Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3136322e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: HdRcYx5TIDCuUVgHE0Y6ad4l4asMb2AbSn7tg1kqt90=
Subject key identifier: 43:D2:CB:E6:DB:52:07:E9:98:A9:56:20:24:74:2D:E6:A7:EF:E7:F0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DCFD64C8213C33C44FB9F68EC5A91827C1F8CD1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:13 +0000
ROA not before: Wed 22 Jul 2026 16:31:13 +0000
ROA not after: Wed 21 Jul 2027 16:36:13 +0000
asID: 20473
IP address blocks: 145.79.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cf:d6:4c:82:13:c3:3c:44:fb:9f:68:ec:5a:91:82:7c:1f:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:13 2026 GMT
Not After : Jul 21 16:36:13 2027 GMT
Subject: CN=43D2CBE6DB5207E998A9562024742DE6A7EFE7F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:a5:83:c1:3b:d0:2d:49:3f:3d:c8:0c:11:
85:74:d1:87:0c:6a:21:1b:95:28:75:59:1a:0f:4e:
d3:8c:49:7e:be:65:8d:1d:06:e8:7b:43:fe:1b:e8:
2a:6c:29:e2:f4:90:78:6e:be:03:9b:fc:f1:a8:20:
76:91:0e:08:f5:bb:f2:d7:f8:f4:90:33:79:2e:ad:
df:53:dc:3d:14:3d:d6:fd:dd:25:39:01:a5:aa:24:
6e:9d:75:e8:44:32:2c:94:04:19:7d:a6:3c:d7:62:
87:ad:1a:65:a3:9c:21:88:f0:cb:ba:90:0e:e2:5b:
e9:64:b2:1b:d2:15:a4:6e:a1:a9:aa:65:28:8d:e6:
a1:8e:1b:10:bf:70:63:56:9f:9f:6a:c0:e4:47:cf:
5c:c5:d5:ca:00:e9:f0:96:72:97:46:f6:a4:5b:60:
55:06:91:90:ec:85:e3:b5:48:1f:cb:00:de:63:ff:
10:22:75:52:db:29:8c:4c:02:7f:b8:4f:29:e9:55:
19:e7:ef:e3:5b:43:a2:5b:58:cc:80:d1:1d:df:5f:
3d:04:86:4c:b8:40:6b:42:e5:94:6e:eb:c5:b4:06:
9b:48:4a:f7:b0:f5:54:59:99:2f:de:9e:e5:8a:a3:
34:2f:2d:98:38:52:05:5c:e7:8f:fa:20:74:44:1d:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:CB:E6:DB:52:07:E9:98:A9:56:20:24:74:2D:E6:A7:EF:E7:F0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136322e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ac:bf:e0:dc:82:b1:e8:37:57:81:27:37:11:6c:f7:4a:33:
46:83:66:ba:2c:f3:21:1f:54:97:3e:fb:0b:b5:64:d7:f8:fc:
4d:e6:48:24:3c:4e:ee:2d:1f:46:dd:68:c5:ea:48:53:89:7a:
4d:14:3d:17:9e:f1:c3:c3:7e:7f:e6:26:53:5d:62:19:08:88:
eb:45:8e:6e:c7:a7:3d:a6:d8:eb:00:37:9e:eb:0c:82:d6:55:
28:85:16:80:3b:1d:16:bd:a7:b0:99:0c:6d:a3:cd:4c:eb:8f:
a9:d8:1a:84:45:78:4a:fd:b4:ca:d1:06:d6:09:a1:bc:b8:83:
38:72:fd:75:e9:a6:be:91:e1:07:11:15:55:ce:6d:b8:c5:72:
3e:83:34:17:8d:3a:31:23:b4:be:4f:18:e1:ce:21:82:9b:97:
15:49:5c:26:4d:c0:90:a7:7e:fe:08:af:0f:df:c5:f4:6c:bb:
f7:c1:b5:c5:22:bb:da:96:51:43:34:96:d4:e4:e1:1e:32:aa:
11:c1:79:63:9d:fa:c7:a9:e2:8d:9e:73:d9:15:5a:4f:9e:7e:
5d:48:76:e3:62:8d:2f:60:b7:e8:b7:c4:60:8e:c6:d1:e5:82:
7a:ab:1c:6b:f6:09:0e:94:09:41:e2:cc:58:ed:eb:40:fe:4c:
02:28:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:12 2026 by rpki-client