Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: couCBB9hDpHffblrCCO0W80u2jArYWwWONmtQ3zMG/8=
Subject key identifier: 07:EA:37:5A:EF:77:FC:D4:90:17:50:F0:A7:9B:B3:9B:4F:C9:00:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D7F32659BD8F35AB1611EBC8F4944562B933B21
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:27 +0000
ROA not before: Thu 23 Jul 2026 07:21:27 +0000
ROA not after: Thu 22 Jul 2027 07:26:27 +0000
asID: 2914
IP address blocks: 145.79.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7f:32:65:9b:d8:f3:5a:b1:61:1e:bc:8f:49:44:56:2b:93:3b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:27 2026 GMT
Not After : Jul 22 07:26:27 2027 GMT
Subject: CN=07EA375AEF77FCD4901750F0A79BB39B4FC900E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:8a:70:63:31:d3:0d:7f:62:be:50:82:f7:
e0:37:1f:f7:91:30:2a:26:e7:85:83:37:32:de:7f:
d3:ee:4c:eb:f8:e1:d8:3f:b4:f8:7d:cc:bc:5b:e8:
bd:76:ae:17:1c:f0:9b:de:03:4a:7a:e5:89:30:63:
17:be:7a:84:4b:be:95:74:c4:8d:93:11:60:46:29:
29:94:14:b1:c5:a2:71:8b:46:5b:f4:08:53:6e:08:
da:2a:b2:17:29:54:51:ae:44:d3:cf:e4:e0:3e:08:
ec:bf:05:a8:4d:76:16:14:aa:1b:d1:dc:b6:dc:c3:
97:f0:de:97:fd:4b:76:8e:49:1f:a6:3f:34:ee:ab:
44:e5:2f:9b:64:1e:ab:61:e2:53:44:bf:38:32:3a:
05:60:43:69:aa:96:98:90:3a:64:09:17:dd:3a:b1:
d9:2c:c3:4e:d7:d6:0b:06:13:bc:02:c0:23:b3:5a:
65:9d:44:e6:49:7e:51:6d:92:3e:a9:6f:c9:30:5d:
3a:76:17:26:3c:d2:35:06:92:ed:34:a3:31:dc:db:
6b:35:7d:ea:3d:01:89:00:74:f1:43:66:81:01:2c:
8c:02:27:0f:74:b7:ac:ab:90:58:93:9d:fe:65:7e:
7b:de:85:5a:63:bd:78:1c:19:20:b3:b4:69:be:68:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EA:37:5A:EF:77:FC:D4:90:17:50:F0:A7:9B:B3:9B:4F:C9:00:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:55:e2:1a:16:6b:6e:2f:12:e4:64:3c:24:48:35:30:c5:69:
45:57:d4:40:b1:d8:80:16:04:1d:e7:93:77:bc:fd:b8:1d:73:
67:5c:ec:bf:07:61:69:6e:60:1a:f0:db:13:04:ee:8d:d9:be:
cf:dc:45:53:80:f7:d5:f7:ab:87:af:c7:1f:5b:db:ed:dd:aa:
45:5d:fd:8a:e4:6a:ce:1c:1b:62:94:25:38:91:bc:98:b7:ab:
1b:b9:3b:49:98:e4:57:c7:04:9b:47:40:8a:6a:4d:2f:38:d9:
4d:ae:57:b5:0f:39:45:a9:b0:94:51:cd:94:3d:5c:24:e9:07:
de:c2:89:45:37:fc:2b:10:73:d0:be:f7:89:94:a7:5c:02:78:
6e:3f:50:94:1f:af:b1:3b:cf:f1:7d:2e:31:63:08:de:61:94:
47:75:4d:70:5f:e8:33:11:5e:66:f0:2a:c8:e8:08:4f:82:85:
92:40:c0:94:21:59:bb:ce:ef:83:34:01:4c:ac:fe:c0:86:62:
e1:3c:0c:9f:67:7a:4e:c3:e1:52:8a:d1:44:1e:8b:d7:80:c8:
1e:10:c2:7c:60:d7:50:7c:c6:f2:5f:ba:ab:8d:b9:73:63:f3:
c7:15:3f:e5:84:c2:06:46:07:a5:ce:87:4f:5e:06:c6:1e:40:
44:48:92:ed
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXX8yZZvY81qxYR68j0lEViuTOyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjMwNzIxMjdaFw0yNzA3MjIwNzI2MjdaMDMxMTAvBgNV
BAMTKDA3RUEzNzVBRUY3N0ZDRDQ5MDE3NTBGMEE3OUJCMzlCNEZDOTAwRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVopwYzHTDX9ivlCC9+A3H/eR
MCom54WDNzLef9PuTOv44dg/tPh9zLxb6L12rhcc8JveA0p65YkwYxe+eoRLvpV0
xI2TEWBGKSmUFLHFonGLRlv0CFNuCNoqshcpVFGuRNPP5OA+COy/BahNdhYUqhvR
3Lbcw5fw3pf9S3aOSR+mPzTuq0TlL5tkHqth4lNEvzgyOgVgQ2mqlpiQOmQJF906
sdksw07X1gsGE7wCwCOzWmWdROZJflFtkj6pb8kwXTp2FyY80jUGku00ozHc22s1
feo9AYkAdPFDZoEBLIwCJw90t6yrkFiTnf5lfnvehVpjvXgcGSCztGm+aLmTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUB+o3Wu93/NSQF1Dwp5uzm0/JAOkwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMx
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
czANBgkqhkiG9w0BAQsFAAOCAQEAP1XiGhZrbi8S5GQ8JEg1MMVpRVfUQLHYgBYE
HeeTd7z9uB1zZ1zsvwdhaW5gGvDbEwTujdm+z9xFU4D31ferh6/HH1vb7d2qRV39
iuRqzhwbYpQlOJG8mLerG7k7SZjkV8cEm0dAimpNLzjZTa5XtQ85RamwlFHNlD1c
JOkH3sKJRTf8KxBz0L73iZSnXAJ4bj9QlB+vsTvP8X0uMWMI3mGUR3VNcF/oMxFe
ZvAqyOgIT4KFkkDAlCFZu87vgzQBTKz+wIZi4TwMn2d6TsPhUorRRB6L14DIHhDC
fGDXUHzG8l+6q425c2PzxxU/5YTCBkYHpc6HT14Gxh5AREiS7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:58 2026 by rpki-client