Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3134302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: Wc4DHR6GPvkoDlbd5v/fWmoPa+p3HZwlnIrZiLg3s0c=
Subject key identifier: DF:7B:A8:8D:DA:43:3F:E5:36:E8:08:B0:62:A0:1D:7D:EC:28:E9:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 142938803EC241FD4C63B87166DBD119FA0A4486
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:04 +0000
ROA not before: Wed 22 Jul 2026 16:31:04 +0000
ROA not after: Wed 21 Jul 2027 16:36:04 +0000
asID: 20473
IP address blocks: 145.79.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:29:38:80:3e:c2:41:fd:4c:63:b8:71:66:db:d1:19:fa:0a:44:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:04 2026 GMT
Not After : Jul 21 16:36:04 2027 GMT
Subject: CN=DF7BA88DDA433FE536E808B062A01D7DEC28E9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:22:51:a6:3b:6b:1e:b3:f1:cf:b1:72:bf:da:
52:94:72:53:be:b2:3d:9b:a9:f6:a0:24:13:88:99:
c9:39:d3:30:72:20:bc:05:db:c2:de:d0:b9:2f:ea:
12:69:69:df:a5:5a:6c:c0:2d:98:fa:3f:df:80:2a:
6c:9b:9d:3b:8b:93:ed:a8:05:6a:9e:85:d1:a6:25:
0e:af:c3:68:fe:38:0b:c3:ad:b2:db:00:33:15:77:
fa:30:c5:63:d6:63:ae:31:a2:dd:ee:bc:03:a6:72:
ce:1a:ea:86:83:bb:56:5a:58:eb:0f:d7:9e:fe:15:
35:90:fd:9e:b6:b3:0a:97:cb:f5:03:57:61:4d:86:
08:44:53:e0:4f:ec:79:71:f4:01:07:7e:11:af:5b:
f9:cb:54:f6:33:2a:57:54:15:13:b1:16:81:66:a1:
fe:95:24:1b:e3:10:f6:34:5d:9c:2d:67:82:2b:99:
f2:a8:38:f0:d0:73:2e:ae:a8:15:f3:f8:8a:d2:b5:
20:84:47:08:08:83:18:e4:1b:6f:c6:9c:f8:20:7b:
97:27:d3:03:15:b0:7a:27:cb:0c:1a:90:32:a3:ee:
99:ad:e4:5d:72:f8:a2:ea:ae:a6:8e:01:11:c7:4e:
bc:7a:1c:47:65:9d:a8:f9:25:2d:cd:cf:6a:c3:3b:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:A8:8D:DA:43:3F:E5:36:E8:08:B0:62:A0:1D:7D:EC:28:E9:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.140.0/24
Signature Algorithm: sha256WithRSAEncryption
00:44:b6:e2:c1:11:63:37:0a:57:b5:80:00:a9:e3:25:ae:47:
a3:95:09:15:a7:73:80:1c:39:78:3c:aa:b4:11:b7:79:72:90:
38:73:bc:e8:a9:6e:8c:c5:b2:31:98:3f:0c:7c:bc:bc:ad:59:
a9:47:00:fe:0b:8d:c6:ca:9a:2b:a5:41:6b:5e:b3:41:85:cd:
3b:06:a1:b5:e4:17:e3:ed:8c:79:32:24:09:6c:db:c5:26:d9:
32:02:e3:b6:5c:ad:4c:81:b3:3d:d1:36:a8:f3:6f:9e:bf:69:
a5:f8:41:13:33:21:8c:6f:05:3a:5b:2d:ab:d7:d8:54:8a:83:
65:6a:1d:f8:16:68:da:5b:21:b8:00:91:30:7f:c1:b4:a8:6b:
59:a2:c4:95:92:39:cd:94:a8:f3:c1:38:63:1a:d9:0b:c0:69:
26:8f:e5:d3:17:e6:0c:48:73:5c:01:f5:9d:80:2f:7c:e8:fe:
7a:f3:79:a0:d6:34:43:4c:91:43:bb:a2:5d:2e:b1:c9:07:b7:
bd:4d:6e:7a:58:b3:cf:d9:c8:6a:0f:00:bd:02:19:a0:fe:dd:
12:d7:d8:7e:ae:19:ef:ac:07:60:9a:a6:65:98:bf:0e:25:82:
76:8c:45:76:dd:14:b4:a0:d2:63:5f:d6:f8:a1:09:68:67:2c:
3e:dd:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:10 2026 by rpki-client