Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3134312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UwZkDER77mOoherc8c/W5MSDOUHhFOW2Wmg/b9aPBgs=
Subject key identifier: 3B:90:B2:B9:92:A5:BE:4A:24:17:91:B3:7A:37:A5:FE:C4:12:3B:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 14FBB4E92AA86D430EEB6FA2A413CAE1F440B43B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa
Signing time: Thu 24 Sep 2026 09:30:20 +0000
ROA not before: Thu 24 Sep 2026 09:25:20 +0000
ROA not after: Thu 23 Sep 2027 09:30:20 +0000
asID: 834
IP address blocks: 145.79.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fb:b4:e9:2a:a8:6d:43:0e:eb:6f:a2:a4:13:ca:e1:f4:40:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 24 09:25:20 2026 GMT
Not After : Sep 23 09:30:20 2027 GMT
Subject: CN=3B90B2B992A5BE4A241791B37A37A5FEC4123B00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:b8:ba:8e:ca:25:7f:ef:97:89:67:df:c3:
a1:d8:44:cf:f4:05:1e:3b:96:0b:01:66:74:2b:9a:
58:ac:b1:4d:bf:bb:14:89:f0:40:07:25:13:64:e6:
c0:fe:67:54:21:83:9a:32:3a:a1:b2:92:5f:a1:89:
95:4c:b0:80:4b:c6:0e:2c:c6:e9:72:e5:3b:27:70:
6f:08:4d:66:34:11:db:c3:47:1e:10:e7:6c:a7:81:
1e:cc:bd:34:3b:fd:55:3b:2b:cc:fc:18:a5:df:ce:
ef:4f:13:bc:03:aa:ca:a8:12:f8:5f:fd:b0:20:7a:
18:9f:3d:2f:99:94:6b:75:36:56:62:c9:4a:7c:4d:
1b:d5:65:e3:42:7c:97:3a:68:fc:79:28:9e:ef:44:
85:e3:ef:16:5b:23:6d:05:c1:7e:88:08:15:98:c4:
82:c9:cf:91:10:f4:8c:b3:66:2e:c6:ba:ef:a6:2f:
ff:f6:6a:06:0c:66:6a:a9:17:6f:9e:14:04:04:3a:
43:cf:30:79:47:b6:74:59:f8:e8:26:65:bd:54:16:
77:25:fe:53:a8:ea:4b:56:3a:f3:9c:cc:e6:b7:bd:
da:39:a3:da:3b:2e:d6:10:31:a4:42:1d:a0:3a:20:
d5:53:7a:ab:68:50:ee:48:30:f2:84:7e:60:7f:5c:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:B2:B9:92:A5:BE:4A:24:17:91:B3:7A:37:A5:FE:C4:12:3B:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.141.0/24
Signature Algorithm: sha256WithRSAEncryption
50:04:42:ba:7b:ca:51:c8:e2:fe:6f:b2:1d:be:14:b6:12:6d:
f8:c3:b3:69:a8:16:3b:80:4a:4f:e9:7a:e3:14:2a:ad:c1:f7:
77:3f:2f:5e:5d:08:59:03:30:3b:7c:01:c1:d3:fc:af:7e:15:
cd:28:a6:f1:9b:b3:19:ec:00:7c:01:e2:6d:37:dd:c4:82:8d:
61:f7:a4:44:b1:b6:dc:81:ca:18:a4:58:81:af:86:b5:64:0b:
0d:41:51:a3:fe:af:29:2b:23:d2:d9:95:66:d5:a0:e2:ee:2e:
a5:40:22:da:af:0b:84:ea:64:09:2a:30:dc:95:21:af:c9:4b:
3e:2e:9f:a0:0a:20:fc:03:31:ee:fd:e7:7e:2b:38:b5:2a:59:
e6:f9:f3:c4:4e:46:0d:b3:f5:bc:6f:2e:f1:e0:6c:2a:81:75:
1c:1e:1c:ec:1e:90:a9:7f:46:c0:b3:d3:56:86:db:03:c5:7f:
2e:12:11:2a:b2:68:85:b5:7d:ce:a2:26:7c:e4:82:56:e2:57:
bc:06:bb:6b:89:04:53:c8:69:35:08:60:77:09:30:09:fd:ec:
2e:90:15:64:51:89:ea:89:48:eb:3a:89:05:2e:9b:11:ee:ca:
e8:e0:df:28:47:1d:dd:f1:53:f4:de:e6:4d:8b:8b:27:31:6c:
06:b7:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:58 2026 by rpki-client