Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133362e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3133362e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: 236MtazLBmIhUPsnVWIGzeOsyq3cDC14Z/S3GAk3jEU=
Subject key identifier: DA:17:A0:8D:B6:45:39:20:9B:B6:E0:02:65:2A:73:21:DF:C2:D4:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CC0C481579B20574EDEC9C9F2323A3727AD0856
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133362e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 30 Apr 2026 19:24:00 +0000
ROA not before: Thu 30 Apr 2026 19:19:00 +0000
ROA not after: Thu 29 Apr 2027 19:24:00 +0000
asID: 395793
IP address blocks: 145.79.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c0:c4:81:57:9b:20:57:4e:de:c9:c9:f2:32:3a:37:27:ad:08:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 19:19:00 2026 GMT
Not After : Apr 29 19:24:00 2027 GMT
Subject: CN=DA17A08DB64539209BB6E002652A7321DFC2D461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:02:ca:61:b3:ac:2c:e4:e7:55:3d:df:29:e6:
ab:e1:58:04:e7:4e:59:88:53:08:86:34:76:19:31:
60:d2:9d:ce:15:df:7d:c6:8a:88:7e:2d:5f:02:48:
f5:67:da:2c:25:c6:da:a7:a3:79:67:6b:a3:ca:ce:
09:7c:f8:c8:f2:b3:b1:44:b1:e6:e1:03:22:af:9e:
f9:22:cd:23:62:85:b9:ab:66:24:f3:f3:ac:31:22:
ab:63:44:c9:3c:f6:b7:e0:a7:e6:cd:05:16:f3:46:
8d:48:eb:fc:76:33:d5:0e:1b:72:30:42:34:ca:03:
c5:f7:c7:81:98:b6:4b:8a:37:df:0c:65:14:74:69:
d7:12:1f:95:3e:71:bb:c8:ef:df:49:f6:22:d6:01:
8b:58:0e:f0:0c:34:ba:2f:f8:e1:25:14:c2:8c:b4:
3a:f5:8e:ae:3a:1b:84:b0:73:10:0b:57:4c:93:24:
96:48:e0:c8:8f:76:f9:8d:8b:2b:ce:ed:7f:50:43:
bd:cd:91:bb:26:91:e9:33:26:11:87:7c:ce:33:73:
90:ba:ff:dd:7f:35:08:bf:48:20:19:74:e9:a8:64:
b5:ab:1b:55:52:85:56:c2:42:8c:62:46:88:09:60:
a3:49:5b:63:28:6f:97:f3:0d:8b:78:4b:5a:43:a3:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:A0:8D:B6:45:39:20:9B:B6:E0:02:65:2A:73:21:DF:C2:D4:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133362e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.136.0/24
Signature Algorithm: sha256WithRSAEncryption
91:69:d5:b9:84:f8:ce:08:e7:7b:53:4a:52:46:b6:96:bf:ac:
a9:25:4f:3b:f3:81:f2:b4:1d:57:3b:5d:99:4c:1a:07:bd:a7:
57:cc:91:24:16:5d:0f:a5:c3:31:9e:bc:d1:54:ec:22:3d:f7:
9e:86:83:32:35:e4:07:a2:e4:66:6a:93:a6:54:cc:f9:de:85:
74:d4:17:a9:6e:74:79:b8:49:34:ae:2c:98:22:21:b1:85:5d:
9c:91:bc:14:fb:b2:82:3a:28:6a:45:56:b6:9f:5a:95:78:76:
e1:28:d8:15:7d:cc:74:79:ea:c7:e8:6c:48:b8:3d:20:2b:3a:
82:56:54:51:97:52:6d:33:12:10:f2:00:f2:3c:cd:0c:08:3b:
e7:16:6f:44:a2:c5:45:da:f3:4a:1c:11:a5:dc:2b:37:05:57:
d3:ef:00:fb:a1:6b:4c:66:b9:67:5e:4e:b4:f1:73:80:c0:a2:
73:c6:b8:e1:f3:fe:68:76:a8:10:83:f4:32:1e:9c:8e:93:0c:
b4:39:53:41:0f:b6:ce:7a:6f:a9:1f:c8:e6:c0:5f:cf:10:d6:
2a:d1:79:c1:df:2c:6e:5c:9c:be:3e:3b:da:c9:73:9f:25:43:
fd:1e:83:2e:d9:fb:d8:7c:04:28:0b:2f:c2:59:1d:d9:5d:88:
2a:01:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:15 2026 by rpki-client