Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134352e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3134352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: k/MGg54wnkfkTWT2luagbBgvuxl9RMQGWDFpsuZcMdA=
Subject key identifier: AC:08:54:A2:AE:38:68:76:3A:8A:95:8E:B3:B2:FD:58:5B:1E:0E:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2CDF0F81AB0DA1D6D8934C9B671163866851C38F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134352e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:07 +0000
ROA not before: Wed 22 Jul 2026 16:31:07 +0000
ROA not after: Wed 21 Jul 2027 16:36:07 +0000
asID: 20473
IP address blocks: 145.79.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:df:0f:81:ab:0d:a1:d6:d8:93:4c:9b:67:11:63:86:68:51:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:07 2026 GMT
Not After : Jul 21 16:36:07 2027 GMT
Subject: CN=AC0854A2AE3868763A8A958EB3B2FD585B1E0E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:7e:c8:ca:3c:07:63:0e:ce:2f:15:c5:65:
01:0d:60:52:69:9e:a1:8c:46:90:09:93:2e:b0:71:
6a:5a:3c:c7:93:2f:1d:3d:d1:c0:7b:bf:c3:45:18:
8a:a7:2f:d3:ce:d2:65:03:70:2a:d8:5f:86:7a:f5:
06:66:7a:1b:5f:2e:fe:04:32:aa:23:2e:5e:79:68:
af:d3:0d:3b:e2:db:86:1a:bc:32:e9:65:3a:9d:64:
12:d9:55:2b:6f:17:7f:70:fc:f1:62:01:0b:ac:e5:
80:d5:ea:43:54:a4:d1:f5:bc:18:3b:63:58:a3:24:
3c:db:97:0c:e2:ba:ad:fc:17:eb:02:b1:44:78:ef:
a8:c3:99:63:2e:b5:fb:9c:fc:0d:b5:4b:c1:13:4d:
58:fa:c4:2b:3d:a9:be:37:28:f9:73:7f:d3:ec:cf:
2e:88:aa:fd:a4:1f:14:4f:a2:2c:8c:77:c6:16:2f:
58:03:2d:1e:6f:a6:84:e4:46:c8:ed:8e:fd:bd:91:
9d:de:de:b9:1f:64:4a:2a:22:4c:fa:73:a0:a8:5b:
84:95:75:ca:45:da:b1:24:d9:7c:e9:ee:20:42:27:
21:d2:47:0c:1a:27:63:04:86:f1:53:e7:81:65:c1:
bc:50:8b:f2:92:28:9b:e4:ea:0d:0e:d0:c4:35:37:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:08:54:A2:AE:38:68:76:3A:8A:95:8E:B3:B2:FD:58:5B:1E:0E:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134352e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ed:80:21:14:ca:c8:34:d1:bf:c4:98:ea:b1:6b:4e:93:29:
99:ad:d1:15:d2:95:cb:64:bd:6f:e2:05:5d:3c:ac:d9:ce:9a:
dc:0f:51:da:56:bd:03:39:6f:ca:63:34:04:a0:ba:49:0d:4c:
69:26:3a:d9:8c:a1:de:9e:58:95:4e:af:08:be:01:a6:52:35:
36:0a:97:d0:9a:79:10:ea:4f:71:02:6d:bf:3a:53:72:c6:5e:
3c:d7:78:84:78:58:d1:8c:35:8d:96:1d:44:4d:82:8e:ac:ef:
6d:50:99:b4:8a:98:59:df:17:50:4d:4a:87:5b:76:b5:d4:00:
ef:54:c3:9c:68:3b:3a:81:35:87:9f:02:fd:8a:77:05:1d:c4:
78:04:82:e7:fb:b9:21:2f:8f:8e:5e:7e:cf:b0:56:b5:55:86:
ed:b6:09:93:93:da:1b:59:e8:52:34:c2:0d:ae:2e:fa:e7:77:
79:c3:d2:b7:84:56:ab:4a:5d:8e:e4:1f:65:4e:2c:d7:45:e8:
65:76:f3:76:9d:b4:71:49:d9:34:58:9f:be:e8:85:75:5f:92:
fc:f7:c4:f2:f1:4e:3b:90:cf:69:45:0c:60:16:e2:79:2c:e5:
af:af:41:bc:17:ac:cb:84:d0:8e:30:ca:ca:32:6f:e4:e4:39:
4d:1e:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:11 2026 by rpki-client