Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: M6sgGfytRCQg41GAUNk8aqHgCGhdYTjJRypjAH6siK0=
Subject key identifier: 1A:FC:10:F8:29:7B:60:58:6E:2E:FB:95:5A:A5:3E:55:5D:F1:FC:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43C096787E1042F878B669C77344DBBA0EDD9724
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 30 Apr 2026 19:23:59 +0000
ROA not before: Thu 30 Apr 2026 19:18:59 +0000
ROA not after: Thu 29 Apr 2027 19:23:59 +0000
asID: 395793
IP address blocks: 145.79.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c0:96:78:7e:10:42:f8:78:b6:69:c7:73:44:db:ba:0e:dd:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 19:18:59 2026 GMT
Not After : Apr 29 19:23:59 2027 GMT
Subject: CN=1AFC10F8297B60586E2EFB955AA53E555DF1FC83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:ad:6b:1b:55:1b:97:f7:ba:1d:39:5e:07:
8d:b4:bf:a4:3b:d4:eb:14:8e:69:eb:da:77:fd:e1:
92:a4:14:70:7e:00:6c:5e:57:00:41:2a:fb:e6:69:
8a:82:4a:6b:3b:d5:37:6b:31:23:d1:b0:2d:47:bb:
cb:6c:40:28:ca:fc:b4:f3:9b:7d:7b:9a:8a:c1:46:
7b:d9:3e:c4:01:56:c6:39:5e:8c:e1:27:30:43:08:
36:f8:51:0e:54:c2:0a:16:10:56:07:67:01:b8:0b:
17:52:e9:75:52:e6:fe:ff:f0:4f:4d:75:46:07:25:
94:ef:84:7b:f4:a6:23:dc:45:fa:f6:8f:e4:51:30:
70:32:2b:fe:fd:2e:29:f7:e3:d9:07:14:9a:b1:dc:
b8:b3:5b:cc:78:f3:37:80:2c:6b:f0:13:d9:6c:33:
ec:03:53:d1:32:95:12:0d:8f:88:af:50:69:dd:62:
2a:84:b4:82:20:97:fd:88:31:76:76:e1:d7:b3:b3:
05:a5:fa:72:01:ae:10:0d:60:d6:d5:db:3f:7e:41:
25:5d:09:5a:16:bd:b1:75:21:f2:d6:88:96:34:72:
b7:9a:83:7d:38:0e:b8:80:80:3a:02:a2:56:9d:e1:
6a:20:99:33:01:bf:92:ca:2c:f1:39:a0:37:63:54:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:10:F8:29:7B:60:58:6E:2E:FB:95:5A:A5:3E:55:5D:F1:FC:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133372e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.137.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:de:f9:2c:f5:66:8b:5e:8f:14:c9:e2:8a:a7:10:6f:43:2f:
5c:01:90:d9:2e:70:68:8f:13:61:10:c6:92:9b:7e:a3:3f:f6:
06:c4:0a:7f:be:02:32:d3:e0:c6:2d:8f:1d:76:5b:e3:36:b7:
fd:0a:8d:c5:30:90:0c:5f:67:4d:f2:bf:8b:78:31:67:23:f2:
f2:d7:11:89:22:ba:1a:b8:5e:08:56:27:ed:7f:29:a4:2c:b8:
de:9c:6a:9d:d0:d2:34:39:15:b4:ab:55:3c:99:9a:ac:a9:d1:
f2:80:7b:06:21:fe:d5:0a:ec:c0:d6:84:32:9f:47:34:5a:fe:
2d:71:20:f2:97:c8:ca:dd:85:7e:6c:c3:31:b9:4b:3b:1e:55:
1d:e2:e6:f0:d5:67:ff:88:94:9e:2e:ed:aa:c4:74:ae:b9:39:
e2:d4:59:b9:7b:bb:40:32:21:ec:db:9e:89:84:c2:7f:34:d6:
cf:a8:5a:0d:37:6e:01:d1:82:5a:cb:56:7f:71:20:7b:63:8f:
30:a0:e8:1d:e0:23:56:4f:4c:3f:b3:61:ee:9c:35:ae:19:a0:
ed:df:25:95:5b:e1:24:28:0f:41:e4:cb:2f:49:3b:79:f4:db:
ec:5c:35:ec:1a:d2:a9:bc:39:6e:1a:b3:4a:f0:b3:dc:a2:b6:
ad:a0:b5:f8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUQ8CWeH4QQvh4tmnHc0Tbug7dlyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MzAxOTE4NTlaFw0yNzA0MjkxOTIzNTlaMDMxMTAvBgNV
BAMTKDFBRkMxMEY4Mjk3QjYwNTg2RTJFRkI5NTVBQTUzRTU1NURGMUZDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzK1rG1Ubl/e6HTleB420v6Q7
1OsUjmnr2nf94ZKkFHB+AGxeVwBBKvvmaYqCSms71TdrMSPRsC1Hu8tsQCjK/LTz
m317morBRnvZPsQBVsY5XozhJzBDCDb4UQ5UwgoWEFYHZwG4CxdS6XVS5v7/8E9N
dUYHJZTvhHv0piPcRfr2j+RRMHAyK/79Lin349kHFJqx3LizW8x48zeALGvwE9ls
M+wDU9EylRINj4ivUGndYiqEtIIgl/2IMXZ24dezswWl+nIBrhANYNbV2z9+QSVd
CVoWvbF1IfLWiJY0creag304DriAgDoColad4WogmTMBv5LKLPE5oDdjVK7JAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUGvwQ+Cl7YFhuLvuVWqU+VV3x/IMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMz
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzNzM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT4kwDQYJKoZIhvcNAQELBQADggEBAE7e+Sz1ZotejxTJ4oqnEG9DL1wBkNku
cGiPE2EQxpKbfqM/9gbECn++AjLT4MYtjx12W+M2t/0KjcUwkAxfZ03yv4t4MWcj
8vLXEYkiuhq4XghWJ+1/KaQsuN6cap3Q0jQ5FbSrVTyZmqyp0fKAewYh/tUK7MDW
hDKfRzRa/i1xIPKXyMrdhX5swzG5SzseVR3i5vDVZ/+IlJ4u7arEdK65OeLUWbl7
u0AyIezbnomEwn801s+oWg03bgHRglrLVn9xIHtjjzCg6B3gI1ZPTD+zYe6cNa4Z
oO3fJZVb4SQoD0Hkyy9JO3n02+xcNewa0qm8OW4as0rws9yitq2gtfg=
-----END CERTIFICATE-----
Generated at Wed May 13 04:12:29 2026 by rpki-client