Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e20323134303235.roa
File: 3134352e37392e3133342e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: M5oj/Bi+HSZq3aMw0EGPOivUKmFqCbq+kvRdZz4nyuk=
Subject key identifier: 28:20:CA:52:C2:C7:BF:79:2C:AF:C9:A6:D8:A8:09:97:9C:13:B0:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B22EA353DB9F2D4B185680E4F00DC96199DEA90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e20323134303235.roa
Signing time: Fri 13 Mar 2026 20:46:06 +0000
ROA not before: Fri 13 Mar 2026 20:41:06 +0000
ROA not after: Fri 12 Mar 2027 20:46:06 +0000
asID: 214025
IP address blocks: 145.79.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:22:ea:35:3d:b9:f2:d4:b1:85:68:0e:4f:00:dc:96:19:9d:ea:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 13 20:41:06 2026 GMT
Not After : Mar 12 20:46:06 2027 GMT
Subject: CN=2820CA52C2C7BF792CAFC9A6D8A809979C13B0C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:85:a5:e4:37:55:47:86:2d:85:98:5e:89:
a8:e9:9e:80:60:d6:64:9c:9c:cf:9b:bd:1d:ea:4a:
8d:92:1a:aa:7d:46:08:bd:0f:86:bd:0d:d3:a2:35:
d6:cf:4f:85:87:40:16:25:cc:2c:db:c5:58:62:6e:
ce:45:b2:04:32:4c:e7:6c:e6:89:81:c2:ee:32:f9:
cd:1d:dd:c3:39:10:1b:4a:b3:ed:2b:8c:04:62:32:
48:4c:05:e9:92:6f:0a:26:0a:df:8b:28:0d:3b:a9:
58:c2:98:fc:e4:f1:ee:4d:06:c4:92:24:aa:c2:0f:
e3:b6:ef:27:f1:ef:09:91:ba:25:e4:d6:a4:00:78:
d2:ce:e5:24:77:7c:e4:17:7b:7c:9e:da:ea:1a:43:
f9:4f:41:38:ef:dd:9d:b6:ed:3a:e8:35:1a:4e:67:
f8:90:0f:37:54:74:5c:34:ea:59:22:ee:f5:75:39:
11:6f:05:63:9d:99:6a:07:f7:0b:76:7f:a7:40:60:
37:13:fa:ef:37:2c:d8:0e:26:bd:16:80:32:3c:71:
85:35:85:5d:42:08:d7:18:8c:11:02:a1:88:0f:f2:
ee:9f:1c:c1:2f:bd:57:01:25:50:89:25:73:67:79:
0c:7e:f0:b8:7a:f4:d3:ca:26:e7:d1:a5:bb:98:5a:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:CA:52:C2:C7:BF:79:2C:AF:C9:A6:D8:A8:09:97:9C:13:B0:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.134.0/24
Signature Algorithm: sha256WithRSAEncryption
58:11:b4:ae:a2:7b:b2:d7:f6:29:d9:15:43:80:80:38:3e:e3:
df:c4:19:d3:09:43:22:cf:03:a9:ca:c8:63:c5:60:67:48:a1:
a5:16:dd:29:32:af:a2:6f:5b:85:54:b9:d5:52:dd:64:cd:93:
cc:37:f2:cf:e3:b3:6f:c8:ca:0d:63:9b:1d:ab:db:2f:05:7b:
e6:f2:81:5f:6c:f2:dd:c3:5a:3a:9e:6c:00:80:0c:84:98:fd:
08:c3:f1:30:eb:ef:73:a4:db:9b:b0:b6:f8:05:27:3c:cf:14:
97:10:9f:cf:dd:e9:61:59:d2:95:14:c5:1e:56:e0:2c:9d:15:
14:c6:ce:03:81:4f:6b:74:2b:04:f8:e0:79:62:96:7e:64:8a:
4a:ae:a2:25:d9:df:57:42:cf:65:95:1e:93:1e:7b:42:d5:37:
ef:6a:f1:29:c4:31:9c:5f:5f:f4:1a:47:28:02:65:80:f0:10:
a1:e5:d6:85:7b:6f:3a:0a:60:97:74:e3:63:3d:7e:e7:d0:bf:
ed:79:37:8f:9e:15:31:0b:ab:7c:51:f7:0a:43:7d:1f:59:fb:
7b:6a:7b:08:d5:62:7d:8d:a3:47:27:0a:83:35:c8:5f:30:75:
fa:ee:5e:f2:f4:09:4d:ab:ed:a4:a6:a7:04:2f:ab:71:04:e2:
82:16:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:24 2026 by rpki-client