Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131302e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Tfon/ill8SR3vK+5erdklfA0A629fg0X2KzzyLwB3sA=
Subject key identifier: BB:60:F1:A4:07:D9:AE:12:5D:1D:C0:FC:24:7C:0F:61:4C:51:72:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 790EC84CE919ECBE0DC604FC8AAAEAC9124FFC42
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:27 +0000
ROA not before: Thu 23 Jul 2026 07:21:27 +0000
ROA not after: Thu 22 Jul 2027 07:26:27 +0000
asID: 2914
IP address blocks: 145.79.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0e:c8:4c:e9:19:ec:be:0d:c6:04:fc:8a:aa:ea:c9:12:4f:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:27 2026 GMT
Not After : Jul 22 07:26:27 2027 GMT
Subject: CN=BB60F1A407D9AE125D1DC0FC247C0F614C51721C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:5f:b5:58:b5:58:6b:d2:7c:c9:4f:25:c4:
bc:29:22:c8:d9:73:0c:f2:ce:19:42:7a:c7:45:62:
82:c6:e2:2a:e2:5b:fb:50:fc:89:f5:99:61:78:db:
85:3c:6c:41:42:ef:7d:9e:26:b7:6f:75:a6:e6:68:
3b:4d:5d:5c:c9:98:1d:92:4b:5f:33:2a:79:5b:66:
bd:fb:51:4c:13:d1:ab:f0:6b:08:56:c3:9e:74:d2:
75:67:dd:2c:d0:5a:44:50:08:d2:ba:00:40:99:b2:
80:0a:db:0d:e4:6e:41:d8:f1:d8:14:d2:6d:59:bc:
63:29:54:a7:30:40:80:58:b3:9d:82:62:7d:b4:de:
6f:b6:a4:ff:79:96:ce:64:a7:96:f7:eb:31:95:67:
4f:60:5e:df:f0:01:ac:82:0c:4f:2d:f8:58:30:27:
26:56:6d:97:a7:86:1a:1f:e0:34:7f:b1:ae:39:a0:
4d:be:0d:7c:a9:b4:a7:18:16:0f:2f:bf:36:6a:4e:
a2:a7:32:d9:87:6e:99:c5:67:91:eb:b9:44:a4:3f:
d0:f3:90:17:55:b4:51:5f:2e:4f:ce:f4:f4:fa:50:
96:45:59:b8:90:d3:91:a9:e6:d0:78:8b:bf:14:52:
36:46:68:f1:8e:53:60:28:82:5d:e4:a5:a7:ac:c6:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:F1:A4:07:D9:AE:12:5D:1D:C0:FC:24:7C:0F:61:4C:51:72:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.110.0/24
Signature Algorithm: sha256WithRSAEncryption
08:63:0e:c8:2a:69:be:b3:06:10:d8:1c:c0:48:ef:89:c6:ab:
d1:bc:88:27:5f:5d:ca:78:60:6f:da:4c:9c:ad:07:63:e9:87:
5d:ac:98:21:28:8f:46:6a:fd:b4:41:ea:b4:b3:3a:38:e3:cc:
20:b7:00:76:be:07:20:49:da:07:90:9f:40:d2:ae:36:06:9f:
7c:e9:f4:4e:e5:f0:52:db:ab:71:25:50:a2:8e:73:89:07:92:
9f:02:29:76:7b:62:5b:45:47:93:1d:29:65:af:c0:18:f6:74:
f7:42:5f:2b:c9:c2:ab:b0:76:1d:52:bd:7a:ae:27:d9:e3:a7:
94:33:da:7c:1f:18:3e:a9:e9:80:3f:9b:0e:ad:46:9c:40:cf:
01:f3:1e:62:c0:7f:e8:05:60:62:c3:f5:f6:c5:99:e8:1b:12:
07:53:96:92:a3:02:35:6c:7d:9d:54:4e:9b:cd:24:b8:9a:b1:
ab:80:57:d7:25:87:83:07:fc:12:64:90:2a:4f:c9:ca:f8:3b:
fc:cb:b9:eb:cd:91:71:ac:c7:c2:bd:71:2c:36:d5:e3:32:52:
0a:82:9e:85:1f:0f:3b:fb:29:4e:5d:c9:5e:26:59:0d:cb:3a:
96:58:c0:d2:3e:9e:8c:55:7b:b3:c9:81:98:0b:41:c5:f6:15:
6a:66:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:12 2026 by rpki-client