Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32332d3234203d3e20383334.roa
File: 3134352e37392e3134382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: fmXrTofl2YPojp6ArAqXp/2nyuLlhtF+tsBjvl84Cq8=
Subject key identifier: A8:A0:71:B8:AF:1F:A6:E8:01:99:4D:91:D6:80:2C:AE:54:F9:9B:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 292D57790FBD9B379313C791D743D8194A6041C3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32332d3234203d3e20383334.roa
Signing time: Mon 04 May 2026 09:53:36 +0000
ROA not before: Mon 04 May 2026 09:48:36 +0000
ROA not after: Mon 03 May 2027 09:53:36 +0000
asID: 834
IP address blocks: 145.79.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2d:57:79:0f:bd:9b:37:93:13:c7:91:d7:43:d8:19:4a:60:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 4 09:48:36 2026 GMT
Not After : May 3 09:53:36 2027 GMT
Subject: CN=A8A071B8AF1FA6E801994D91D6802CAE54F99B4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:92:db:ed:c8:5c:66:6a:f5:b1:05:5a:e1:
c2:73:7b:0d:1b:42:ee:c8:a0:dd:51:d4:3e:4d:8d:
da:50:e4:bd:3f:3e:7f:05:8e:9e:1b:76:ca:38:cb:
99:9d:54:94:ae:05:65:43:b9:f0:73:bb:18:22:d5:
22:68:1a:4b:27:45:3c:76:c3:78:59:0c:49:53:09:
68:7d:5d:0a:cf:0b:95:eb:31:9d:f3:59:4c:ce:99:
e1:03:ec:ce:d6:8a:9c:a6:4a:f3:c6:57:45:b8:63:
76:e5:4d:e1:09:24:a6:af:53:d3:88:e6:09:37:42:
20:b9:8a:03:f5:99:8b:6e:c3:15:a2:e6:2b:ef:fb:
c0:99:4e:ed:7f:6d:38:3b:2c:53:9e:e4:95:89:3a:
b2:1a:81:4c:20:32:cc:a1:57:7c:67:e1:da:67:e4:
11:d8:46:12:ab:27:88:14:76:7d:ad:45:34:f4:7e:
cf:43:e0:f5:7a:ce:d3:da:93:6b:62:ec:42:82:00:
9c:9d:fc:a4:e0:8a:ad:ba:03:49:5b:bc:14:f6:6e:
29:e3:e7:ea:8c:c3:99:48:16:37:e8:71:1d:f2:60:
dd:5f:ec:43:06:d7:e6:b4:ca:a8:81:27:7b:e0:9f:
ff:df:55:bd:59:64:a3:1c:5a:d5:5d:e6:df:10:da:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:71:B8:AF:1F:A6:E8:01:99:4D:91:D6:80:2C:AE:54:F9:9B:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.148.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b2:3b:00:31:c8:aa:d9:86:d7:5e:e0:9a:80:e6:ca:a8:8b:
b8:59:89:02:47:8c:fb:18:d7:01:21:b0:1e:35:88:5b:fb:39:
7b:87:e8:29:87:7a:f0:d8:81:f5:69:ab:c0:3c:b3:da:ab:9e:
8e:89:4e:81:0a:48:90:ce:5b:25:82:f9:5b:88:d4:60:63:2e:
a0:5e:80:0d:3a:46:14:83:6a:02:ed:1b:39:11:e8:12:23:8e:
da:4c:7b:c1:c4:41:0b:5e:2f:ba:43:9a:82:9e:ed:75:36:52:
f3:c4:0c:89:c5:24:b2:26:9e:01:78:51:e0:88:05:36:c7:2e:
3e:5e:9c:63:5a:07:28:69:a1:e2:fd:13:c2:dd:6c:49:d9:0d:
d4:6a:64:a4:83:3e:7c:6e:06:b9:12:4a:21:55:8c:c8:47:5a:
01:7c:93:d7:f9:d7:15:76:6e:c6:bd:bc:e1:24:f2:e9:c7:14:
f7:d4:7a:96:bf:be:6d:a2:47:d5:21:75:b5:f0:24:6c:ab:0d:
99:11:8a:b1:9e:9e:82:2a:08:e2:30:6d:4d:c0:f7:40:71:5a:
b2:f2:3a:a1:70:a0:be:ac:05:71:cb:3c:fe:95:50:29:6f:c0:
b5:f2:d8:88:08:92:08:38:52:2c:63:b4:04:2e:db:e3:fc:39:
bc:9d:84:8e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUKS1XeQ+9mzeTE8eR10PYGUpgQcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA1MDQwOTQ4MzZaFw0yNzA1MDMwOTUzMzZaMDMxMTAvBgNV
BAMTKEE4QTA3MUI4QUYxRkE2RTgwMTk5NEQ5MUQ2ODAyQ0FFNTRGOTlCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMppLb7chcZmr1sQVa4cJzew0b
Qu7IoN1R1D5NjdpQ5L0/Pn8Fjp4bdso4y5mdVJSuBWVDufBzuxgi1SJoGksnRTx2
w3hZDElTCWh9XQrPC5XrMZ3zWUzOmeED7M7WipymSvPGV0W4Y3blTeEJJKavU9OI
5gk3QiC5igP1mYtuwxWi5ivv+8CZTu1/bTg7LFOe5JWJOrIagUwgMsyhV3xn4dpn
5BHYRhKrJ4gUdn2tRTT0fs9D4PV6ztPak2ti7EKCAJyd/KTgiq26A0lbvBT2binj
5+qMw5lIFjfocR3yYN1f7EMG1+a0yqiBJ3vgn//fVb1ZZKMcWtVd5t8Q2sSvAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUqKBxuK8fpugBmU2R1oAsrlT5m0swHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0
MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGRT5Qw
DQYJKoZIhvcNAQELBQADggEBADmyOwAxyKrZhtde4JqA5sqoi7hZiQJHjPsY1wEh
sB41iFv7OXuH6CmHevDYgfVpq8A8s9qrno6JToEKSJDOWyWC+VuI1GBjLqBegA06
RhSDagLtGzkR6BIjjtpMe8HEQQteL7pDmoKe7XU2UvPEDInFJLImngF4UeCIBTbH
Lj5enGNaByhpoeL9E8LdbEnZDdRqZKSDPnxuBrkSSiFVjMhHWgF8k9f51xV2bsa9
vOEk8unHFPfUepa/vm2iR9UhdbXwJGyrDZkRirGenoIqCOIwbU3A90BxWrLyOqFw
oL6sBXHLPP6VUClvwLXy2IgIkgg4UixjtAQu2+P8ObydhI4=
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:58 2026 by rpki-client