Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3134372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9lNxNeiiSYqN+gS5JzRUe/jzmY2LbO6joSNv3dNRGnI=
Subject key identifier: CE:2E:AC:52:65:7F:9D:C9:D5:33:0E:E6:81:37:C1:06:41:7B:00:7D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16DC58A15AB8D000D57457279922D330DD68552C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20383334.roa
Signing time: Wed 11 Mar 2026 11:22:57 +0000
ROA not before: Wed 11 Mar 2026 11:17:57 +0000
ROA not after: Wed 10 Mar 2027 11:22:57 +0000
asID: 834
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:dc:58:a1:5a:b8:d0:00:d5:74:57:27:99:22:d3:30:dd:68:55:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 11 11:17:57 2026 GMT
Not After : Mar 10 11:22:57 2027 GMT
Subject: CN=CE2EAC52657F9DC9D5330EE68137C106417B007D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:35:fe:26:6f:ec:57:52:54:9d:69:d4:f3:
e9:2f:49:1a:8b:bd:15:3a:49:95:8e:49:cf:8c:03:
ca:c4:76:6f:f8:6a:9d:36:eb:df:15:86:b2:5a:70:
b3:ac:5a:be:af:5d:e4:ee:a5:f8:79:af:4b:61:c3:
59:e5:a4:73:7b:c5:91:f3:bd:46:a7:0f:7d:c8:35:
05:0a:92:58:bc:0c:1d:70:46:50:63:bf:0a:f2:dd:
17:03:48:61:62:cc:ba:8e:ba:39:dd:88:8b:26:cc:
4e:62:90:75:10:8a:b8:81:be:c6:7a:3c:d3:5b:25:
53:db:64:de:bf:0b:69:42:92:17:60:b9:3e:da:76:
04:c8:2b:1c:ae:d6:51:b5:5a:9a:43:b7:0a:25:01:
ae:ca:9f:e7:97:3e:f0:59:06:4f:19:36:bf:03:3d:
27:b2:02:3b:59:54:b5:49:44:75:b5:ff:58:ec:2c:
3a:3a:1e:cd:a9:59:0e:a8:71:c2:69:0a:54:70:c2:
96:a6:22:da:8c:79:83:84:1a:fd:06:dd:f4:70:9b:
da:83:6c:2b:0d:8a:b0:69:c7:4d:ee:25:a6:c8:69:
f6:87:a3:9e:65:b1:31:3f:73:04:0d:b5:84:5d:ba:
8d:a0:d5:3b:02:1d:5d:b3:ba:2f:8f:83:c1:d5:36:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2E:AC:52:65:7F:9D:C9:D5:33:0E:E6:81:37:C1:06:41:7B:00:7D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e6:0a:26:c7:17:57:cf:6b:b3:2c:c9:80:0e:bc:dd:19:95:
61:9b:36:ec:02:92:17:06:52:c2:fe:09:9e:2b:e9:a8:1d:63:
03:8a:4a:55:41:4e:c1:b8:7e:b1:2a:9f:75:55:13:9b:92:eb:
59:c2:a5:d9:ba:e1:c1:84:4b:68:57:9c:d6:ee:2e:43:6a:bc:
22:e5:b8:bd:06:f4:fd:d9:d9:8e:d0:81:f3:7c:a1:01:10:c1:
47:92:9f:18:b4:b0:6f:e5:1c:ce:e7:2a:bd:6b:19:19:02:f5:
02:c1:3f:f2:5a:ea:7a:b2:d0:20:22:1a:2c:22:e6:56:1b:97:
f7:33:1e:ea:cc:cf:dd:4e:e5:53:57:34:57:22:df:10:7f:40:
59:92:85:88:d9:a9:92:53:df:b6:47:d6:82:db:4f:08:46:ce:
80:e6:d5:9b:f0:51:3d:7f:fd:76:a5:b9:cf:08:d8:e6:0d:82:
73:ac:c2:71:5f:c9:cb:48:88:69:10:99:37:0e:7f:33:07:95:
76:4e:94:2d:02:55:31:b0:cb:00:4a:68:f0:ac:2e:50:7e:f1:
9b:3b:d7:8a:5d:2f:51:d7:af:ba:d7:e5:36:91:58:87:fd:b6:
d2:e9:1e:b4:7f:3f:b1:fa:09:d6:50:d7:a7:91:7d:2b:44:3b:
a2:69:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:26 2026 by rpki-client