Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: EiRbBdcNrb5vSWOfUrgyY6bwzlExsDs2iib4gKGp7r4=
Subject key identifier: 93:0E:EB:14:31:F0:75:F3:47:65:74:F5:19:D4:CF:5F:CD:DB:DF:07
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25570DC0758235F3DE53F368A4D3B522BB0AD780
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 30 Apr 2026 19:23:59 +0000
ROA not before: Thu 30 Apr 2026 19:18:59 +0000
ROA not after: Thu 29 Apr 2027 19:23:59 +0000
asID: 395793
IP address blocks: 145.79.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:57:0d:c0:75:82:35:f3:de:53:f3:68:a4:d3:b5:22:bb:0a:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 19:18:59 2026 GMT
Not After : Apr 29 19:23:59 2027 GMT
Subject: CN=930EEB1431F075F3476574F519D4CF5FCDDBDF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:87:75:99:88:2d:94:81:74:b8:7c:25:36:
0f:28:4d:ca:41:12:0e:06:0f:38:43:1a:f2:d9:8e:
d7:c7:a7:61:e8:06:50:ad:2f:d9:85:2e:76:b6:b1:
be:0e:50:a1:93:de:0e:19:5d:9c:26:bd:4a:2e:6d:
a2:30:60:34:9a:33:00:36:5b:0e:35:f6:1a:c9:b6:
6f:12:18:19:d9:0b:a8:5a:2b:54:e6:bb:50:7a:3e:
49:40:ec:1a:e5:43:17:9e:b1:d9:69:1b:90:b6:92:
05:ed:39:4c:39:17:75:04:21:86:08:45:d9:24:8d:
70:36:d8:fa:fc:53:8f:38:47:3d:8f:ab:7f:e3:f7:
54:3e:bf:0f:f4:48:0f:fc:e9:c0:79:46:b9:7b:2c:
20:27:22:2d:14:a7:30:33:ec:17:80:47:e8:8b:73:
02:4f:00:89:46:28:8f:b4:1a:39:b7:30:2b:00:23:
c6:cc:80:5d:8e:5d:c9:01:06:12:4e:6a:40:84:e8:
68:f4:3b:94:f7:f8:29:59:d0:c2:58:5e:5e:b2:c3:
d5:09:eb:82:6e:2e:ef:88:4a:f2:b7:ed:d1:67:b2:
77:7d:0a:16:cb:80:ce:23:7c:f4:8b:db:8a:2a:a4:
06:90:e0:f4:f5:06:b4:73:8b:8a:39:5a:63:a5:ae:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:EB:14:31:F0:75:F3:47:65:74:F5:19:D4:CF:5F:CD:DB:DF:07
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134362e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.146.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d4:c6:9c:66:ec:0e:0f:94:62:7c:de:ca:d8:ef:a9:a3:8d:
34:f7:12:3a:10:e9:c8:e8:e1:79:ac:8e:7d:91:9e:9a:32:ad:
43:12:55:c0:fa:10:bf:e6:41:20:72:44:c8:27:fc:0a:ad:53:
19:1b:57:30:b1:fe:72:03:83:78:1b:9d:22:09:ba:96:9c:8e:
dd:87:1e:30:3c:e6:d1:b1:b0:98:0c:7d:86:88:e1:25:1b:28:
25:ef:81:b4:22:98:53:eb:98:1c:27:d6:52:27:c4:62:ad:4a:
fa:6d:e2:c7:4a:87:a2:b3:98:98:89:8d:c6:c4:08:82:8f:ce:
52:aa:38:7f:03:e8:d2:da:68:10:f1:ae:3d:f5:4a:8b:aa:ba:
dd:49:45:92:b8:5e:87:85:84:63:3c:08:d8:17:ba:02:d7:28:
db:f8:3f:4b:6d:84:cb:92:69:8f:66:9e:0f:bb:66:92:4f:78:
af:ed:67:c2:1b:f3:bf:da:95:6e:74:11:ef:bb:7d:64:71:3e:
c4:37:13:75:ed:1c:47:ef:1f:d8:68:fc:e6:30:4d:78:c2:b3:
cb:5e:80:4b:c9:3d:cc:cf:e4:c7:69:7c:95:5b:8c:dc:46:f8:
32:74:3a:24:24:1f:4b:ba:82:9d:75:ca:9f:89:6c:2e:6c:76:
07:6f:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:22 2026 by rpki-client