Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Ww/HkI6p1mzH0Ep14kFvJMCqip7pjnLOi2cH03xab9s=
Subject key identifier: 00:45:2D:D3:9D:1F:D9:7B:FA:5E:13:71:66:94:00:4A:FC:49:FF:98
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 56FC1DEDF3113E1044CF4CAE24C7E11839DC0730
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:22 +0000
ROA not before: Thu 23 Jul 2026 07:21:22 +0000
ROA not after: Thu 22 Jul 2027 07:26:22 +0000
asID: 2914
IP address blocks: 145.79.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fc:1d:ed:f3:11:3e:10:44:cf:4c:ae:24:c7:e1:18:39:dc:07:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:22 2026 GMT
Not After : Jul 22 07:26:22 2027 GMT
Subject: CN=00452DD39D1FD97BFA5E13716694004AFC49FF98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:84:b3:ed:a8:18:2f:ab:70:22:be:db:3c:
ce:79:51:db:7b:41:04:07:28:32:7e:71:fe:eb:34:
c2:4f:cc:27:d0:82:ec:fc:9e:56:1a:4a:b4:c3:ed:
54:9c:72:7d:7d:19:48:34:4e:b0:ab:4e:ef:c0:f2:
36:03:c5:07:98:a9:24:5a:51:14:d9:13:af:cf:90:
cb:03:b6:a4:5c:69:a9:b2:43:fb:0d:c4:4c:e0:57:
61:63:b2:ab:53:42:2a:f0:0a:ea:52:65:d5:2c:f9:
0d:4e:73:95:a2:7a:49:b9:5c:2c:83:2b:fa:82:d2:
8c:9f:b9:85:47:d1:68:36:67:77:d2:fd:81:9f:64:
e6:db:90:22:d7:b1:ad:10:8a:a4:6c:1f:d6:ee:23:
7d:86:09:eb:eb:0c:ee:d6:a7:8c:a1:ab:49:8c:ca:
8e:e2:a3:59:4a:2e:19:58:77:b7:0e:c2:3a:10:08:
23:93:1f:7a:10:56:dd:43:b0:b3:c8:6a:38:72:f1:
e4:96:5c:a3:49:c4:ba:29:4c:ee:70:a9:4e:cd:0d:
05:40:45:d8:41:4a:25:8e:f6:91:d8:34:1e:6e:fd:
47:7a:6c:22:7e:6e:4b:57:5b:a7:5b:1a:2f:4b:7d:
1b:9f:01:41:80:14:fb:0f:82:70:c7:59:22:fe:b7:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:2D:D3:9D:1F:D9:7B:FA:5E:13:71:66:94:00:4A:FC:49:FF:98
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.111.0/24
Signature Algorithm: sha256WithRSAEncryption
16:99:52:78:79:64:6e:8c:06:02:64:8c:93:e9:5a:68:14:c5:
1e:24:6c:2f:e3:fa:20:27:fb:2f:44:84:80:cd:2e:54:6b:e8:
c1:67:36:25:74:0d:93:08:1b:69:6d:94:31:2c:d3:d5:82:fe:
16:a5:3d:4d:24:4d:7e:2e:39:c4:13:22:c3:3e:92:e7:ed:6f:
1e:dd:fa:26:f4:29:7c:84:c9:f4:21:f3:d8:9b:9e:0e:b1:0b:
19:0b:e5:9a:ba:a9:fe:87:99:8e:94:9b:85:65:e5:60:9d:d5:
f9:37:f3:e7:6c:33:ab:7d:2b:6f:04:bf:f9:5f:0e:20:63:a1:
fa:c7:11:bc:b5:ab:93:1b:ab:24:33:7a:91:e9:a6:f6:93:4f:
fd:4f:97:bc:15:d5:8b:46:23:45:d0:32:b5:7c:67:92:82:73:
62:a9:4a:cc:83:fa:28:53:80:f1:b7:b9:aa:ba:b9:53:4d:e1:
6c:2f:57:ca:90:e4:4e:62:f8:1b:2e:b5:58:9c:1d:8a:64:b9:
f6:f8:e2:e5:b5:56:ee:a3:be:70:2f:81:2e:fd:5d:ee:00:82:
fb:e6:9b:cb:5c:e9:44:f5:41:39:4a:3b:4d:69:2c:13:4b:06:
3b:70:a8:a9:6e:45:a1:5b:12:f2:4c:b8:09:1f:26:0d:83:97:
c9:7f:f0:e4
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVvwd7fMRPhBEz0yuJMfhGDncBzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjMwNzIxMjJaFw0yNzA3MjIwNzI2MjJaMDMxMTAvBgNV
BAMTKDAwNDUyREQzOUQxRkQ5N0JGQTVFMTM3MTY2OTQwMDRBRkM0OUZGOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbnISz7agYL6twIr7bPM55Udt7
QQQHKDJ+cf7rNMJPzCfQguz8nlYaSrTD7VSccn19GUg0TrCrTu/A8jYDxQeYqSRa
URTZE6/PkMsDtqRcaamyQ/sNxEzgV2FjsqtTQirwCupSZdUs+Q1Oc5Wiekm5XCyD
K/qC0oyfuYVH0Wg2Z3fS/YGfZObbkCLXsa0QiqRsH9buI32GCevrDO7Wp4yhq0mM
yo7io1lKLhlYd7cOwjoQCCOTH3oQVt1DsLPIajhy8eSWXKNJxLopTO5wqU7NDQVA
RdhBSiWO9pHYNB5u/Ud6bCJ+bktXW6dbGi9LfRufAUGAFPsPgnDHWSL+t/XtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUAEUt050f2Xv6XhNxZpQASvxJ/5gwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMx
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
bzANBgkqhkiG9w0BAQsFAAOCAQEAFplSeHlkbowGAmSMk+laaBTFHiRsL+P6ICf7
L0SEgM0uVGvowWc2JXQNkwgbaW2UMSzT1YL+FqU9TSRNfi45xBMiwz6S5+1vHt36
JvQpfITJ9CHz2JueDrELGQvlmrqp/oeZjpSbhWXlYJ3V+Tfz52wzq30rbwS/+V8O
IGOh+scRvLWrkxurJDN6kemm9pNP/U+XvBXVi0YjRdAytXxnkoJzYqlKzIP6KFOA
8be5qrq5U03hbC9XypDkTmL4Gy61WJwdimS59vji5bVW7qO+cC+BLv1d7gCC++ab
y1zpRPVBOUo7TWksE0sGO3CoqW5FoVsS8ky4CR8mDYOXyX/w5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:33 2026 by rpki-client