Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CiErm4izZmFbU08xn8rnOX6WgbAIhHJxarUE+JvxYSk=
Subject key identifier: 90:BD:D7:F0:29:17:45:80:22:BA:DA:E7:9D:D4:53:51:BE:ED:CF:60
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0A1F5C2D99BB24126C6A7364859F5D539ADB55B7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e20383334.roa
Signing time: Sun 10 May 2026 09:33:26 +0000
ROA not before: Sun 10 May 2026 09:28:26 +0000
ROA not after: Sun 09 May 2027 09:33:26 +0000
asID: 834
IP address blocks: 145.79.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1f:5c:2d:99:bb:24:12:6c:6a:73:64:85:9f:5d:53:9a:db:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 10 09:28:26 2026 GMT
Not After : May 9 09:33:26 2027 GMT
Subject: CN=90BDD7F02917458022BADAE79DD45351BEEDCF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:88:45:09:98:98:33:05:b8:40:23:79:b6:
2d:af:7c:4f:8f:a3:96:9b:43:af:09:ff:a6:1e:3f:
39:a8:7f:11:b5:3b:fe:e0:2b:11:1c:af:92:70:ee:
ea:c4:aa:55:45:7e:14:4f:ec:9e:52:00:3c:ca:1a:
fe:dc:4f:91:a4:b1:b6:62:0e:ec:bd:fa:72:fb:b7:
5a:ac:dc:7e:7e:68:f9:a4:74:01:1f:76:0f:e8:24:
1f:52:27:b0:50:e8:3a:7a:b2:8e:30:b2:41:19:2b:
1e:37:ed:a4:39:8f:c8:a8:96:72:bd:86:aa:7e:4f:
0f:6c:32:ff:70:3e:7a:55:a8:54:bb:cf:e0:c1:e4:
90:0b:8d:5d:67:12:12:f0:f8:e8:18:88:68:b9:e8:
82:5c:98:5e:dc:d5:0a:5f:b7:e1:e0:77:2d:6c:68:
7b:28:90:c1:b9:22:fb:15:0f:36:f3:9a:b5:ac:7f:
9b:b0:42:74:55:a1:6b:7d:85:67:ef:ea:88:7a:52:
88:95:c6:46:fd:f2:aa:db:a5:5c:3b:77:5e:4a:6b:
e0:20:f0:13:b0:53:be:0f:48:a3:23:bf:22:6f:be:
7b:9a:51:9b:5c:20:b9:ff:50:e4:d1:d5:82:20:cc:
92:e5:ed:0c:d0:9b:62:89:4b:25:78:79:05:94:40:
66:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:D7:F0:29:17:45:80:22:BA:DA:E7:9D:D4:53:51:BE:ED:CF:60
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d2:fa:c4:8d:e1:37:86:55:17:2b:81:ae:f8:ec:b4:4a:cd:
28:b0:19:86:16:61:b8:b4:f9:e6:10:98:57:f5:4e:60:00:e0:
e6:22:5f:60:fa:66:69:bb:b9:08:c9:d8:e7:c8:7a:b4:cd:d1:
b5:b0:c8:07:53:27:a6:19:36:12:3f:6d:10:da:49:74:e8:5c:
67:ee:10:a7:53:8b:99:67:5f:22:4e:f5:f6:2d:c7:31:3c:be:
27:52:76:bb:aa:27:e3:cb:53:ac:44:ab:9a:92:8d:17:cc:3b:
d8:30:80:fb:d6:cc:48:3b:2e:fd:a8:7b:2c:1e:0a:a3:c8:d4:
92:ae:c3:dd:9f:45:19:66:93:4f:19:52:70:fb:6e:50:db:5f:
4e:c9:4a:dc:32:84:fc:9e:cc:b6:ef:a1:41:f9:47:96:be:8f:
ef:32:d8:2a:23:19:f0:d3:c0:91:b9:ec:ab:11:76:a1:7d:4e:
97:ad:a8:66:a7:1f:2e:4d:c0:a3:ec:d7:db:51:c0:4c:4f:ff:
a4:3a:e0:fb:32:8b:68:f1:63:d1:b1:db:d1:03:38:2e:28:64:
c9:22:5c:45:48:31:1c:9e:0f:3b:fa:1a:8b:86:df:d8:c0:d0:
e5:b6:39:43:0f:b8:d5:98:81:61:f1:f4:93:a6:f0:ec:37:d9:
09:2a:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:34 2026 by rpki-client