Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xeu5lzgVrbO3cdtks9KVofq2wdijKGku6ytLbr5ujB0=
Subject key identifier: EA:94:9A:E1:51:79:70:9C:60:09:5E:4A:B7:96:33:10:42:22:B3:80
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 119F93BC54FBB5295250BB825CEB6E46545C959C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e20383334.roa
Signing time: Thu 24 Sep 2026 09:30:03 +0000
ROA not before: Thu 24 Sep 2026 09:25:03 +0000
ROA not after: Thu 23 Sep 2027 09:30:03 +0000
asID: 834
IP address blocks: 145.79.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9f:93:bc:54:fb:b5:29:52:50:bb:82:5c:eb:6e:46:54:5c:95:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 24 09:25:03 2026 GMT
Not After : Sep 23 09:30:03 2027 GMT
Subject: CN=EA949AE15179709C60095E4AB79633104222B380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:db:8c:e7:49:7b:25:31:84:e3:ad:63:df:
08:b9:b6:35:e2:0a:f2:a8:7c:fc:13:63:d2:23:28:
d9:a0:93:96:73:5a:7f:40:e5:a3:9a:5a:fc:92:be:
7d:06:37:ab:81:c7:c5:ae:58:47:6a:66:dd:82:1b:
6b:e0:3f:e4:cd:15:a1:e9:4d:49:80:dc:28:26:60:
c8:9f:f5:f3:71:0e:ff:43:f4:96:e7:dc:5b:81:f3:
17:5e:48:01:79:56:b6:a4:da:5f:1c:6f:96:6e:7b:
06:55:a1:33:a9:56:f9:47:38:2b:5f:59:4d:63:da:
39:f7:b8:d3:83:bb:39:99:91:72:c6:e9:d4:0a:1a:
32:37:40:e2:68:1d:55:6b:2e:e6:cb:b4:31:9b:14:
58:4f:95:07:b8:b2:44:52:bd:35:6a:cb:a2:d3:6a:
b2:30:25:30:cc:fb:ba:a3:c6:e7:ed:28:ee:99:63:
b4:2f:da:31:46:d3:92:ac:67:c9:7b:45:c8:57:7c:
f2:04:7d:38:ce:8f:f9:d7:b9:a8:81:53:4f:e3:f7:
48:ed:64:cc:74:c1:3b:be:eb:30:1f:34:db:fa:bf:
55:74:e6:01:bf:a3:21:57:2e:42:99:25:39:95:12:
1b:1a:f2:cc:e2:77:59:4c:31:8f:03:0c:fa:09:9c:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:9A:E1:51:79:70:9C:60:09:5E:4A:B7:96:33:10:42:22:B3:80
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.148.0/24
Signature Algorithm: sha256WithRSAEncryption
37:22:3e:e5:1e:6e:89:b0:71:db:eb:f4:c3:45:cb:65:aa:86:
83:fe:68:7a:36:5c:24:8b:84:c7:b1:c5:2c:e9:95:ef:c0:32:
4d:6e:01:37:ee:c3:fc:e4:fa:36:7e:19:bf:c9:f3:04:ec:cb:
73:61:48:ec:60:c5:ba:39:dd:bd:97:c8:a2:7b:ce:33:de:cf:
98:7c:fb:a0:c1:a8:ab:62:3a:92:75:17:8a:17:f1:b0:7c:d5:
ce:4c:02:0b:60:a4:29:30:40:cb:84:21:a7:95:cc:d0:48:77:
fe:51:1f:ae:a9:5d:db:1e:bf:e3:eb:a2:64:91:a4:d8:83:86:
47:6e:ae:a3:44:62:cd:66:43:6f:b3:d1:0c:17:b7:69:fd:05:
a5:fd:65:18:14:b2:87:3b:2f:05:62:47:61:08:b0:43:92:15:
61:2b:01:dd:61:dd:07:68:77:1a:ea:4d:98:56:f4:4f:d4:20:
aa:1d:d1:08:90:d7:2f:c6:0d:cc:00:dd:d0:09:9b:91:91:85:
27:4e:69:22:b9:dd:f3:4f:fc:23:ae:e2:90:19:01:66:11:46:
66:f1:26:f5:1a:7f:9e:67:ec:76:f0:f1:26:da:20:37:2a:cd:
8c:5b:87:27:8c:2f:5d:30:97:fd:62:96:dc:79:48:84:62:b7:
8c:3d:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:44:09 2026 by rpki-client