Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: pg4o0yZqlxXa4hPPBAPtQytHplbFevil3/8gMj5iq3Y=
Subject key identifier: F2:56:41:96:9F:99:97:68:74:FD:1A:50:AC:82:C9:81:13:B0:E0:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2978F5A408994784501600665BBBDA908BD21D21
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
Signing time: Thu 24 Sep 2026 09:30:22 +0000
ROA not before: Thu 24 Sep 2026 09:25:22 +0000
ROA not after: Thu 23 Sep 2027 09:30:22 +0000
asID: 834
IP address blocks: 145.79.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:78:f5:a4:08:99:47:84:50:16:00:66:5b:bb:da:90:8b:d2:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 24 09:25:22 2026 GMT
Not After : Sep 23 09:30:22 2027 GMT
Subject: CN=F25641969F99976874FD1A50AC82C98113B0E0E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:1f:fa:29:d2:42:28:53:2e:ea:90:a8:57:
6d:3a:7c:b0:a4:31:1b:b8:d7:ce:47:08:80:c2:4d:
6b:98:e7:e5:cf:07:84:ed:ad:2a:61:04:e2:9d:38:
12:80:39:61:25:a1:b2:54:46:1d:ca:6d:0c:65:db:
d5:cf:1d:60:53:fd:51:31:4d:a0:4f:84:cf:52:5f:
23:6a:5a:40:3c:07:26:81:eb:e9:e8:83:fc:84:64:
d2:2d:1c:25:a5:c6:e3:62:7a:a2:c3:8b:e1:62:e9:
46:63:56:63:50:4e:3a:78:f3:b2:46:9a:ac:3f:94:
09:dc:ef:69:fa:78:8a:e4:f9:6b:01:79:b8:d9:1d:
1e:f3:84:24:9f:17:fa:c2:87:93:72:1b:0c:1a:ab:
a0:7f:22:1d:98:a8:42:d0:af:3b:54:bb:23:93:55:
b9:8e:21:08:4e:d1:d7:7c:4c:7e:25:e7:43:84:7c:
05:0f:f5:64:93:82:89:1b:ba:27:4b:be:69:11:01:
ec:3d:b4:cd:37:99:c7:2c:b9:ca:53:6c:c5:7a:8e:
73:25:bb:ab:2f:a5:39:92:a4:fa:7b:b8:55:e6:f3:
d8:51:f3:e2:99:a8:7a:89:21:95:2f:85:8e:3f:58:
3b:21:06:92:df:77:3e:76:d8:d3:12:d0:de:52:ab:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:41:96:9F:99:97:68:74:FD:1A:50:AC:82:C9:81:13:B0:E0:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.128.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c2:58:17:09:db:ed:68:eb:4f:0b:e6:80:b7:f7:6e:4d:b2:
1c:5f:0b:ac:c0:f8:f0:6f:85:88:05:32:a9:10:ec:f5:c7:e0:
6b:c7:a6:13:57:e8:1e:15:c5:3e:51:7c:72:f3:48:a5:58:89:
a5:25:95:7a:ab:58:a6:b6:e7:3a:15:9c:c3:90:2d:f4:f1:39:
68:69:c3:85:a2:b4:75:95:b0:6e:ed:6e:0d:58:80:98:12:dd:
17:83:7c:a2:c8:aa:19:64:f6:af:65:d7:48:be:82:c7:e9:2d:
19:8a:b9:cd:cf:f4:2c:25:bf:b2:c7:d5:e9:40:09:f9:41:63:
70:11:e1:98:fb:85:04:85:64:56:5a:21:0a:06:73:6c:28:c4:
db:68:b9:b2:cf:3f:9a:e9:de:7f:a7:d2:eb:39:13:ad:67:e5:
41:08:9b:f1:dd:83:96:54:a6:7c:cf:d8:b6:0a:13:97:5e:2c:
06:50:8a:68:f7:97:7f:3e:2c:3a:ab:61:77:3f:0c:e4:42:6c:
de:10:e9:7a:42:42:83:61:7a:cc:d7:27:fb:92:10:c8:78:3e:
d5:52:f3:ae:ef:40:7e:e4:09:bb:e3:f3:27:1e:cf:50:b0:ef:
69:4c:4b:c5:15:ac:bc:a7:1d:2d:52:f0:e2:60:2d:b6:02:e2:
c5:fc:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:11 2026 by rpki-client