Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e20323135373438.roa
File: 3134352e37392e3132352e302f32342d3234203d3e20323135373438.roa (raw, json)
Hash identifier: urUFMnm13R/H5ATTVPG9yfQ89Ik3WuKS9JO6gT/MHNw=
Subject key identifier: 96:83:FE:B0:61:5F:BC:3F:36:87:CB:DA:E6:D9:54:9E:10:CA:9F:51
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D7B14CD689A3383F0DAB8D819729558937F6E30
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e20323135373438.roa
Signing time: Tue 10 Mar 2026 07:15:30 +0000
ROA not before: Tue 10 Mar 2026 07:10:30 +0000
ROA not after: Tue 09 Mar 2027 07:15:30 +0000
asID: 215748
IP address blocks: 145.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:7b:14:cd:68:9a:33:83:f0:da:b8:d8:19:72:95:58:93:7f:6e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 10 07:10:30 2026 GMT
Not After : Mar 9 07:15:30 2027 GMT
Subject: CN=9683FEB0615FBC3F3687CBDAE6D9549E10CA9F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:41:0e:5b:85:7a:32:23:5d:1f:4d:da:d7:
22:4d:e0:e2:b0:c2:cf:9f:d8:7e:6c:16:81:a8:b5:
f3:0d:41:be:c0:c3:e7:ae:de:ee:24:3f:b0:4f:d4:
d2:ab:5a:c4:bd:a7:7f:30:45:38:86:e0:b8:da:33:
9b:ca:2b:24:e3:7d:98:e2:f8:a5:df:3f:f8:4c:34:
90:f8:e3:7c:05:df:1f:cf:d7:d6:c8:06:7a:34:d9:
d0:0c:55:a0:f3:96:71:64:2f:03:83:01:78:ad:97:
8b:e4:82:fd:f0:93:c1:e3:4f:2a:6b:88:a8:02:0a:
f7:7e:84:e7:dc:d8:4d:95:d6:c3:23:ed:e2:2b:7f:
76:79:56:1f:7a:78:7c:15:b4:25:ad:e4:e1:4d:14:
a9:ed:03:71:09:37:1e:b8:64:77:4e:e3:eb:ac:4c:
8e:55:5c:10:9d:e7:76:df:68:cc:27:15:d2:23:9f:
3a:33:7c:91:5a:0b:77:df:39:3c:32:e1:6f:42:52:
60:67:9b:f2:c6:39:77:68:61:40:3d:45:7d:a7:74:
9c:b6:f1:04:55:67:1f:10:dd:69:13:e8:ba:b5:07:
f0:13:ba:5e:e8:a1:c2:f6:59:cb:c4:67:39:ef:5b:
61:05:96:78:28:57:4e:5b:d6:ce:7d:1c:31:26:4f:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:FE:B0:61:5F:BC:3F:36:87:CB:DA:E6:D9:54:9E:10:CA:9F:51
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e20323135373438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ea:fe:c3:51:5c:87:4e:44:56:23:59:7c:21:b0:62:77:2c:
93:d2:1c:75:9d:9d:b9:67:57:d1:a0:ea:36:40:e9:10:65:f3:
08:9c:eb:65:4c:11:bf:fe:7c:78:d0:b4:50:6a:19:c9:cb:12:
58:c5:69:d1:df:11:e5:72:2f:0f:bd:3b:3e:c7:30:04:9c:ee:
3c:d7:83:6a:bf:5f:74:e4:bd:78:13:6d:3a:f6:db:ab:83:15:
06:23:e8:d7:64:92:a1:43:82:ee:5c:19:7e:83:91:65:06:11:
4b:cb:42:c4:2a:67:8e:24:b4:ab:10:f6:65:46:e9:da:d7:c3:
c6:e2:9c:51:c1:6d:55:18:7b:3d:f7:29:69:d4:45:40:c5:90:
38:58:81:f5:bc:1f:92:5e:a4:39:c1:44:b6:e1:0c:74:c8:1c:
df:fa:16:3b:f3:2e:45:65:af:5d:af:fa:2c:e1:bd:5a:8d:38:
65:4e:17:22:39:3d:d3:07:3c:14:24:96:01:ab:d8:95:cd:80:
b7:90:83:ae:4b:80:a5:b4:ef:7c:82:d2:89:d9:59:c3:50:36:
e6:b8:f0:be:e0:91:2d:06:15:7c:92:4a:34:5c:81:bc:9c:cd:
c0:f1:ee:e6:a5:12:5d:15:46:fd:1a:4a:3b:d4:ea:7b:ce:41:
33:80:0e:58
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHXsUzWiaM4Pw2rjYGXKVWJN/bjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTAwNzEwMzBaFw0yNzAzMDkwNzE1MzBaMDMxMTAvBgNV
BAMTKDk2ODNGRUIwNjE1RkJDM0YzNjg3Q0JEQUU2RDk1NDlFMTBDQTlGNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9EEOW4V6MiNdH03a1yJN4OKw
ws+f2H5sFoGotfMNQb7Aw+eu3u4kP7BP1NKrWsS9p38wRTiG4LjaM5vKKyTjfZji
+KXfP/hMNJD443wF3x/P19bIBno02dAMVaDzlnFkLwODAXitl4vkgv3wk8HjTypr
iKgCCvd+hOfc2E2V1sMj7eIrf3Z5Vh96eHwVtCWt5OFNFKntA3EJNx64ZHdO4+us
TI5VXBCd53bfaMwnFdIjnzozfJFaC3ffOTwy4W9CUmBnm/LGOXdoYUA9RX2ndJy2
8QRVZx8Q3WkT6Lq1B/ATul7oocL2WcvEZznvW2EFlngoV05b1s59HDEmT7/7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUloP+sGFfvD82h8va5tlUnhDKn1EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM0Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT30wDQYJKoZIhvcNAQELBQADggEBAF3q/sNRXIdORFYjWXwhsGJ3LJPSHHWd
nblnV9Gg6jZA6RBl8wic62VMEb/+fHjQtFBqGcnLEljFadHfEeVyLw+9Oz7HMASc
7jzXg2q/X3TkvXgTbTr226uDFQYj6NdkkqFDgu5cGX6DkWUGEUvLQsQqZ44ktKsQ
9mVG6drXw8binFHBbVUYez33KWnURUDFkDhYgfW8H5JepDnBRLbhDHTIHN/6Fjvz
LkVlr12v+izhvVqNOGVOFyI5PdMHPBQklgGr2JXNgLeQg65LgKW073yC0onZWcNQ
Nua48L7gkS0GFXySSjRcgbyczcDx7ualEl0VRv0aSjvU6nvOQTOADlg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:30 2026 by rpki-client