Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3137362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: LGdKyIShZKDeoSJdyhT3fLRyc94kJmUaO4bBFZgEw9w=
Subject key identifier: E6:84:03:E4:31:61:2A:DC:55:68:2E:97:FF:17:26:12:FA:20:43:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 703EDAD491417473256E32C3F2DD481B4C690FC9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:18 +0000
ROA not before: Wed 22 Jul 2026 16:31:18 +0000
ROA not after: Wed 21 Jul 2027 16:36:18 +0000
asID: 20473
IP address blocks: 145.79.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3e:da:d4:91:41:74:73:25:6e:32:c3:f2:dd:48:1b:4c:69:0f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:18 2026 GMT
Not After : Jul 21 16:36:18 2027 GMT
Subject: CN=E68403E431612ADC55682E97FF172612FA20433C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:04:3f:25:a3:f5:c0:e6:1b:24:cb:e8:dd:
37:13:92:45:0f:d6:87:cc:bd:56:89:db:83:6f:3c:
70:83:e9:04:f6:e3:05:9f:fc:19:33:75:db:e5:99:
f2:3b:52:a6:5c:fc:b5:bc:e5:a7:44:87:9c:1b:a1:
b6:0c:98:0b:99:6a:94:0f:b9:bc:cd:cb:24:41:ec:
4f:e3:df:9f:f8:a5:86:4d:18:f3:34:31:97:08:97:
49:52:2f:30:3c:32:9a:41:0f:4c:90:f1:ce:91:ec:
70:35:ce:e7:1c:de:c8:73:eb:6b:8a:76:9b:53:f6:
f6:45:de:73:03:73:49:c9:8e:cb:fd:1a:d3:c5:65:
f4:21:37:12:b5:e5:e7:94:0d:41:7a:9a:2d:fc:5e:
3a:66:2d:ba:c9:3d:ad:08:19:3f:95:f5:9e:66:8c:
8c:22:c7:fb:40:8b:27:a1:6c:36:4d:c8:ed:70:e9:
4d:a4:e6:20:46:91:a1:98:6a:07:f3:e7:01:f3:0f:
8b:ce:83:21:d9:de:22:58:bc:fa:58:f8:9a:c7:56:
53:f5:aa:af:ed:c7:0e:06:62:56:b5:f6:b9:f3:27:
a8:7d:7e:27:26:30:68:d8:12:e4:42:4d:6f:8d:d4:
7b:2c:51:15:ac:14:c5:2e:9f:41:bf:76:53:d6:be:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:84:03:E4:31:61:2A:DC:55:68:2E:97:FF:17:26:12:FA:20:43:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137362e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.176.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4f:73:e4:fd:ae:36:3b:8e:64:cb:db:ed:d0:c7:5d:59:8e:
24:41:55:66:b3:d3:9d:e2:7f:a4:c6:57:0d:17:5b:3f:b6:01:
ac:d3:d7:37:41:55:a0:96:d4:a8:2e:ba:67:cd:40:ef:50:f5:
b8:45:95:c4:4c:c8:b5:ac:d8:cc:d8:fb:23:f0:c5:ed:d4:4a:
86:61:b6:b4:d0:90:d0:b7:97:e0:89:9b:c5:dc:89:65:90:96:
1f:77:09:97:b0:cd:f9:93:9c:c4:c3:b6:3e:bd:5b:73:27:1e:
7a:ca:8d:bf:04:ca:07:83:6b:ca:a2:2f:6e:eb:e3:dc:90:dd:
e6:d0:66:40:60:47:b8:19:6a:92:e7:74:c6:64:95:d9:7e:df:
9d:ec:06:99:5e:ae:f4:c8:2c:f3:75:a5:3e:f8:18:b6:16:a6:
1a:5a:15:84:55:94:40:57:fe:1c:ef:ba:1b:6a:3d:50:a9:2f:
0e:fd:e6:57:ae:38:e9:bd:0a:44:ee:d5:82:b2:a1:44:3d:0b:
25:8f:74:0f:63:33:4c:80:a8:7a:64:13:47:43:79:74:fb:1d:
19:df:77:92:81:41:29:e3:d9:96:8b:0e:e7:ce:3b:e5:96:d6:
5a:23:06:90:f5:2d:76:6e:c2:b2:2e:4f:47:05:64:e2:1d:0b:
58:94:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:08 2026 by rpki-client