Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133352e302f32342d3234203d3e20333935333734.roa
File: 3134352e37392e3133352e302f32342d3234203d3e20333935333734.roa (raw, json)
Hash identifier: KtZMyqgwSsU5yFD1kXoLL/iZXxxYWnWbazZd4to4JnA=
Subject key identifier: C8:2F:58:2C:B1:52:BB:05:29:13:79:9E:83:29:A0:7F:82:72:AF:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 11DCB187F6ECC3C88A7BA4B68D9A4057CE37C543
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133352e302f32342d3234203d3e20333935333734.roa
Signing time: Mon 22 Jun 2026 13:25:33 +0000
ROA not before: Mon 22 Jun 2026 13:20:33 +0000
ROA not after: Mon 21 Jun 2027 13:25:33 +0000
asID: 395374
IP address blocks: 145.79.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:dc:b1:87:f6:ec:c3:c8:8a:7b:a4:b6:8d:9a:40:57:ce:37:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 22 13:20:33 2026 GMT
Not After : Jun 21 13:25:33 2027 GMT
Subject: CN=C82F582CB152BB052913799E8329A07F8272AF01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:17:ea:19:6d:55:14:6c:ea:35:1c:ec:b6:
27:aa:bc:95:5b:f3:eb:9f:5e:25:30:45:d8:eb:f1:
48:d5:fe:f3:6a:1a:68:f0:bc:e5:f8:4d:97:34:9d:
03:c7:a2:d5:e4:58:c0:b1:94:f3:f0:e9:e4:35:ca:
e7:67:46:fa:bb:53:f2:2d:0e:e5:b3:56:69:72:ab:
26:4b:7d:04:8c:7f:c8:f6:52:14:99:23:3e:aa:a9:
e7:12:a8:79:3f:07:01:1d:5f:09:99:ab:1e:d7:3f:
83:87:d9:57:5f:8f:62:aa:08:b5:d5:88:fc:3c:40:
f0:4d:76:42:6e:1a:a1:97:38:aa:ac:c5:b9:ee:0e:
53:ec:cd:b9:a8:0e:c9:c6:15:a2:96:19:5b:43:48:
c8:f7:d9:58:66:e4:df:fd:fb:f0:1a:a1:6c:94:d0:
30:d0:62:78:a7:a6:7c:f6:fa:8e:27:05:04:a8:da:
ba:4f:9b:87:91:63:39:0f:c2:20:11:ea:3d:ab:26:
b5:45:22:c2:1e:ac:bc:16:10:21:a7:87:78:db:27:
83:99:ee:f4:57:c1:8d:ba:d5:b5:2f:4c:cf:c1:08:
9a:7b:90:d5:e2:a9:9e:af:67:80:c0:c0:03:01:75:
00:4b:2a:ca:50:e3:e5:b5:59:25:c0:6b:b3:98:e1:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2F:58:2C:B1:52:BB:05:29:13:79:9E:83:29:A0:7F:82:72:AF:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133352e302f32342d3234203d3e20333935333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.135.0/24
Signature Algorithm: sha256WithRSAEncryption
94:67:a2:2c:f2:dc:57:a9:a9:2b:b4:30:ba:9a:a3:d0:4f:69:
ae:06:68:d4:96:8a:a7:e4:b4:3b:51:42:c2:92:3f:ff:da:48:
f0:f8:9d:54:c5:bb:77:f6:84:64:7b:82:8d:22:61:3a:5d:1b:
17:87:c3:68:ba:67:19:5c:43:25:11:d6:ea:6f:00:63:77:58:
25:cc:12:a5:c9:86:5b:db:17:ed:14:86:3a:53:f0:69:18:c2:
a4:de:0e:99:6c:4e:aa:12:10:52:cb:4f:b6:91:b2:00:96:b2:
6a:2c:40:45:91:07:de:8f:fd:e5:6c:15:70:54:58:33:ec:2c:
62:5b:30:00:52:8d:13:d5:99:09:78:23:5b:89:a1:a8:ce:da:
a5:93:03:ab:9b:4e:30:8b:1f:8c:d2:f0:85:e1:9b:05:ed:9d:
36:71:6c:21:aa:43:11:42:e3:38:19:4b:74:ee:6e:00:50:c5:
91:d2:06:7c:29:32:38:6b:06:36:a5:1a:e4:53:83:d5:ab:c5:
5f:52:ad:2f:44:8d:34:5e:c0:06:7e:00:de:39:0e:59:bb:02:
e3:19:de:7d:01:45:c4:87:24:4e:10:dc:c2:a4:62:72:17:4e:
1d:1a:65:9b:c1:ca:8a:bb:07:0d:f5:94:2b:79:b9:62:9e:cf:
f7:c4:e8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:52 2026 by rpki-client