Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e2037303239.roa
File: 3134352e37392e3137322e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: VZS9dF2QxOc9+WTXQSzLiMyKprg1TcjfNVw6NRexO7o=
Subject key identifier: 10:AD:E2:25:40:A4:81:FF:0D:8A:66:DD:0C:C7:F9:82:9A:F6:4D:D6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 05D0D24FD546FD2F7AC38162ECD2EBFD506B1CF1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e2037303239.roa
Signing time: Tue 05 May 2026 20:24:04 +0000
ROA not before: Tue 05 May 2026 20:19:04 +0000
ROA not after: Tue 04 May 2027 20:24:04 +0000
asID: 7029
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d0:d2:4f:d5:46:fd:2f:7a:c3:81:62:ec:d2:eb:fd:50:6b:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 20:19:04 2026 GMT
Not After : May 4 20:24:04 2027 GMT
Subject: CN=10ADE22540A481FF0D8A66DD0CC7F9829AF64DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:26:3c:a4:fa:e7:0a:e3:72:5b:6c:34:24:
71:e5:52:84:77:b8:29:22:ac:c1:f3:52:4d:7a:95:
cc:b6:f5:41:59:9b:5a:a4:75:a2:6e:c7:48:a7:11:
60:cd:96:86:b3:64:51:f0:0d:16:c4:57:ca:ad:2f:
75:c4:9e:5b:39:dd:8b:0a:1e:b6:21:b1:16:f1:a4:
7b:17:be:0b:b6:fd:b5:f0:36:df:f0:a3:bd:ab:d1:
35:76:bd:d7:d3:90:ac:0b:a7:15:11:e9:69:29:d6:
f3:b2:f7:ce:a5:c4:0a:d1:9a:c4:87:05:3a:73:aa:
a1:9b:0c:ce:83:5e:fe:7c:5d:30:85:ca:0b:fe:2b:
d1:1d:54:b2:f4:d3:6b:93:07:b2:52:97:31:b5:2b:
19:d9:28:7b:f8:a3:aa:11:08:a8:40:ce:85:2b:6b:
bb:12:5d:40:b6:14:cc:39:04:fd:30:32:38:a8:5b:
64:8b:3a:e2:11:33:a5:fb:e9:70:27:a5:f1:58:cb:
2a:ca:3c:13:48:51:ee:29:3f:bf:ff:de:9e:a3:53:
7a:44:e6:06:c9:86:6c:55:a8:6f:dd:39:9f:c8:78:
47:7e:4b:61:59:78:55:fe:c7:dd:18:f3:f1:6f:81:
fc:d3:6b:96:33:1f:32:c4:7d:bd:35:7d:94:f6:22:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:E2:25:40:A4:81:FF:0D:8A:66:DD:0C:C7:F9:82:9A:F6:4D:D6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:17:63:40:b6:ae:cb:c9:84:13:52:95:8f:c5:6b:3f:35:37:
d8:3c:be:2e:01:73:6f:2a:2d:17:62:53:ec:1e:41:8b:ba:08:
36:d8:3e:2f:51:0b:df:9e:11:ae:42:d0:49:c1:6a:e7:76:76:
ad:c3:d2:63:2c:aa:ab:e3:b6:1f:39:87:cc:f0:66:89:da:ca:
96:1c:dc:79:86:b4:25:a8:7d:2c:cd:2e:a9:46:b8:1d:f0:3f:
eb:94:71:25:91:84:42:ea:b7:6d:e9:dc:98:ef:28:5f:15:cd:
1a:5c:4f:4b:71:9c:e8:05:02:4e:5d:ac:d1:9a:91:34:17:0a:
a0:f8:20:d5:41:a7:7e:d4:1e:b4:d6:49:a8:94:6c:8c:70:32:
28:74:f1:fa:ca:fe:bf:94:00:1b:f2:d0:fc:71:84:7b:47:0d:
40:f5:7d:4a:e7:e0:8b:46:79:02:4a:76:cb:e8:86:64:0e:03:
a4:32:8d:21:36:8a:25:65:67:ab:79:28:3a:37:c6:76:be:02:
a9:62:2b:d7:44:c0:06:93:2d:38:99:28:a7:c3:4b:da:d6:ae:
30:5d:1b:f7:7e:2e:85:86:ae:74:34:93:6c:54:84:33:d6:6a:
f6:ac:c3:dc:1e:54:ff:26:69:5b:6a:ec:a1:3f:0f:06:ec:e3:
a5:ce:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:20 2026 by rpki-client