Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132392e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3132392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: XUs9CrSOncse1FOt3OKzEA/yon+3+sBYBZALwt4uilM=
Subject key identifier: 8A:D4:8E:C3:E2:2D:38:D6:6B:18:D2:0A:4D:9C:48:6A:20:11:75:03
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4405DEF2E8B5B422FBA430F8A418DB4C12DB0CAF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132392e302f32342d3234203d3e2032393134.roa
Signing time: Tue 21 Apr 2026 10:58:48 +0000
ROA not before: Tue 21 Apr 2026 10:53:48 +0000
ROA not after: Tue 20 Apr 2027 10:58:48 +0000
asID: 2914
IP address blocks: 145.79.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:05:de:f2:e8:b5:b4:22:fb:a4:30:f8:a4:18:db:4c:12:db:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 10:53:48 2026 GMT
Not After : Apr 20 10:58:48 2027 GMT
Subject: CN=8AD48EC3E22D38D66B18D20A4D9C486A20117503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:6c:49:5e:fb:96:f3:67:76:38:ca:52:b0:
1c:2c:e5:79:62:3d:d0:23:cf:7b:82:f4:5e:b8:4b:
42:79:36:eb:a0:da:f4:26:99:61:98:91:46:08:1f:
d4:28:37:05:7e:3c:6e:d0:45:95:9c:45:33:56:c2:
28:df:0e:fa:3c:dd:79:3c:9a:88:cf:81:49:ae:ec:
4e:4a:14:ea:e5:57:e7:51:c5:d0:5e:b7:c4:1b:05:
03:fd:5a:a6:01:f5:80:58:34:ab:67:63:c0:22:f5:
0c:95:6c:ed:17:5f:50:91:99:76:74:a9:fe:a0:32:
80:62:15:18:e9:95:5d:07:1e:7d:0c:d2:3d:8e:ae:
8b:23:cc:5c:8e:5b:06:ea:aa:f3:16:81:4a:71:fe:
51:fb:cb:18:f1:08:6e:34:b7:92:04:ed:cb:18:d7:
5a:df:89:46:69:0c:d5:51:53:8c:ec:9e:a4:b7:c5:
a3:4b:ff:0c:ba:36:bb:aa:00:93:50:8c:7e:d0:e7:
ef:d8:ed:8f:37:e9:49:41:2e:3f:bb:ee:a8:9f:be:
06:92:80:9c:01:a2:55:7a:b7:74:e5:eb:aa:63:a1:
70:4d:9c:df:dc:3c:6a:05:34:73:24:54:6d:e0:1f:
42:f8:5c:31:bc:29:61:5e:8f:f0:5a:34:57:e3:0c:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:8E:C3:E2:2D:38:D6:6B:18:D2:0A:4D:9C:48:6A:20:11:75:03
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:62:da:63:04:07:22:0a:cc:cb:62:5a:e6:3a:7b:72:35:27:
51:79:cb:7c:d3:78:fd:29:54:10:66:92:19:b5:45:a5:31:ba:
f9:98:5d:44:41:89:67:16:e6:f5:ef:a6:19:aa:5f:f6:a6:36:
0f:72:58:4c:1e:3d:06:97:be:67:4f:22:08:dc:b6:3e:9d:f0:
e0:a5:8a:6e:77:37:ed:0c:78:a4:03:0e:0c:b6:2f:54:28:59:
08:e0:5d:5a:a1:cf:9a:de:e2:3c:26:34:4f:52:34:af:02:35:
7d:38:8a:d6:28:7e:04:26:a3:1d:23:76:30:80:a3:14:f1:d9:
b8:69:0d:68:6b:84:d2:81:0a:84:3b:bc:7f:fe:37:47:f2:13:
62:35:9a:14:a9:1c:dd:f0:1f:f0:48:ec:85:a1:72:e2:cd:e9:
05:9f:2d:ed:1f:f1:89:21:90:2b:d9:4e:b8:27:52:fb:96:34:
b8:41:b6:b4:b5:e2:0a:6b:e3:ca:3c:a6:84:92:8d:29:77:fe:
72:78:99:f8:dd:37:99:ed:02:99:40:fa:4b:ce:c9:f0:23:00:
74:57:46:3d:e9:25:04:a8:c2:69:1b:f7:09:4b:cc:76:6d:32:
45:97:2c:23:d5:6c:dc:df:1b:bc:64:e5:79:44:b2:61:3a:26:
b6:98:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:04 2026 by rpki-client