Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131342e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 0zLgriVJlhPD+fF8KPOM4q4JgLbiDd4kGSc9a6JyB3M=
Subject key identifier: A0:75:67:BC:C8:78:41:D1:2A:A5:FA:7F:46:16:8E:40:2A:63:DF:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5769E9CF60B1159FACB10A4F0DC230B8B015F218
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131342e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:26 +0000
ROA not before: Thu 23 Jul 2026 07:21:26 +0000
ROA not after: Thu 22 Jul 2027 07:26:26 +0000
asID: 2914
IP address blocks: 145.79.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:69:e9:cf:60:b1:15:9f:ac:b1:0a:4f:0d:c2:30:b8:b0:15:f2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:26 2026 GMT
Not After : Jul 22 07:26:26 2027 GMT
Subject: CN=A07567BCC87841D12AA5FA7F46168E402A63DF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:c6:70:31:8a:74:69:de:1f:71:6e:3a:d0:
49:fa:77:5b:f7:e0:84:dd:7e:26:32:19:58:28:21:
a0:72:00:4d:85:d0:7e:a3:81:ec:bb:3c:f5:f8:98:
3c:69:d2:0f:d1:9e:db:26:18:c9:35:a7:07:9c:ce:
63:e4:5d:22:88:a5:9b:94:40:01:d1:9f:9b:ff:39:
cb:42:ad:61:c3:78:f8:d8:4d:60:36:02:b3:51:c3:
50:7f:a6:55:9d:4c:3f:6c:3e:cf:d8:a6:ba:58:97:
83:2c:47:b0:ac:06:7c:08:6b:54:d6:16:8e:8b:ec:
1e:ee:ec:75:45:d8:06:bd:2b:2b:53:ad:8f:b0:c4:
5b:38:da:57:68:88:ae:9c:52:cd:8c:ff:6e:96:b9:
b9:bf:7c:6b:0a:ed:5b:de:70:c1:09:cf:a2:72:38:
4c:8d:ac:34:43:ec:9a:d9:32:dd:74:61:56:e0:c3:
e1:ba:91:2c:c6:16:58:87:0b:99:25:00:c5:04:91:
40:a3:c8:fc:d2:de:ba:55:ce:44:fe:a6:e9:df:f5:
af:a4:c5:98:81:ec:86:02:4d:7b:cf:c7:da:42:44:
30:79:19:d6:0f:a8:84:ef:04:71:5b:71:df:cf:62:
78:4f:35:ae:88:b0:2c:5d:a6:f1:ac:6d:da:58:cf:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:67:BC:C8:78:41:D1:2A:A5:FA:7F:46:16:8E:40:2A:63:DF:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:05:7a:72:aa:51:d4:b6:c1:cb:10:29:a3:4e:55:d1:87:68:
72:be:aa:9c:9f:a3:42:86:3d:7a:92:84:45:cd:70:ba:1b:d7:
11:cb:fc:c0:d1:c5:01:d4:be:16:16:87:c1:79:95:81:dc:63:
0e:b8:d8:b4:c5:19:69:34:7b:d6:64:6c:50:fe:83:d7:8e:4f:
15:75:51:c6:fc:da:3a:33:e3:ed:bd:02:87:4a:ad:f5:a9:74:
65:83:fc:4c:31:36:cd:e3:06:b4:e7:2b:cb:a3:9f:81:6a:9a:
70:d0:5a:af:61:cc:84:32:b7:2b:ee:4b:18:c0:d1:34:ea:3d:
92:4a:58:7d:bf:87:59:c6:1a:73:4f:7c:23:d6:a7:55:41:de:
08:bc:d3:58:5f:1e:fa:dd:71:b1:b3:cf:87:1a:22:1d:76:dd:
27:63:02:84:5f:7a:69:84:d2:ad:1b:0b:26:8c:7a:a2:65:f3:
6c:a0:08:dc:55:42:0a:d3:b6:a8:1c:8e:d1:bc:7d:74:f6:1e:
c2:a1:82:fd:fc:b0:d3:e5:b9:67:42:e7:62:71:32:fa:cf:ad:
ad:3a:a0:31:7b:46:3a:81:62:1c:36:65:93:07:21:04:f8:c2:
af:87:69:73:9c:7d:9c:de:40:85:0c:ac:4e:f1:47:00:b1:9c:
85:e3:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:10 2026 by rpki-client