Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3134372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: NsSr5suLp7/a1M18lH0cQnrkHh1Gy4sdGrnYjdtv+H4=
Subject key identifier: 09:AB:89:22:71:AD:16:3D:50:D5:A0:DE:62:52:50:48:3E:77:41:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 42B87BA97672565DD72A98A15D33563175D365CF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:08 +0000
ROA not before: Wed 22 Jul 2026 16:31:08 +0000
ROA not after: Wed 21 Jul 2027 16:36:08 +0000
asID: 20473
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b8:7b:a9:76:72:56:5d:d7:2a:98:a1:5d:33:56:31:75:d3:65:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:08 2026 GMT
Not After : Jul 21 16:36:08 2027 GMT
Subject: CN=09AB892271AD163D50D5A0DE625250483E774162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:0e:f1:b1:e6:7e:13:f9:dc:80:e1:c7:90:
b5:0f:90:ac:b2:fc:71:1d:dd:d5:2e:7c:40:a0:55:
11:94:4f:70:45:3b:4b:be:f3:37:9f:80:5a:6a:f2:
b9:4f:c2:7f:31:97:5d:32:b3:54:2e:91:d3:4f:38:
ee:3d:ec:c6:d6:2d:9e:9b:0a:1d:2a:98:9b:e3:f1:
0d:7f:dd:53:94:81:82:53:ae:0f:35:56:ac:c7:9a:
2f:43:57:b0:63:df:30:03:5c:b8:c0:5e:37:cd:22:
02:b9:b2:c3:b5:67:62:d3:0b:ec:99:06:15:54:c5:
06:e3:5b:c4:f2:df:07:65:32:34:fe:0c:9b:43:c5:
8d:41:3f:16:d8:92:31:87:92:e9:45:95:26:09:cc:
12:14:3b:95:5b:08:0e:f6:09:59:5e:2b:45:9a:fa:
f7:94:84:36:45:ef:0a:75:97:0c:4e:8c:68:21:61:
33:de:0c:61:ea:0c:e4:c2:7b:dc:54:31:dd:6d:0b:
93:86:18:f6:e4:fe:43:6b:b7:81:c2:00:33:13:3c:
de:38:06:4f:fe:ef:b6:5d:74:ef:f6:17:18:ed:42:
ad:63:25:42:9a:a7:a1:56:de:06:f6:a2:ab:8f:0e:
e1:30:33:e7:1f:6a:83:7d:71:81:67:6c:26:b0:45:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:89:22:71:AD:16:3D:50:D5:A0:DE:62:52:50:48:3E:77:41:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:91:21:7f:51:89:a0:d9:90:c4:44:fd:03:d5:86:22:dc:2d:
13:26:e8:b6:ee:98:f8:23:b1:c6:2b:c9:fc:23:3e:f6:ba:7d:
c9:db:be:c8:ed:eb:5c:07:3a:d3:66:20:36:9e:d3:0e:f0:d3:
b0:16:c9:49:26:55:fd:69:3c:5a:aa:48:5f:4a:c3:42:aa:f2:
7a:e8:c8:48:21:ee:18:76:c7:c3:17:3d:e4:06:74:d9:79:c0:
d4:02:cf:db:94:e5:79:5f:33:35:ba:87:3a:96:fe:42:08:d0:
3b:16:dd:db:fc:c6:cb:3a:a0:5a:59:14:c5:a1:45:16:64:f6:
98:6a:68:48:76:ae:09:38:b2:d7:31:42:2e:df:b0:5a:6e:ea:
26:a0:4f:4e:74:44:a2:9e:7b:f4:cf:c0:71:8f:95:47:bf:94:
a7:33:bc:96:0c:27:fe:21:11:c1:79:a6:21:b6:5b:54:cf:14:
e9:b7:9a:0c:e1:06:59:f2:31:e8:f9:13:dc:14:5b:a6:30:12:
da:04:60:f8:3c:d6:6a:4c:3b:52:7a:4b:16:4c:20:27:3a:ab:
87:8f:fe:9c:9c:25:cb:ac:6e:7c:a2:f2:63:31:91:37:25:9c:
6e:cc:8c:2d:bb:31:34:0d:31:81:9e:5f:1b:74:11:08:f9:9e:
b2:d9:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:11 2026 by rpki-client