:0c:c4:d2:d1:ba:0b:37:
25:9d:76:6c:1d:16:e0:23:5c:af:5c:4c:f7:09:b5:62:03:63:
fa:44:32:f0:25:a3:d9:e6:7b:03:2f:49:51:fb:f2:64:57:32:
0d:14:74:1c:5b:fb:3b:83:9b:8d:52:fd:b7:a3:19:69:ce:b0:
c2:9f:7f:c0:8c:a7:45:a8:e4:2b:6a:18:54:d1:3b:a7:c8:dd:
9a:34:23:4b:92:12:78:cb:df:0b:db:de:f7:26:d5:a5:ba:ed:
fc:ee:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:12 2026 by rpki-client