Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132322e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3132322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: BmeUGc0lQ6iZxsvQrrDDkKQhk4Vm5hcoRng73ODydDo=
Subject key identifier: 3A:F4:E6:60:90:70:95:7D:36:A2:A7:38:19:8C:D9:00:8A:D7:6C:4C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 14C52334E9F3FBEB84340EF44BBAEAE4CB1752C2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132322e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:25 +0000
ROA not before: Thu 23 Jul 2026 07:21:25 +0000
ROA not after: Thu 22 Jul 2027 07:26:25 +0000
asID: 2914
IP address blocks: 145.79.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c5:23:34:e9:f3:fb:eb:84:34:0e:f4:4b:ba:ea:e4:cb:17:52:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:25 2026 GMT
Not After : Jul 22 07:26:25 2027 GMT
Subject: CN=3AF4E6609070957D36A2A738198CD9008AD76C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:66:a9:99:a3:ef:ab:62:db:bd:d7:fe:ed:
ed:ee:6a:d9:40:61:3d:e1:b4:cd:e2:8a:33:37:1b:
22:50:12:4d:a8:ff:b4:2d:20:cf:26:d5:e7:39:19:
5a:81:03:1b:1d:27:23:6c:09:73:3e:c4:96:f4:00:
9e:56:c2:f7:fa:da:44:87:23:08:51:42:29:20:5b:
c2:6b:85:4d:36:b2:3a:5b:50:3f:06:2c:42:f7:c6:
c0:7d:aa:ca:c9:1d:f0:f6:83:9f:f6:5f:c5:e3:5b:
4f:b6:b1:1c:81:b0:12:b1:69:7a:14:44:cc:ed:50:
1b:c3:86:6d:e5:60:57:5e:19:fe:bb:3c:76:6f:fa:
fc:d2:7c:3f:a0:25:6b:ee:0e:59:a9:6e:8c:a4:af:
fb:54:be:cd:b8:e2:db:92:66:08:69:d0:ee:d7:6c:
25:e0:2f:72:95:44:1a:51:22:3a:cf:7e:3a:3d:52:
ac:ab:42:38:6c:dc:df:fd:7b:0a:33:d8:34:46:ab:
01:74:0e:62:81:83:04:d3:e0:30:ee:f5:e0:1a:99:
98:88:07:b2:a2:90:19:01:0a:55:fd:60:d8:1d:d5:
6d:95:a4:1a:3e:bf:90:c4:8b:46:ad:5a:ca:78:86:
1c:b3:07:1e:c2:65:8d:98:a0:48:4a:6e:58:94:2f:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:E6:60:90:70:95:7D:36:A2:A7:38:19:8C:D9:00:8A:D7:6C:4C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.122.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f3:a1:d0:1d:23:14:c9:e1:7d:2c:d2:57:36:d7:60:b0:1f:
ae:9f:12:59:15:29:f5:40:9a:4c:e2:a8:66:ef:37:c1:ec:b5:
5c:92:14:7f:7a:ea:ec:f3:55:9a:5a:e6:b8:5d:d7:7b:1e:c0:
ae:34:15:56:5e:5c:30:3d:e3:ae:82:76:e8:99:34:cd:fe:1c:
0a:57:cb:8f:df:cd:cd:e8:ff:51:f4:e8:4b:63:2a:b1:6e:e9:
91:06:0f:33:13:e5:57:24:a2:92:0e:c6:f3:d5:d5:7e:f1:27:
80:42:fe:27:05:78:8e:34:6e:af:67:4b:e0:2e:2c:17:90:86:
e5:06:5a:36:22:fe:74:1f:36:38:ba:2e:db:c9:46:e5:9e:cf:
6a:12:dd:88:e5:6d:66:d6:7a:5d:2e:8c:4e:3c:f9:4d:d9:f4:
07:50:55:3e:d8:59:d5:ce:2f:0b:ca:68:1a:1a:f2:84:11:18:
3a:2c:5c:cd:ad:42:b5:a4:f2:86:96:66:95:d3:e7:3b:1e:aa:
19:5d:08:95:51:d6:20:6d:74:f9:d1:c2:b0:46:2d:48:a2:d6:
29:9a:7e:2c:f1:f9:3c:2f:d9:21:6f:69:be:b3:b9:a9:8f:37:
e7:9e:12:5d:c4:2b:d3:49:17:2b:d1:04:ca:30:0c:0b:61:cf:
b4:12:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:07 2026 by rpki-client