Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3131372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: yd19EWOT3pb7zGMqxLZH2otuUHn3UEFaGtizIiqa2cA=
Subject key identifier: AF:6C:5F:1B:07:97:C9:05:D8:A1:F4:7F:03:0D:AF:DA:15:84:5E:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7366B48667A5C1AE6F0D558E4F93F6E739C09A46
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:23 +0000
ROA not before: Thu 23 Jul 2026 07:21:23 +0000
ROA not after: Thu 22 Jul 2027 07:26:23 +0000
asID: 2914
IP address blocks: 145.79.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:66:b4:86:67:a5:c1:ae:6f:0d:55:8e:4f:93:f6:e7:39:c0:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:23 2026 GMT
Not After : Jul 22 07:26:23 2027 GMT
Subject: CN=AF6C5F1B0797C905D8A1F47F030DAFDA15845EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:a3:80:a0:32:d5:d6:25:4c:58:95:92:72:
61:20:bb:a7:c7:45:02:10:75:a5:c9:d1:cf:a9:4b:
ab:8a:f1:81:68:8e:dd:34:4d:01:99:c8:a8:b6:4d:
a1:24:96:ed:5d:98:48:87:36:2f:34:2e:56:d4:68:
b2:22:33:85:6e:e2:fd:25:17:c1:6f:a0:79:81:14:
70:d5:3c:24:db:17:7a:14:d3:84:74:db:6f:e6:2a:
6a:30:27:ed:8d:e6:67:97:d3:47:70:ab:e6:f6:d7:
93:81:69:11:cd:13:ee:6f:f7:61:68:03:77:7f:4d:
fb:77:ef:71:b8:c2:00:29:da:0c:f9:cd:45:18:4e:
40:03:37:ff:d9:ff:5a:88:e0:26:47:5f:be:af:54:
10:f4:91:38:06:ca:5d:28:70:21:c4:f8:0b:0b:df:
7e:81:0a:29:50:7e:9d:30:c2:dd:01:a4:6f:64:3a:
46:87:b6:09:6c:7e:5d:76:54:05:56:08:d1:bd:28:
ad:86:79:43:54:7e:65:14:ad:dc:b1:ab:65:8b:b7:
bd:52:0d:34:3a:7a:d7:03:71:50:b2:dd:3e:c5:84:
9b:3b:b4:8f:21:eb:1d:6f:9a:34:a4:63:e3:27:22:
c5:5c:b0:8c:01:e8:08:26:ef:9d:c7:c9:43:78:97:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:5F:1B:07:97:C9:05:D8:A1:F4:7F:03:0D:AF:DA:15:84:5E:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.117.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cd:a3:91:32:f9:f0:3d:e7:57:f3:f2:cf:57:f7:c7:5f:df:
21:31:0e:32:c2:df:6c:f2:d1:2d:c4:4f:8f:f0:8b:5f:19:db:
2c:15:01:27:81:d2:5c:21:45:fd:b1:91:a4:f2:3f:64:e4:37:
48:d0:e4:9b:c2:02:9f:7b:e1:fa:57:1f:1a:44:2a:55:67:14:
89:b5:64:dc:a4:c0:f2:1e:5f:d6:af:78:89:4f:c1:03:57:df:
1b:c6:50:80:9b:d6:57:dc:81:d0:10:14:44:f4:2e:04:36:29:
aa:ac:f7:5a:58:b2:99:8c:a8:81:fe:79:0c:a1:62:93:dd:51:
78:66:65:86:37:77:0d:60:cc:47:1e:2e:90:d8:6d:db:33:4d:
cc:3d:30:fb:d3:ec:5c:38:3f:ca:a2:d3:c9:9d:5d:e3:a6:5a:
00:74:c1:36:cb:ce:48:c9:e8:2c:8f:9c:ed:ab:ea:c6:57:99:
c9:4b:76:d7:41:5e:13:8e:91:e9:4b:f9:eb:4c:77:fa:2b:f9:
10:66:e0:53:9d:44:be:48:e2:93:e2:e1:cf:48:ae:47:cd:0b:
24:31:17:e6:73:5a:99:8e:6d:48:81:41:09:e7:aa:17:46:82:
32:25:15:bc:1f:75:c0:b8:c1:69:f5:b3:ab:00:5a:40:63:67:
b9:40:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:03 2026 by rpki-client