Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137372e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3137372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: gOskCwRTdRSsQlJmbItAxb5z3i/cHBvtPG1ELbrRQvA=
Subject key identifier: 05:82:D5:94:22:AB:56:FF:B0:FF:7C:C9:DB:95:88:FC:65:09:D2:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 301EE26596474CEB7ABC2D7B139E14C66424D60F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137372e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:20 +0000
ROA not before: Wed 22 Jul 2026 16:31:20 +0000
ROA not after: Wed 21 Jul 2027 16:36:20 +0000
asID: 20473
IP address blocks: 145.79.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1e:e2:65:96:47:4c:eb:7a:bc:2d:7b:13:9e:14:c6:64:24:d6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:20 2026 GMT
Not After : Jul 21 16:36:20 2027 GMT
Subject: CN=0582D59422AB56FFB0FF7CC9DB9588FC6509D213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:bd:a0:26:2e:82:8c:f7:b6:a5:00:48:91:
62:8f:9b:83:20:09:db:4d:c5:33:7c:f4:e4:01:6c:
e3:1c:e9:d2:61:22:a0:ac:4b:49:cb:5a:1c:fe:37:
d1:a2:28:14:e4:d2:11:77:96:54:96:00:98:1e:72:
47:33:1e:46:1c:92:6a:bc:62:9b:f5:f7:a7:61:7d:
54:4b:03:5a:ba:1f:f1:31:91:76:0f:9c:b6:63:7d:
49:a5:e5:2c:19:47:55:1a:3d:47:30:35:68:03:f7:
a6:b0:bc:1c:18:d0:91:a5:f5:6d:63:bc:45:66:e6:
79:51:cf:f1:56:ae:d1:60:1a:2b:2f:86:0a:82:5e:
c2:60:04:da:98:58:99:44:46:ba:ed:61:ef:a7:24:
07:45:52:56:a9:a9:c8:e8:6c:65:7b:6c:f1:1d:e6:
4e:7c:97:f2:17:1c:7e:18:4e:fb:73:23:1c:84:5b:
41:1e:c1:9a:51:bf:22:08:e0:cb:ef:c2:a9:86:2a:
38:a7:c7:44:11:8c:cb:4a:20:6f:e5:cc:d1:c1:e7:
70:07:b0:a9:7c:f9:9c:95:f1:bd:b2:8e:b5:4d:4a:
35:c7:d8:dc:b4:54:c0:4f:33:98:97:8d:14:94:ed:
ae:3a:fb:17:74:17:0c:a1:98:af:f5:ee:ac:5f:e1:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:D5:94:22:AB:56:FF:B0:FF:7C:C9:DB:95:88:FC:65:09:D2:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.177.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d0:79:23:67:2a:4b:65:94:46:21:55:42:83:03:6a:20:8f:
ad:18:e4:fe:32:1f:4e:a3:d3:ea:6b:e3:f9:13:02:88:5a:18:
88:0a:94:71:e6:b0:ea:e8:48:b0:7b:46:9e:dc:d7:1f:d5:d0:
87:6c:2b:4f:6c:b4:10:32:0e:02:91:12:60:e6:0b:ef:2a:d2:
98:af:5b:49:a8:ea:01:e4:32:41:b5:09:52:b0:b9:69:bb:12:
a1:b9:4e:c4:85:f8:80:d5:70:62:d6:15:01:fa:f0:7d:b0:3b:
1e:3d:1e:30:71:61:b5:79:53:2e:22:94:b8:63:9f:e0:f4:b8:
20:36:1c:c9:74:b2:51:08:d3:ad:34:7b:d3:b9:5c:7a:7f:af:
cb:11:ba:7e:59:83:ce:8e:3b:1b:7d:be:55:b5:1d:0e:8e:be:
96:49:ff:41:69:67:cd:b6:03:38:a6:c8:3b:87:bf:38:17:34:
6c:95:0c:ab:80:40:a4:69:2d:53:8e:c5:5a:75:ff:3c:c1:14:
e4:d6:57:65:fd:1e:1a:17:1b:7f:78:d6:e2:d7:f1:d4:74:da:
37:ad:1b:89:e5:57:bf:64:ed:c9:f4:3d:d1:bb:cb:d7:d7:68:
0f:49:a7:4f:09:e6:88:5f:b4:7b:18:b1:ff:21:3e:40:b9:d0:
de:5f:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:09 2026 by rpki-client