Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3134372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: u2zzBcxTWUoEZLVVmiXHEECcXcHZPFmNynW14hYZEng=
Subject key identifier: 38:D0:6F:00:E9:5C:BF:34:24:84:89:76:2A:9D:C9:C2:F5:DC:7D:5A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 35E73DE8B6F8E3AD998DF10C9D9F06614854C8D1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20383334.roa
Signing time: Thu 24 Sep 2026 09:30:15 +0000
ROA not before: Thu 24 Sep 2026 09:25:15 +0000
ROA not after: Thu 23 Sep 2027 09:30:15 +0000
asID: 834
IP address blocks: 145.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e7:3d:e8:b6:f8:e3:ad:99:8d:f1:0c:9d:9f:06:61:48:54:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 24 09:25:15 2026 GMT
Not After : Sep 23 09:30:15 2027 GMT
Subject: CN=38D06F00E95CBF34248489762A9DC9C2F5DC7D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:16:2c:fc:0a:a0:ef:d0:fe:a0:ae:56:05:
3f:c2:99:e0:ea:ef:8e:8a:3b:27:90:8c:36:04:dd:
22:9f:87:01:70:f7:cd:23:09:9f:b4:cd:1a:75:ea:
f9:35:f7:4c:d1:50:f0:13:05:ba:83:52:e7:93:3b:
cf:cd:e9:88:09:93:6a:bd:12:a6:18:3f:80:2a:08:
0d:b0:71:ee:98:4a:ce:57:dc:e0:8a:6d:84:17:5a:
af:f8:32:ba:78:be:ef:68:60:94:96:bc:be:a7:29:
0a:06:81:b6:a9:56:73:b2:c0:ff:9e:9c:93:8d:50:
03:fe:5f:ea:cc:f5:2b:02:79:33:8d:9f:39:f0:58:
eb:ee:e4:50:1d:f1:6e:51:9b:11:e1:0e:7a:09:31:
dd:49:51:a2:a6:67:ff:d7:f1:10:3a:04:e3:be:2d:
eb:ef:df:fd:19:79:35:e7:43:ed:88:70:5a:04:97:
5f:40:89:20:6c:3d:31:06:b3:0b:ab:fd:43:3d:1f:
06:a0:69:66:e0:93:a0:96:19:e6:64:fe:05:4c:5c:
36:e4:00:0c:54:46:06:50:de:dc:10:18:d7:a7:de:
45:73:87:4b:9b:0d:bd:d0:6e:5a:a7:43:e0:39:fd:
82:5b:71:f0:38:11:b4:ce:c2:57:7a:f4:a3:f2:ec:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:6F:00:E9:5C:BF:34:24:84:89:76:2A:9D:C9:C2:F5:DC:7D:5A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a4:ea:e3:07:e0:b3:d5:d3:57:95:0b:ea:79:b8:54:92:68:
39:bf:a1:07:7c:99:1c:4d:e3:38:a2:c6:80:8e:94:90:bd:49:
76:15:a8:f6:66:c6:45:07:28:58:18:c8:73:29:cb:fa:0d:56:
1b:c8:96:cd:72:49:99:77:eb:fe:cc:06:b8:58:35:6c:11:bf:
9b:f0:84:e8:56:6f:68:ab:49:6a:1b:fa:a5:4e:79:55:da:21:
43:29:1f:08:32:a3:0f:e0:ff:99:2d:e5:26:20:ea:d5:3d:73:
98:ea:63:91:c1:ce:94:6e:24:9c:d0:a9:07:82:cb:c7:64:cb:
cc:4e:24:f5:dd:09:3c:0a:c3:4c:b7:2b:40:66:ba:61:cf:7a:
52:5d:82:44:f9:b6:c3:1d:a5:da:fe:54:36:8c:2b:c1:b6:04:
01:4c:e0:42:7c:60:22:0d:ab:1a:68:fc:61:3d:dc:67:d0:bf:
18:be:a9:a3:38:92:0c:be:87:d3:06:1a:6d:4c:cb:1a:52:aa:
1c:89:c4:ae:0d:64:fc:56:56:18:6c:f2:71:3a:eb:f0:88:d9:
9f:72:d7:8d:6f:3c:f9:77:d6:43:69:1b:09:d1:02:85:ac:c6:
ee:f3:b8:2b:cf:cd:51:8e:7d:9b:85:64:5b:96:44:51:2a:79:
89:b4:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:46:58 2026 by rpki-client