Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135362e302f32322d3234203d3e2037303239.roa
File: 3134352e37392e3135362e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: DTPC3xY/mWB82BU6un/p+dNyKJmLEEiArx2nYPhieCU=
Subject key identifier: 3A:A8:D0:63:67:B2:46:7A:06:13:1D:A7:5A:87:2A:2E:C7:83:EC:59
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 109D972B4424D721366A245457E7F841E97018C4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135362e302f32322d3234203d3e2037303239.roa
Signing time: Wed 29 Apr 2026 11:23:57 +0000
ROA not before: Wed 29 Apr 2026 11:18:57 +0000
ROA not after: Wed 28 Apr 2027 11:23:57 +0000
asID: 7029
IP address blocks: 145.79.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9d:97:2b:44:24:d7:21:36:6a:24:54:57:e7:f8:41:e9:70:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 29 11:18:57 2026 GMT
Not After : Apr 28 11:23:57 2027 GMT
Subject: CN=3AA8D06367B2467A06131DA75A872A2EC783EC59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:4e:3e:59:8d:c7:b2:7c:ea:1f:d7:a6:a5:
ea:f9:ba:a4:e9:af:dd:8a:c8:a4:4b:d0:28:0f:a7:
0c:3b:be:f3:a0:fd:6a:51:c3:01:00:df:42:db:8d:
7a:43:e7:44:92:fb:c3:7b:89:2d:13:ee:8f:6a:c2:
e5:9a:1e:71:ae:14:25:f6:24:7c:1c:84:46:c9:f1:
e5:9d:59:af:c0:77:86:12:a5:17:5e:3e:0d:11:03:
84:82:45:f6:2c:ee:d9:eb:ce:28:4a:8b:e0:ee:e8:
31:86:9e:fc:e4:a1:77:ad:71:ee:8c:08:3d:9e:53:
54:38:09:eb:90:a7:2e:55:0a:c4:b3:12:87:07:6f:
af:5b:ff:df:f3:7e:33:97:1a:c7:fb:d1:fc:ad:b3:
d7:20:19:15:40:a1:cc:ce:0f:3c:a8:d8:f3:8b:a1:
10:c4:a8:42:5d:9d:5b:92:3d:96:a9:61:1f:af:40:
13:e4:9f:67:4b:5c:f1:20:d6:25:c7:46:4b:7d:5c:
9f:c2:f1:9c:1a:cc:db:87:0b:7f:9b:48:46:d8:3d:
a2:04:1b:4a:78:ae:9e:88:bc:95:28:f0:96:88:37:
3b:16:05:da:72:0c:ec:ad:ee:a9:8d:f9:64:ec:9c:
70:88:34:43:91:e2:61:e9:ec:91:ab:7c:4f:7f:2c:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:D0:63:67:B2:46:7A:06:13:1D:A7:5A:87:2A:2E:C7:83:EC:59
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135362e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.156.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ef:d3:f8:24:46:54:db:e3:df:9b:38:e7:d1:36:8c:55:5f:
f9:37:9e:f4:65:fd:1a:e4:d1:de:63:2a:ea:91:1f:05:4b:4d:
fc:c9:b0:ba:11:84:2a:9d:03:a4:07:12:97:e7:de:23:5d:54:
c1:1f:9e:dc:c9:8e:58:06:81:92:0c:7c:72:e6:72:b0:fa:f8:
a0:b2:60:98:31:c7:03:fa:f4:ef:e4:c1:79:17:a8:44:0c:77:
7d:f7:38:cf:e2:23:7c:84:f1:82:92:89:c0:1d:2c:64:92:dc:
16:77:ce:1f:ab:8f:94:01:7b:21:fa:44:97:8d:93:cf:ee:60:
01:63:9f:c9:f6:fd:67:f1:24:11:d8:c0:51:14:ae:53:0f:46:
96:83:e7:09:d1:25:8d:ff:b9:05:70:89:ca:54:b0:3d:e9:a1:
48:a3:02:0d:55:8f:16:33:e7:1a:e7:03:cf:f6:30:d9:2b:6c:
79:45:9f:ae:b7:7a:45:66:82:df:a7:cb:d2:70:df:b1:f7:43:
87:88:a8:05:00:59:3f:82:a1:c3:5b:9e:ac:ba:aa:fb:dc:1f:
a7:fc:1b:96:95:9d:f4:1c:ac:60:77:7e:0f:d3:9c:48:02:6d:
4a:f8:92:53:ef:da:80:8a:f1:03:7d:4d:0b:4b:0a:3d:00:e7:
1d:49:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:11 2026 by rpki-client