Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3132332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: H/WLi0pQvBIdC3ubM8ZFBeEyZUGuvEJoQFbmOuWN2iM=
Subject key identifier: B0:2F:BB:7D:B2:EE:52:00:DC:CD:90:75:EB:FA:97:C4:10:7B:0F:84
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FBF6B5DC941A8434A58D3B5E03DE85BCE5A0499
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:30 +0000
ROA not before: Thu 23 Jul 2026 07:21:30 +0000
ROA not after: Thu 22 Jul 2027 07:26:30 +0000
asID: 2914
IP address blocks: 145.79.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:bf:6b:5d:c9:41:a8:43:4a:58:d3:b5:e0:3d:e8:5b:ce:5a:04:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:30 2026 GMT
Not After : Jul 22 07:26:30 2027 GMT
Subject: CN=B02FBB7DB2EE5200DCCD9075EBFA97C4107B0F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:6e:f6:77:6b:c3:d0:11:62:b8:0b:8d:fd:
4e:9d:21:c6:a8:f9:0d:62:11:c8:da:1b:a6:61:67:
7c:b8:4f:f7:d0:a5:76:03:df:c6:dc:ae:e2:12:99:
ae:e5:92:2d:ae:6c:84:27:62:77:0f:14:68:e9:70:
69:87:fa:42:97:69:48:7a:1f:d9:53:29:de:03:8b:
c3:72:e5:7a:82:b0:43:35:d5:61:da:ca:1f:82:01:
b3:b1:3f:91:b3:ab:7e:c9:48:b0:0d:df:02:d7:48:
bf:71:3c:38:dd:51:02:cf:92:16:4b:33:19:ae:d0:
70:4b:da:dc:f6:46:00:93:ff:94:34:b4:9d:ea:3a:
11:aa:04:ca:98:54:e2:92:a0:7b:e9:fe:8b:db:85:
9b:35:a6:58:10:78:a6:59:23:f4:c0:34:25:b9:16:
02:b1:03:0e:e9:58:41:01:90:e8:17:9c:4a:5f:43:
cc:37:9f:c1:e2:46:46:bf:3e:06:d3:ef:9c:5e:5f:
af:6d:e4:60:44:2c:eb:ea:e9:88:ab:88:b9:46:b6:
59:52:0e:4e:9e:9a:0b:15:e1:70:bc:56:76:ba:f8:
df:10:a2:cf:f5:14:da:97:d0:e8:6c:12:d1:59:91:
ff:43:f3:fa:89:65:11:e5:e9:9d:c7:8a:2f:9a:52:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:BB:7D:B2:EE:52:00:DC:CD:90:75:EB:FA:97:C4:10:7B:0F:84
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.123.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9c:54:13:37:c8:4b:a8:2d:28:c5:35:be:da:33:15:aa:6d:
38:93:42:ea:7f:20:42:48:77:c0:cd:03:25:ba:f1:7c:59:59:
d2:be:42:f8:3c:0f:5d:a1:ec:be:d2:8e:b9:7b:aa:8e:73:92:
5e:62:d1:51:35:4f:9b:7e:46:a6:7b:98:69:ef:51:93:fa:3b:
f9:91:e7:0a:19:aa:09:c0:20:49:f5:a5:f2:5c:1b:49:04:1a:
a9:1f:11:50:7b:17:91:af:8e:cb:52:97:dd:80:b9:1f:e3:26:
ff:3d:8f:50:b9:fe:6c:ed:f7:f2:ed:14:77:eb:b2:8d:fe:4d:
43:2a:55:92:bb:69:15:69:c9:ac:78:28:63:95:1e:3a:1d:19:
e4:08:5b:cc:67:07:c4:da:c0:4a:90:8a:97:ce:40:91:fe:de:
04:4a:11:65:44:5b:9e:05:b1:7e:76:36:fd:b1:be:b9:cf:1d:
b1:5c:dd:93:e6:8a:b2:f0:a2:80:8e:b6:5c:b8:1f:ee:80:97:
fc:d0:98:0e:8c:90:d9:52:44:62:f7:77:9f:70:91:8d:01:bf:
93:7f:b3:b4:89:b8:81:47:0c:8b:ff:11:aa:35:e9:43:48:20:
67:8d:e6:9b:5c:4d:0d:46:9e:58:b7:e6:98:af:03:70:8c:88:
36:76:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:54 2026 by rpki-client