Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3134342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: g57ycCpTScNxqPLzyCKwktow+bax/mMDjZs42f5/Ca0=
Subject key identifier: 1E:AB:35:DD:E9:C5:8D:CF:C2:54:F9:30:D8:AD:E6:27:76:56:21:7B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1E2C46259A426C690BBE677EB080DA607065839F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:06 +0000
ROA not before: Wed 22 Jul 2026 16:31:06 +0000
ROA not after: Wed 21 Jul 2027 16:36:06 +0000
asID: 20473
IP address blocks: 145.79.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2c:46:25:9a:42:6c:69:0b:be:67:7e:b0:80:da:60:70:65:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:06 2026 GMT
Not After : Jul 21 16:36:06 2027 GMT
Subject: CN=1EAB35DDE9C58DCFC254F930D8ADE6277656217B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:3a:35:27:41:23:44:b7:3d:2c:d7:fe:e7:
3c:5c:8a:13:94:85:24:3b:0f:f0:8d:1b:cf:c6:1b:
07:34:c2:8a:14:fd:fb:9c:a6:dc:60:2b:ab:dd:fa:
67:87:97:c7:81:06:89:a3:6d:77:70:f3:dd:91:c8:
cc:4f:b2:03:58:02:c4:48:89:87:05:31:67:16:38:
20:9b:b3:31:a9:c4:19:83:82:f9:32:a6:d0:68:97:
1f:80:05:97:9c:f7:da:e8:9c:ee:85:6e:17:4e:4a:
fb:a2:0c:6c:52:e1:86:a7:ac:ac:4c:40:fa:44:66:
74:f2:3c:ae:62:41:b6:fb:9d:40:ab:ad:fb:8f:c2:
92:0b:c0:33:2d:79:4b:ad:fb:2d:b4:fa:0d:de:2d:
69:13:85:5e:31:59:17:c2:7a:2d:1f:6d:d3:4a:29:
38:2a:16:c7:8b:94:92:c4:e1:9d:75:6b:36:7e:c3:
12:1d:ee:73:5b:e7:15:0f:42:90:75:1a:2a:75:d3:
5d:11:22:9c:07:ee:31:56:c9:61:81:d4:87:a7:d2:
e8:fd:ef:b0:a9:3e:b3:b9:b6:87:a1:b8:3f:4e:93:
e2:c4:3a:ac:3f:e6:49:05:08:0e:e2:32:2f:8f:f4:
de:35:d7:48:f1:49:45:6d:04:99:75:09:52:5c:35:
a7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AB:35:DD:E9:C5:8D:CF:C2:54:F9:30:D8:AD:E6:27:76:56:21:7B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.144.0/24
Signature Algorithm: sha256WithRSAEncryption
75:65:70:9c:1f:61:cc:ed:0f:17:7e:20:7f:d9:04:d6:ee:de:
b2:04:30:b9:12:3c:60:c2:63:8b:8b:02:f1:94:76:08:db:bd:
e1:cd:4e:8e:d0:6a:48:0d:07:34:64:17:a3:22:a8:9f:18:cd:
6c:eb:f6:70:a0:5b:b4:fd:c9:b6:7a:dd:29:4e:dd:57:3e:d4:
ed:e4:5c:2f:34:59:ba:ea:3b:28:df:e8:af:ae:31:e3:28:c9:
1c:36:24:69:96:2c:75:0c:37:da:a2:2f:50:46:a6:d6:6d:ef:
87:16:75:1e:4b:f9:fe:91:6b:82:2e:1a:d7:1d:28:10:60:8f:
ff:e7:0b:d9:76:f0:df:02:74:0d:52:9e:a2:44:20:20:da:48:
aa:c2:63:c0:65:5a:5f:18:61:99:f1:72:64:38:4c:e7:a7:fc:
2c:c9:b4:64:74:fa:53:7b:4b:5b:65:78:09:82:b3:70:cb:15:
8a:03:5b:5c:64:24:9d:71:d5:b6:d3:78:c1:00:df:70:a3:7f:
35:92:90:54:0a:d8:ce:42:75:5c:82:de:2a:37:ab:a6:d8:3a:
c9:9c:69:1c:fc:15:8b:97:ff:32:2d:72:54:64:42:57:dd:44:
80:09:c5:02:f4:1b:00:17:68:23:cb:65:7c:86:7f:bd:68:61:
25:b3:fc:ed
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHixGJZpCbGkLvmd+sIDaYHBlg58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjIxNjMxMDZaFw0yNzA3MjExNjM2MDZaMDMxMTAvBgNV
BAMTKDFFQUIzNURERTlDNThEQ0ZDMjU0RjkzMEQ4QURFNjI3NzY1NjIxN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWTo1J0EjRLc9LNf+5zxcihOU
hSQ7D/CNG8/GGwc0wooU/fucptxgK6vd+meHl8eBBomjbXdw892RyMxPsgNYAsRI
iYcFMWcWOCCbszGpxBmDgvkyptBolx+ABZec99ronO6FbhdOSvuiDGxS4YanrKxM
QPpEZnTyPK5iQbb7nUCrrfuPwpILwDMteUut+y20+g3eLWkThV4xWRfCei0fbdNK
KTgqFseLlJLE4Z11azZ+wxId7nNb5xUPQpB1Gip1010RIpwH7jFWyWGB1Ien0uj9
77CpPrO5toehuD9Ok+LEOqw/5kkFCA7iMi+P9N4110jxSUVtBJl1CVJcNaezAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUHqs13enFjc/CVPkw2K3mJ3ZWIXswHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU+QMA0GCSqGSIb3DQEBCwUAA4IBAQB1ZXCcH2HM7Q8XfiB/2QTW7t6yBDC5Ejxg
wmOLiwLxlHYI273hzU6O0GpIDQc0ZBejIqifGM1s6/ZwoFu0/cm2et0pTt1XPtTt
5FwvNFm66jso3+ivrjHjKMkcNiRplix1DDfaoi9QRqbWbe+HFnUeS/n+kWuCLhrX
HSgQYI//5wvZdvDfAnQNUp6iRCAg2kiqwmPAZVpfGGGZ8XJkOEznp/wsybRkdPpT
e0tbZXgJgrNwyxWKA1tcZCSdcdW203jBAN9wo381kpBUCtjOQnVcgt4qN6um2DrJ
nGkc/BWLl/8yLXJUZEJX3USACcUC9BsAF2gjy2V8hn+9aGEls/zt
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:10 2026 by rpki-client