Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3134312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: a3am4YIAnhWN67Nfy1Bmra7KMT59mE8O2N/o/ofrg5I=
Subject key identifier: F2:5B:CC:63:F4:0F:DC:79:D3:A1:E9:2E:8E:29:8D:09:73:61:AB:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39B657685A589E06BDC61641578EE0D4C846E93E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:05 +0000
ROA not before: Wed 22 Jul 2026 16:31:05 +0000
ROA not after: Wed 21 Jul 2027 16:36:05 +0000
asID: 20473
IP address blocks: 145.79.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b6:57:68:5a:58:9e:06:bd:c6:16:41:57:8e:e0:d4:c8:46:e9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:05 2026 GMT
Not After : Jul 21 16:36:05 2027 GMT
Subject: CN=F25BCC63F40FDC79D3A1E92E8E298D097361AB91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:4a:f5:94:ed:eb:e3:fc:b2:a8:d4:bb:f8:
68:c1:d3:3b:95:d0:74:47:7c:61:0c:1b:4e:2b:ce:
0d:80:21:37:93:df:0e:18:f7:db:76:7b:71:ca:a7:
bc:34:46:50:68:ed:e0:a6:b2:da:ba:4d:51:f4:f4:
23:58:39:3c:3b:3d:97:f7:d4:c0:59:1e:e7:d7:42:
2e:26:8b:ef:21:23:81:de:9b:e1:17:61:82:cb:03:
a3:bb:c2:03:39:04:4b:4a:a6:65:1c:35:1d:4f:80:
5c:c2:31:45:1b:f4:64:8a:d8:22:12:88:06:73:30:
c5:28:1c:43:0a:0e:bc:b0:ff:f6:28:e4:3f:3e:7a:
e9:77:ee:6e:34:0c:64:0a:ec:f5:04:e4:cc:14:b4:
6c:72:cf:cb:93:a0:19:28:fb:ec:42:a7:7e:f4:9c:
7b:dd:9a:5f:40:73:42:7d:92:89:e1:e9:9c:b1:fd:
f0:30:b7:dd:36:4b:a2:ee:12:eb:4c:d1:69:03:d0:
5c:33:27:2d:6f:ed:49:e8:19:ab:fd:48:f8:fd:fb:
e9:0c:eb:a6:13:6e:3d:82:c1:c0:20:48:ba:2e:2b:
be:0e:98:c5:b6:17:19:ae:74:45:07:ee:bf:86:f9:
56:7a:b0:e2:3f:ac:b4:37:ff:54:60:c6:cb:3b:89:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:CC:63:F4:0F:DC:79:D3:A1:E9:2E:8E:29:8D:09:73:61:AB:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.141.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5d:5d:12:29:67:f9:7f:67:20:de:9e:57:45:d0:5f:72:9f:
61:49:dc:2e:6c:0d:e5:87:13:74:f1:1e:6d:1e:23:e3:a6:7a:
b7:65:1f:aa:86:3e:7a:63:c4:0d:c3:9d:aa:5e:e2:88:93:61:
df:2c:38:91:0f:7e:eb:06:ac:8a:eb:96:c7:33:1c:b0:90:44:
fb:57:af:aa:01:a2:9d:70:b9:c1:18:1a:a6:02:f5:d8:5e:48:
52:e5:eb:c7:3e:62:cf:e1:67:39:6d:04:7b:a1:68:1e:36:d7:
ee:dc:7c:ba:97:b3:f3:06:d9:b1:04:56:1c:02:b2:a7:f4:a4:
4d:26:12:5e:a8:1f:44:c9:7b:fe:f0:56:df:dd:ba:1a:1c:d8:
73:42:ab:6f:7f:db:2d:fa:12:fd:09:3d:61:53:27:2e:da:72:
35:af:40:91:e3:ff:d5:17:0d:6f:3a:b2:9c:85:85:b0:be:9b:
02:a0:2f:f0:ab:5a:47:22:56:74:c0:72:b6:d5:04:d9:67:6c:
19:64:6c:62:25:f8:8e:81:89:9d:e8:77:50:3f:e0:98:cc:d9:
5e:af:d7:d8:df:4d:ad:5d:0c:df:06:95:26:69:d4:e8:a4:cb:
8e:ab:90:c5:aa:21:80:66:15:be:b4:99:03:1f:75:41:27:b9:
6c:ea:a3:9e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUObZXaFpYnga9xhZBV47g1MhG6T4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjIxNjMxMDVaFw0yNzA3MjExNjM2MDVaMDMxMTAvBgNV
BAMTKEYyNUJDQzYzRjQwRkRDNzlEM0ExRTkyRThFMjk4RDA5NzM2MUFCOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChFkr1lO3r4/yyqNS7+GjB0zuV
0HRHfGEMG04rzg2AITeT3w4Y99t2e3HKp7w0RlBo7eCmstq6TVH09CNYOTw7PZf3
1MBZHufXQi4mi+8hI4Hem+EXYYLLA6O7wgM5BEtKpmUcNR1PgFzCMUUb9GSK2CIS
iAZzMMUoHEMKDryw//Yo5D8+eul37m40DGQK7PUE5MwUtGxyz8uToBko++xCp370
nHvdml9Ac0J9konh6Zyx/fAwt902S6LuEutM0WkD0FwzJy1v7UnoGav9SPj9++kM
66YTbj2CwcAgSLouK74OmMW2FxmudEUH7r+G+VZ6sOI/rLQ3/1Rgxss7iQ7DAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU8lvMY/QP3HnToekujimNCXNhq5EwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU+NMA0GCSqGSIb3DQEBCwUAA4IBAQBBXV0SKWf5f2cg3p5XRdBfcp9hSdwubA3l
hxN08R5tHiPjpnq3ZR+qhj56Y8QNw52qXuKIk2HfLDiRD37rBqyK65bHMxywkET7
V6+qAaKdcLnBGBqmAvXYXkhS5evHPmLP4Wc5bQR7oWgeNtfu3Hy6l7PzBtmxBFYc
ArKn9KRNJhJeqB9EyXv+8Fbf3boaHNhzQqtvf9st+hL9CT1hUycu2nI1r0CR4//V
Fw1vOrKchYWwvpsCoC/wq1pHIlZ0wHK21QTZZ2wZZGxiJfiOgYmd6HdQP+CYzNle
r9fY302tXQzfBpUmadTopMuOq5DFqiGAZhW+tJkDH3VBJ7ls6qOe
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:15 2026 by rpki-client