Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3134382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: a+Hl/7TjMRE5BzqBrPFil5LEMcvRXlJwPnw6V6QVtGo=
Subject key identifier: F4:72:D4:33:E3:87:E5:36:68:DA:55:FA:2E:2E:24:B4:8C:F2:B2:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 378D6AE6072BF1AC3919E4FD51CD95FA5CAC0615
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:10 +0000
ROA not before: Wed 22 Jul 2026 16:31:10 +0000
ROA not after: Wed 21 Jul 2027 16:36:10 +0000
asID: 20473
IP address blocks: 145.79.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8d:6a:e6:07:2b:f1:ac:39:19:e4:fd:51:cd:95:fa:5c:ac:06:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:10 2026 GMT
Not After : Jul 21 16:36:10 2027 GMT
Subject: CN=F472D433E387E53668DA55FA2E2E24B48CF2B240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:f9:df:e1:8a:3d:5e:e9:25:38:e8:e8:2d:
57:f6:84:12:f3:4a:0a:76:4b:07:2c:a7:6f:7e:1d:
d5:2e:89:c9:91:11:01:0e:21:6b:b8:eb:28:b2:3c:
3b:89:5a:d8:3b:03:39:dd:5f:ae:04:48:41:b6:6d:
ae:e7:e2:f4:80:7f:04:ac:b3:50:0e:53:a2:5e:e0:
d1:d3:c5:13:93:4e:2a:f3:ca:8b:18:43:1a:73:b1:
bf:78:50:78:d3:62:60:12:77:75:bc:b4:a4:43:e8:
af:2d:30:e2:e0:8d:5a:69:f1:83:f9:34:f3:08:b5:
6d:e4:b8:d1:a2:1b:cb:cf:cb:d9:00:bb:ed:d5:14:
06:2e:92:67:64:b6:d4:2e:e0:19:27:96:32:03:d4:
c7:4d:1a:ec:2f:2c:1b:19:6b:1d:8c:91:c1:bd:cb:
68:ae:b9:79:5b:5b:ac:0e:c1:b1:b7:b5:3e:44:2c:
87:10:d8:28:d0:74:03:5d:d5:5b:df:3b:52:e1:30:
50:c3:8c:58:4d:bd:07:bb:b9:ac:c4:7d:ce:51:e7:
5c:a7:f4:86:6f:62:7b:73:b1:1f:99:e4:46:f3:41:
67:ca:01:05:c2:8a:a4:57:d5:37:d7:98:78:81:52:
1f:53:a1:63:08:02:5a:3b:f8:e9:74:16:a5:f1:22:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:72:D4:33:E3:87:E5:36:68:DA:55:FA:2E:2E:24:B4:8C:F2:B2:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.148.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a5:69:07:6a:af:79:89:af:9d:d2:d7:a5:60:ad:1d:4c:eb:
55:f8:33:a0:06:67:14:2e:6c:e8:57:61:54:91:82:e0:a9:63:
26:55:dc:aa:52:2d:20:2a:27:61:00:12:d9:7b:b0:88:4b:65:
de:21:8c:e1:c7:03:07:46:8b:18:9f:a1:47:3a:96:83:27:36:
47:72:13:22:d7:5c:da:da:24:43:f9:77:b3:d8:dc:6b:21:e9:
fa:8e:4b:c0:fc:b3:46:f0:2a:8d:a4:62:55:9e:69:62:26:80:
89:8a:0c:46:b0:df:61:a2:34:ea:f7:9e:89:60:83:7f:f1:9b:
54:1c:a5:f0:c1:50:64:04:9b:b4:a8:04:80:52:b1:c9:ea:c4:
04:3c:a2:b7:b7:57:1b:79:81:30:9e:ca:4e:66:96:70:ae:52:
10:71:be:90:41:a3:87:b0:6f:c5:20:e8:a3:42:f2:b0:b5:69:
f9:b6:69:4d:76:8f:cf:52:2a:27:c5:11:92:cc:4a:16:a4:ad:
ec:d8:7d:79:76:56:06:4c:41:2a:1b:ff:d2:11:c7:1f:7d:80:
98:db:c0:87:5c:74:7b:49:4e:be:49:5e:41:29:bd:28:6c:6f:
71:eb:a0:9e:a6:12:cc:a7:ba:ba:c8:96:57:34:02:e2:b7:98:
f0:b9:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:08 2026 by rpki-client