Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3132382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: Up6cQrUlTECXh1eybBMa1qk5FHNggFnTdrPNnDqiRZo=
Subject key identifier: AA:98:7C:79:4F:3A:FC:54:39:33:C1:20:2F:6F:7F:D3:64:24:BA:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0EF774D239FA0C33D2BC4A2A2D0A7C1B2C03CCC0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:00 +0000
ROA not before: Wed 22 Jul 2026 16:31:00 +0000
ROA not after: Wed 21 Jul 2027 16:36:00 +0000
asID: 20473
IP address blocks: 145.79.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f7:74:d2:39:fa:0c:33:d2:bc:4a:2a:2d:0a:7c:1b:2c:03:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:00 2026 GMT
Not After : Jul 21 16:36:00 2027 GMT
Subject: CN=AA987C794F3AFC543933C1202F6F7FD36424BA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:fe:28:73:47:6d:22:13:43:6c:4e:8f:36:
5b:60:e4:c2:f3:89:68:02:c9:b1:55:e2:02:64:c4:
76:e8:8e:26:d8:76:7d:f5:56:ee:91:78:5a:80:55:
3c:f2:11:7b:58:77:8b:ac:77:96:62:f9:c8:63:29:
2d:bd:70:ff:0b:62:4d:3e:e2:bf:05:8e:2c:bb:e2:
d6:2d:42:f7:9c:b6:e5:58:98:b4:7e:ac:5d:d1:3e:
58:fd:ff:86:19:8e:ab:0c:54:6f:d6:d5:cd:92:c9:
d2:95:f9:22:9f:a2:3e:cc:81:4e:01:ec:f0:3a:69:
0f:57:99:90:15:46:a4:bc:79:6e:7f:e3:2e:ab:2a:
29:a2:58:68:11:e2:04:54:11:aa:f4:91:4e:0e:17:
70:9b:05:2e:0d:d2:3d:39:cf:75:9a:85:19:d8:7b:
c6:42:92:b0:43:d6:0a:12:67:87:8c:18:1b:48:53:
83:7f:b9:26:5d:fa:04:24:f2:7d:e7:fe:e4:95:67:
a0:be:69:be:de:3e:2c:23:7b:0f:02:0e:dd:f4:d8:
26:50:b2:3c:bd:64:7c:b5:44:c3:39:e9:92:ec:f8:
f9:ce:15:73:8e:df:85:c0:3f:dd:dd:5a:a7:e2:55:
a2:26:da:21:a1:e7:02:2f:b9:c6:cf:f0:fd:ad:c1:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:7C:79:4F:3A:FC:54:39:33:C1:20:2F:6F:7F:D3:64:24:BA:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ac:83:9f:cc:1f:29:62:08:f8:37:69:eb:ca:b7:f8:3b:28:
09:34:fb:fa:fa:0a:fa:70:23:8f:15:da:cf:b3:70:e6:bf:56:
16:2d:cb:f2:10:40:48:5d:05:9a:73:4a:41:d3:2b:7b:28:1d:
0e:cd:a1:eb:07:24:72:75:99:af:14:16:fa:25:8a:ec:ef:55:
37:73:e6:d8:b2:c9:75:b6:3b:14:a7:97:05:30:d4:09:1e:e0:
25:76:9e:11:aa:47:b0:fe:69:01:6b:17:98:4d:87:af:a9:7f:
f9:fa:81:44:eb:67:48:f3:8a:80:01:e2:a7:fb:42:9e:4a:d9:
0c:6e:49:87:19:42:18:db:30:17:81:9b:24:69:70:f1:ae:81:
28:67:d4:f3:1d:e4:b8:43:33:7a:d0:95:a1:6a:b4:40:5f:0f:
0f:04:fb:2b:0e:8a:54:ef:c4:da:f2:43:18:4a:71:22:d3:91:
63:9e:13:b7:ea:15:1a:ea:08:b4:8b:4b:49:a5:0d:ce:84:7b:
db:af:f3:09:82:e4:a5:41:9f:f0:da:2d:62:b5:2b:2f:43:c7:
32:f3:e5:a2:db:65:9c:fc:ea:37:64:32:20:82:63:6a:90:4d:
86:6b:54:5d:65:b8:6f:d4:1b:aa:99:88:87:b4:5a:6d:52:c7:
71:8b:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:12 2026 by rpki-client