Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31362e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e31362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: SgF/J53UrGjpwzx+6Zs6QuBaJ2GDGooSDcj9gTd3Slk=
Subject key identifier: 7B:2E:43:B2:F5:DD:CB:50:18:E0:C6:FA:27:43:33:79:BA:DC:A0:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1F0BF1EB128E07666422670A37D37D881395608C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 12 Mar 2026 10:23:25 +0000
ROA not before: Thu 12 Mar 2026 10:18:25 +0000
ROA not after: Thu 11 Mar 2027 10:23:25 +0000
asID: 47583
IP address blocks: 145.79.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0b:f1:eb:12:8e:07:66:64:22:67:0a:37:d3:7d:88:13:95:60:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 12 10:18:25 2026 GMT
Not After : Mar 11 10:23:25 2027 GMT
Subject: CN=7B2E43B2F5DDCB5018E0C6FA27433379BADCA001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:68:47:89:63:44:59:8a:95:87:3d:68:8d:6b:
51:20:10:27:6a:ae:76:06:35:40:8b:44:c0:f7:c3:
82:db:08:7a:99:e4:e9:86:f5:44:21:dc:ac:5d:37:
3b:b6:2d:9d:a1:7c:5b:bc:65:ac:cf:4b:06:24:3c:
fa:bc:70:8a:81:44:e6:ba:85:c1:3e:70:31:5d:65:
54:a0:65:2d:1c:1d:5c:23:ad:b9:2c:cd:8b:14:cb:
29:12:5f:dd:3f:eb:15:2c:04:2b:c6:6e:ef:d9:4e:
4e:36:a9:e7:c3:71:c5:64:fe:e0:b8:e4:fe:01:98:
fd:d6:a1:0d:46:21:61:d7:b7:6e:89:8d:f2:e8:92:
9b:cf:bf:2e:8e:34:46:7b:33:35:de:9a:67:16:e0:
5f:d5:d2:cc:35:18:6e:b4:e1:00:18:16:44:27:89:
4e:f4:ac:dc:34:37:59:dc:0c:60:25:bc:d5:c5:50:
e2:fa:d4:64:f7:1a:fc:ef:57:33:4a:ef:f5:c8:08:
88:6f:e1:71:b5:8c:76:4e:18:87:3e:66:a8:a9:16:
16:2b:2d:5e:7a:3a:8d:d8:6f:53:a1:59:8c:d9:21:
53:e2:6a:98:b1:19:8c:3d:2d:82:eb:e7:f0:72:04:
85:09:b1:43:5f:af:6b:33:cd:7d:94:cf:a0:43:5f:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:43:B2:F5:DD:CB:50:18:E0:C6:FA:27:43:33:79:BA:DC:A0:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.16.0/21
Signature Algorithm: sha256WithRSAEncryption
01:4b:21:36:e4:ed:a3:08:b2:c7:05:03:20:81:75:6b:1b:8e:
83:92:85:a9:5e:3c:c8:5c:a8:cd:b0:e5:46:21:2c:0a:45:a2:
38:36:b3:e7:cc:23:cf:ba:b3:e3:f8:85:7f:f9:cc:4a:1c:c1:
5c:87:c3:38:aa:da:1d:20:b0:a4:a0:d3:d1:3e:e4:3b:85:8c:
a2:7b:90:9c:84:09:a0:62:52:8f:8d:af:3b:0c:fd:30:1b:34:
b3:b9:a0:40:58:29:a2:ec:70:d0:d0:60:5a:fc:b1:15:73:3e:
eb:8c:54:5a:d8:1d:e6:93:8f:75:72:8d:67:a6:96:4c:7e:1c:
30:e2:70:11:70:af:d4:42:bc:1d:8e:cd:8b:09:67:ed:17:8e:
ef:4b:34:5d:39:73:9e:76:7c:fc:17:8b:ff:a5:38:49:4c:fe:
9c:cf:46:a9:d0:23:dc:02:f1:05:1f:07:b7:3f:15:3a:3a:b4:
0d:59:59:73:9f:65:58:ed:b3:dd:f9:f7:ad:2a:46:20:79:e6:
4a:5c:9e:e7:1b:35:8b:76:a2:d9:49:08:c2:e4:6f:dc:ca:be:
c8:37:5b:00:54:8d:ee:b0:4d:18:e3:25:5f:93:64:b3:2d:4e:
3b:a1:b4:3f:f3:19:99:d2:01:6d:96:15:b6:65:a2:e2:ec:9b:
54:a7:92:a2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHwvx6xKOB2ZkImcKN9N9iBOVYIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTIxMDE4MjVaFw0yNzAzMTExMDIzMjVaMDMxMTAvBgNV
BAMTKDdCMkU0M0IyRjVERENCNTAxOEUwQzZGQTI3NDMzMzc5QkFEQ0EwMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaEeJY0RZipWHPWiNa1EgECdq
rnYGNUCLRMD3w4LbCHqZ5OmG9UQh3KxdNzu2LZ2hfFu8ZazPSwYkPPq8cIqBROa6
hcE+cDFdZVSgZS0cHVwjrbkszYsUyykSX90/6xUsBCvGbu/ZTk42qefDccVk/uC4
5P4BmP3WoQ1GIWHXt26JjfLokpvPvy6ONEZ7MzXemmcW4F/V0sw1GG604QAYFkQn
iU70rNw0N1ncDGAlvNXFUOL61GT3GvzvVzNK7/XICIhv4XG1jHZOGIc+ZqipFhYr
LV56Oo3Yb1OhWYzZIVPiapixGYw9LYLr5/ByBIUJsUNfr2szzX2Uz6BDX1QTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUey5DsvXdy1AY4Mb6J0MzebrcoAEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM2
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5FP
EDANBgkqhkiG9w0BAQsFAAOCAQEAAUshNuTtowiyxwUDIIF1axuOg5KFqV48yFyo
zbDlRiEsCkWiODaz58wjz7qz4/iFf/nMShzBXIfDOKraHSCwpKDT0T7kO4WMonuQ
nIQJoGJSj42vOwz9MBs0s7mgQFgpouxw0NBgWvyxFXM+64xUWtgd5pOPdXKNZ6aW
TH4cMOJwEXCv1EK8HY7Niwln7ReO70s0XTlznnZ8/BeL/6U4SUz+nM9GqdAj3ALx
BR8Htz8VOjq0DVlZc59lWO2z3fn3rSpGIHnmSlye5xs1i3ai2UkIwuRv3Mq+yDdb
AFSN7rBNGOMlX5Nksy1OO6G0P/MZmdIBbZYVtmWi4uybVKeSog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:18:06 2026 by rpki-client