Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e20383132.roa
File: 3134352e37392e3137322e302f32322d3234203d3e20383132.roa (raw, json)
Hash identifier: sf/RWygj5ZyEwxiekBNSf5oUWllFXvngzyUDNh/4xZc=
Subject key identifier: 54:B5:70:AF:6C:89:4E:DC:42:5E:ED:01:E5:9D:3E:B7:C7:53:CF:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39174E41953DEA67C5E91F0E43F7BBD61838C7FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e20383132.roa
Signing time: Tue 05 May 2026 20:24:03 +0000
ROA not before: Tue 05 May 2026 20:19:03 +0000
ROA not after: Tue 04 May 2027 20:24:03 +0000
asID: 812
IP address blocks: 145.79.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:17:4e:41:95:3d:ea:67:c5:e9:1f:0e:43:f7:bb:d6:18:38:c7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 5 20:19:03 2026 GMT
Not After : May 4 20:24:03 2027 GMT
Subject: CN=54B570AF6C894EDC425EED01E59D3EB7C753CF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:28:21:3d:e4:5f:c9:df:4b:4d:f8:44:82:
5e:b8:af:07:16:0b:0a:44:1f:73:f6:ff:bb:8b:68:
94:42:00:11:e9:3a:bd:0d:5e:54:4c:f4:b0:3b:59:
78:20:ff:bf:24:77:66:28:62:ae:bd:1c:f0:86:23:
7d:ac:1f:a4:48:b2:c3:43:8d:a2:11:0c:4d:25:e2:
f7:5d:f1:72:b4:ec:9d:33:ad:70:17:ab:f4:ed:a1:
6c:f2:81:50:47:a1:20:d5:99:6e:2c:2c:02:fe:f0:
da:53:4d:b1:a0:d3:18:85:41:ec:6d:1e:35:70:a3:
38:7f:43:16:eb:d5:aa:75:5d:e4:7c:39:36:36:bb:
fe:a7:05:3e:94:09:ee:ae:1c:ad:f1:73:86:f0:0f:
db:42:d3:1a:61:d9:f5:2d:78:94:54:46:91:31:2d:
b4:0f:96:6b:57:40:a6:dc:ba:65:dc:7e:41:9a:16:
00:f3:28:2f:7d:96:59:85:95:df:a3:52:d1:66:b3:
18:09:94:a4:23:f6:c4:48:64:26:db:e7:05:38:05:
2f:ec:7c:9e:a2:04:8c:8e:73:5c:58:42:d5:1b:b9:
ab:8c:9c:be:2a:2d:3f:81:d6:af:f2:7d:b6:59:82:
94:d0:9e:45:7b:cc:f3:96:59:42:f8:79:94:62:e1:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:70:AF:6C:89:4E:DC:42:5E:ED:01:E5:9D:3E:B7:C7:53:CF:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137322e302f32322d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:8f:ef:9e:79:ef:56:23:10:ea:21:53:3b:c5:68:d0:4b:3c:
8a:af:a6:e2:5f:c3:58:55:68:5d:dc:a9:a2:91:72:4b:87:17:
b2:db:0c:23:28:75:9f:7e:90:37:47:10:b2:8e:55:8c:82:23:
73:a6:f5:7c:81:b9:f5:52:80:91:0a:5c:5e:d7:3a:18:2f:c0:
e1:6d:d4:0c:e8:74:b7:84:26:06:c0:8f:64:1f:29:41:f8:44:
ff:72:f3:ad:f0:9d:fb:95:f7:2b:e7:55:19:4f:1c:f7:8f:3c:
f1:3d:b3:77:1c:24:5d:98:e5:ab:52:a4:41:d9:ce:17:d8:a6:
f1:84:3b:48:c6:63:7e:60:1f:e0:65:99:ba:d9:12:94:01:b6:
56:91:36:05:e4:a5:2b:f4:a5:88:ea:48:aa:9e:79:16:d5:6d:
e3:77:3c:e2:30:30:81:21:b5:a7:1d:23:48:7e:a8:55:eb:75:
0a:bc:47:80:50:cf:16:d2:5f:16:5c:8f:fa:40:67:10:c8:2d:
4d:aa:57:4a:82:eb:46:df:ab:02:f7:27:63:c0:45:97:2e:70:
07:47:9d:fe:64:d1:a6:2c:83:46:98:72:86:e7:81:52:ff:24:
ee:6b:33:cb:fc:86:82:b4:94:12:f1:76:aa:62:dc:40:0b:fe:
b5:23:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:12 2026 by rpki-client