Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: PGGVWJWNQ12M3SnnjHJcZXK21Q0soK2VAQSo6rZcUz4=
Subject key identifier: B8:0C:CF:4B:49:48:1C:EE:FF:ED:7C:4F:CA:8E:89:87:01:62:05:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 276071EACB26E7DD39B224B533F83A150E62515E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa
Signing time: Thu 30 Apr 2026 19:23:59 +0000
ROA not before: Thu 30 Apr 2026 19:18:59 +0000
ROA not after: Thu 29 Apr 2027 19:23:59 +0000
asID: 395793
IP address blocks: 145.79.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:60:71:ea:cb:26:e7:dd:39:b2:24:b5:33:f8:3a:15:0e:62:51:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 19:18:59 2026 GMT
Not After : Apr 29 19:23:59 2027 GMT
Subject: CN=B80CCF4B49481CEEFFED7C4FCA8E898701620528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:0b:82:f4:64:74:22:ce:60:76:99:5d:1e:
d0:35:a5:5b:da:d1:a2:45:f7:64:b2:3f:96:09:78:
52:aa:56:75:4d:d7:cc:98:00:23:67:ac:0d:b9:51:
c3:40:83:be:30:ca:73:ba:cf:ec:08:0b:b1:71:0c:
d0:5d:19:04:9c:cc:0e:ba:3c:45:3b:94:15:23:d1:
7c:17:87:06:d3:be:a8:6f:05:40:ab:27:b5:39:d7:
e7:cf:6a:35:89:a8:7c:0f:92:65:bf:e9:78:46:50:
aa:62:86:53:4f:b3:da:74:ac:66:32:27:18:a5:74:
2a:2f:ad:5a:bd:a1:6f:e4:ca:74:a3:a7:16:8d:90:
15:93:f2:32:3d:b8:0b:65:7b:32:4c:de:b8:9e:90:
08:ab:7f:c7:9a:48:3f:7e:b2:fc:5e:33:3b:07:fe:
3f:3d:5d:21:a5:3b:45:01:e8:62:1d:e1:bb:5f:27:
9c:68:9c:96:03:5e:8e:28:90:e4:14:96:4d:01:1b:
de:d6:d3:19:b0:1c:2f:a7:de:3b:ff:de:be:7b:59:
0b:c0:32:ac:34:59:c9:29:42:8b:b1:a6:d4:33:c7:
4c:e4:38:f1:82:49:8c:83:83:eb:22:b4:30:d0:44:
d7:50:b5:ed:3c:2d:ff:22:67:b3:dc:fa:8a:d4:9c:
97:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0C:CF:4B:49:48:1C:EE:FF:ED:7C:4F:CA:8E:89:87:01:62:05:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136312e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:97:f7:e9:b2:c7:4d:77:c1:62:f2:35:bd:57:50:42:27:77:
01:e9:9c:0f:3e:fb:66:cb:b0:1f:87:18:5b:a2:cd:0a:79:c0:
ee:88:41:50:f6:df:21:e2:f9:34:60:e2:3c:07:17:f6:da:ae:
54:71:ff:d7:b1:4e:de:bc:07:75:29:a1:18:8a:3e:b8:9d:2e:
3e:99:d6:0b:f5:b8:a2:80:e0:69:60:ac:bc:3d:56:aa:b0:86:
52:20:d9:f2:86:7f:93:ce:98:a7:eb:eb:64:60:f2:ab:ea:36:
b1:82:50:3f:56:6b:a3:0f:9f:e5:4d:95:5d:c4:f8:93:bd:ba:
c2:51:a4:ca:56:08:77:41:1c:81:5b:2c:85:fc:25:a4:e9:a7:
14:02:7a:fd:97:7a:98:2d:1f:1c:36:b9:64:a3:89:3f:94:05:
b8:4b:b4:43:2d:ba:da:a0:f4:38:1c:bb:28:0a:b9:83:70:2e:
6e:f4:ce:e6:f6:82:e2:f3:03:f7:dd:ef:0f:1c:09:9c:36:64:
5e:6f:c8:57:b4:6b:6a:c5:19:da:8e:c1:89:ea:de:81:38:30:
d7:e7:40:8b:8d:3b:5e:ff:45:e2:5d:76:f9:ce:3f:ae:ad:e3:
1a:26:d4:fc:5c:59:93:f7:50:7f:94:84:f9:a2:9f:e9:f3:0b:
bc:49:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:21 2026 by rpki-client