Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131362e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3131362e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: q/Taum9LqDBadyP3d+vMrpWgywzQpY2CyzrYV7pBCQA=
Subject key identifier: E1:9C:98:78:7A:9F:6F:22:9D:E7:19:FD:A0:79:F4:A1:A1:D3:FB:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 688EA34FCFB43C5E2286275730EF0F8129B5E557
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131362e302f32342d3234203d3e20323134313433.roa
Signing time: Tue 05 May 2026 09:44:51 +0000
ROA not before: Tue 05 May 2026 09:39:51 +0000
ROA not after: Tue 04 May 2027 09:44:51 +0000
asID: 214143
IP address blocks: 145.79.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8e:a3:4f:cf:b4:3c:5e:22:86:27:57:30:ef:0f:81:29:b5:e5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 09:39:51 2026 GMT
Not After : May 4 09:44:51 2027 GMT
Subject: CN=E19C98787A9F6F229DE719FDA079F4A1A1D3FBC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:48:3a:9d:1a:a9:d3:48:d6:36:76:f8:d6:
36:54:92:d1:dc:3e:f1:d4:2e:4e:ea:86:68:f6:ac:
b9:c2:71:33:ec:87:71:4f:28:13:6c:ff:09:f1:1f:
be:30:32:5b:0b:50:86:49:78:15:ac:14:49:4d:ea:
6a:77:95:56:6b:95:76:6a:3d:b2:1f:e2:cc:01:f9:
c3:34:6b:14:2a:9a:29:16:89:3d:b6:7c:50:b3:a5:
77:3c:b8:1b:33:2a:df:d5:93:3b:d5:45:72:ce:fb:
6c:66:0e:90:5c:29:cd:df:09:dd:87:fe:6c:21:82:
3b:62:e2:51:e7:15:d4:50:06:77:41:16:90:ba:4b:
3e:eb:3c:fe:0c:78:20:89:9a:ed:3b:8d:de:b3:9a:
d7:cc:c4:0d:f1:e4:6a:e5:be:78:cf:8a:b3:57:c1:
2d:9f:69:49:3c:30:0d:94:ae:5f:66:45:dc:af:e3:
92:b7:7b:85:9a:4f:c9:96:ca:79:ea:fb:25:c5:13:
1d:36:c9:a1:13:07:56:44:41:87:39:27:48:7a:76:
3e:c9:11:e6:59:a2:63:cb:12:88:5c:de:89:b4:cc:
a0:c9:f5:da:18:50:2a:5e:e8:a8:0a:bc:8f:5b:66:
91:01:40:ea:60:91:1e:72:f7:0a:57:70:f6:8b:09:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:98:78:7A:9F:6F:22:9D:E7:19:FD:A0:79:F4:A1:A1:D3:FB:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131362e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e7:36:5f:54:99:f7:77:54:32:b1:de:a8:c4:f1:66:7e:aa:
95:63:3b:9e:fb:4e:73:a8:00:3f:ff:40:ab:c2:83:66:36:28:
5e:35:88:e9:6b:46:51:20:4b:8c:56:7f:c4:c5:be:49:60:1a:
4b:64:77:ea:6e:5a:83:1d:9c:d1:38:cb:f1:de:cb:e3:2f:91:
b5:51:8c:ae:85:71:13:eb:42:bc:62:0e:78:b6:5b:f8:92:f7:
16:03:36:6a:1b:d0:8d:3e:32:f6:93:c1:5d:e9:bd:f2:d5:b4:
74:55:48:e9:a8:b1:da:e6:d4:ab:d7:12:33:21:17:cb:e4:83:
05:fe:85:0a:6a:4e:7e:b5:be:73:05:cf:06:00:08:79:56:84:
17:8e:d6:de:f2:25:83:26:c3:41:f2:18:b0:7d:12:70:a2:3e:
ee:ce:a0:22:04:a3:78:fe:25:98:eb:14:83:9e:b4:b3:d8:3f:
67:e3:67:79:e4:c4:73:5d:6c:71:ad:7e:e7:ba:21:8a:97:74:
35:82:99:eb:96:63:39:1a:ca:ff:15:5a:e0:b0:01:21:27:57:
41:a8:bb:7f:a4:21:ab:cb:39:da:56:2a:82:35:b5:66:b3:f2:
6a:49:a7:a9:26:d1:19:be:cc:9b:28:e8:4e:87:c7:e8:88:15:
4c:2e:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:17 2026 by rpki-client