Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dRUj4Z2yG3FsutzGlXaGTOC9xSRrxkXkv9PoarZH4+c=
Subject key identifier: FC:AF:11:82:03:3F:B8:59:E3:76:3A:3F:6C:35:0C:00:EE:14:3A:EB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DBDBC37957167E43E3099422D7F0527CCA69D7D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
Signing time: Mon 04 May 2026 09:52:21 +0000
ROA not before: Mon 04 May 2026 09:47:21 +0000
ROA not after: Mon 03 May 2027 09:52:21 +0000
asID: 834
IP address blocks: 145.79.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:bd:bc:37:95:71:67:e4:3e:30:99:42:2d:7f:05:27:cc:a6:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 4 09:47:21 2026 GMT
Not After : May 3 09:52:21 2027 GMT
Subject: CN=FCAF1182033FB859E3763A3F6C350C00EE143AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2c:c2:c8:f8:4f:46:42:83:7f:93:06:72:99:
63:be:ad:47:5e:6f:4a:58:46:b0:fe:13:7c:56:09:
90:9c:12:4c:fa:7f:a1:a4:f0:a0:e2:3e:88:0c:23:
29:38:b1:f8:e7:d6:e5:b2:39:84:43:4c:8d:39:de:
22:92:5c:c8:9b:af:98:89:e6:c4:c0:4c:78:27:e6:
40:5f:7e:aa:d2:25:4a:ba:ae:3e:99:2c:22:25:90:
5b:e3:59:65:d4:98:37:84:45:1b:d6:81:01:88:e1:
7e:e0:28:a4:1e:d2:3b:69:00:2f:17:4f:ea:cf:29:
34:34:2a:71:5e:7a:82:c6:12:80:6d:5d:3f:82:8b:
3f:b2:d0:4e:21:a7:36:ef:8c:ac:19:67:fe:52:84:
17:35:43:65:4c:52:52:64:92:1d:25:27:e3:34:6c:
ac:b1:bf:07:70:64:0e:be:04:85:2b:84:a9:c4:fc:
7c:b9:e6:8b:be:7d:5a:6e:63:cc:35:71:d8:eb:24:
0d:0f:4b:78:2c:ca:3b:e8:3b:47:31:5a:24:af:f9:
55:36:d1:09:77:76:2c:2e:6f:83:b7:fb:fd:af:55:
61:1e:65:6c:0d:07:0d:eb:7c:7b:3e:c0:06:b8:2f:
57:2b:b6:51:29:be:54:be:bc:8a:1a:24:ff:d8:74:
be:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:11:82:03:3F:B8:59:E3:76:3A:3F:6C:35:0C:00:EE:14:3A:EB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:88:4c:03:b8:0d:9d:3d:e6:eb:96:1f:22:de:e7:bd:93:cc:
12:7c:05:d9:72:38:32:26:31:c6:27:77:f1:a0:68:19:95:df:
62:1e:7a:fa:2b:1b:82:0c:2c:4c:e6:0f:d0:38:55:3b:1f:a3:
3f:26:d6:e5:c7:5d:c2:dd:ed:88:f3:3b:15:a4:82:a8:99:aa:
37:20:a9:e5:34:cf:13:6f:b8:18:a5:db:b4:16:4c:32:4e:de:
2f:e4:1f:83:d1:2b:e6:11:3b:ba:50:ae:60:09:59:29:45:04:
5a:66:e0:02:e6:47:9d:4e:43:77:44:8e:68:08:05:53:e4:bb:
ab:51:af:36:71:49:ed:cd:5d:d1:bf:25:3f:cc:9c:44:3f:55:
0c:07:56:af:be:81:05:ba:c8:33:7a:77:82:56:48:c9:af:be:
44:39:43:3d:ba:1b:06:1c:2d:73:52:92:7f:fe:ba:bb:c3:b2:
ca:b7:87:15:3b:17:2e:97:de:25:82:ec:c0:d5:ad:b6:14:e7:
fe:80:ce:f7:35:d0:fa:e8:a2:b7:7f:ec:5e:b8:9d:31:76:f2:
dc:4a:df:f2:ee:74:76:d1:fb:7b:31:40:78:e6:27:fd:06:d5:
ff:96:c5:60:a5:b2:b4:cd:a6:dd:99:ff:3e:8f:43:fe:fd:87:
a4:a0:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:23 2026 by rpki-client