Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3134342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: i0RC9YLkaXpsC5tbT6CufkeFVjribiXaJ+t+cCkxGis=
Subject key identifier: E9:9D:1E:A6:11:AE:23:19:B9:8E:F2:49:44:9E:71:DD:1F:02:32:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 689902A033E46ECD6DEFE0CE4631B8AE1C5266DB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e20383334.roa
Signing time: Thu 24 Sep 2026 09:30:05 +0000
ROA not before: Thu 24 Sep 2026 09:25:05 +0000
ROA not after: Thu 23 Sep 2027 09:30:05 +0000
asID: 834
IP address blocks: 145.79.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:99:02:a0:33:e4:6e:cd:6d:ef:e0:ce:46:31:b8:ae:1c:52:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 24 09:25:05 2026 GMT
Not After : Sep 23 09:30:05 2027 GMT
Subject: CN=E99D1EA611AE2319B98EF249449E71DD1F0232FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:38:40:f4:9c:f4:82:a0:f5:dc:db:bf:1f:
b8:e5:76:ba:cf:8c:40:12:8b:d3:a0:89:7b:96:64:
6f:b1:20:7c:e7:01:9a:80:4f:af:dd:df:44:b2:86:
ee:41:19:ec:b9:30:29:02:ab:4d:2e:4a:c2:05:43:
c8:90:5d:b4:04:9b:b6:82:83:7a:f6:88:14:40:ef:
f4:0f:01:86:07:c3:d5:77:cb:b1:e9:39:5a:39:d6:
9b:39:11:29:ac:00:ab:23:b7:d0:f1:f2:ac:fa:02:
de:ac:53:32:5a:7f:17:77:53:15:ac:95:df:66:fe:
23:a3:19:70:ae:38:7e:24:bd:1d:65:5c:72:fa:ae:
d6:87:9e:02:02:cb:f7:7d:b8:5f:6d:65:4a:82:a3:
a5:d2:2e:e5:c6:85:01:a1:6e:64:a1:0e:c7:49:80:
4f:39:68:fc:e9:27:36:bb:50:39:f3:5c:bf:dc:ff:
f2:b1:3d:02:87:4c:38:7f:cc:99:0d:bb:8f:80:75:
8f:86:0f:5b:af:45:7e:67:46:36:ef:f0:f7:94:53:
52:06:27:da:a2:9b:12:d7:ca:dc:68:3b:88:9b:91:
c4:0b:d0:ce:cb:dd:40:b8:fd:81:e9:dc:51:ca:12:
b3:c4:cd:ea:18:41:5f:41:40:d9:23:ad:dd:9c:b5:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:1E:A6:11:AE:23:19:B9:8E:F2:49:44:9E:71:DD:1F:02:32:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.144.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6f:37:81:31:aa:47:51:dd:69:ba:4b:28:e4:ec:61:a2:55:
9a:e8:cf:1e:09:a5:b4:05:6c:f0:ae:f4:b9:48:0f:c5:2f:5f:
c2:ba:55:ad:fb:bb:12:f3:f2:ba:16:b1:9d:ac:8b:95:fd:b3:
c9:2e:8a:51:66:95:35:6d:7b:92:41:be:af:f4:5b:b2:63:df:
8e:0e:62:b0:d5:63:6c:29:37:4b:b3:9a:32:05:47:ff:6d:0a:
0e:63:66:c0:36:b7:7c:a4:ff:ca:21:06:6f:68:ca:c1:16:5d:
7c:c6:79:c1:68:c4:16:ad:50:be:56:14:14:10:32:af:f0:eb:
c8:8e:59:62:8b:41:df:d9:74:0c:71:26:b4:aa:51:e5:0d:40:
42:cd:e4:de:5e:79:71:74:34:98:4e:84:c8:bd:05:38:bb:8d:
fb:f1:8b:64:b5:1d:36:0d:72:bd:a9:76:5d:57:6b:7a:2e:62:
76:15:b4:2b:9d:e2:0e:f3:90:3c:de:66:b7:8b:37:1d:1c:7d:
81:ec:be:ab:10:f7:ee:db:d0:4f:46:8e:b6:0a:09:c0:7d:99:
e3:98:46:85:c2:5a:e0:58:8a:16:ac:e0:0e:c4:dd:f8:de:8b:
d2:14:6b:5d:64:d6:5d:31:f5:ce:1a:a0:19:8d:c6:48:6a:a8:
d1:6e:2c:f1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUaJkCoDPkbs1t7+DORjG4rhxSZtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjQwOTI1MDVaFw0yNzA5MjMwOTMwMDVaMDMxMTAvBgNV
BAMTKEU5OUQxRUE2MTFBRTIzMTlCOThFRjI0OTQ0OUU3MUREMUYwMjMyRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqThA9Jz0gqD13Nu/H7jldrrP
jEASi9OgiXuWZG+xIHznAZqAT6/d30Syhu5BGey5MCkCq00uSsIFQ8iQXbQEm7aC
g3r2iBRA7/QPAYYHw9V3y7HpOVo51ps5ESmsAKsjt9Dx8qz6At6sUzJafxd3UxWs
ld9m/iOjGXCuOH4kvR1lXHL6rtaHngICy/d9uF9tZUqCo6XSLuXGhQGhbmShDsdJ
gE85aPzpJza7UDnzXL/c//KxPQKHTDh/zJkNu4+AdY+GD1uvRX5nRjbv8PeUU1IG
J9qimxLXytxoO4ibkcQL0M7L3UC4/YHp3FHKErPEzeoYQV9BQNkjrd2ctY43AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU6Z0ephGuIxm5jvJJRJ5x3R8CMvwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT5Aw
DQYJKoZIhvcNAQELBQADggEBAFJvN4ExqkdR3Wm6Syjk7GGiVZrozx4JpbQFbPCu
9LlID8UvX8K6Va37uxLz8roWsZ2si5X9s8kuilFmlTVte5JBvq/0W7Jj344OYrDV
Y2wpN0uzmjIFR/9tCg5jZsA2t3yk/8ohBm9oysEWXXzGecFoxBatUL5WFBQQMq/w
68iOWWKLQd/ZdAxxJrSqUeUNQELN5N5eeXF0NJhOhMi9BTi7jfvxi2S1HTYNcr2p
dl1Xa3ouYnYVtCud4g7zkDzeZreLNx0cfYHsvqsQ9+7b0E9GjrYKCcB9meOYRoXC
WuBYihas4A7E3fjei9IUa11k1l0x9c4aoBmNxkhqqNFuLPE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:47 2026 by rpki-client