Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137382e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3137382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: R5xR6BC8GRMORxwVq5adCYMFx6MrEsEIQm/+fu5wc9I=
Subject key identifier: 24:70:F0:97:2A:DD:1A:FF:76:D2:01:6E:57:BE:17:57:D1:07:EF:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1905C6CB4CB13618E980AEDF84FDB6C50BE5A568
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137382e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:21 +0000
ROA not before: Wed 22 Jul 2026 16:31:21 +0000
ROA not after: Wed 21 Jul 2027 16:36:21 +0000
asID: 20473
IP address blocks: 145.79.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:05:c6:cb:4c:b1:36:18:e9:80:ae:df:84:fd:b6:c5:0b:e5:a5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:21 2026 GMT
Not After : Jul 21 16:36:21 2027 GMT
Subject: CN=2470F0972ADD1AFF76D2016E57BE1757D107EF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:8c:b2:32:8b:5d:ad:68:68:56:5d:9a:41:
19:88:14:2f:dd:f9:77:48:d0:9c:99:e1:60:25:af:
ba:ff:29:40:22:b8:71:4f:8f:87:d2:f0:ec:96:78:
4f:80:52:9f:19:08:8e:f2:55:f0:8a:f2:73:e7:de:
3f:f8:10:86:d4:2d:36:37:30:75:44:84:74:41:13:
44:84:c7:d2:ff:59:e1:7f:69:b9:81:f3:2c:91:ed:
84:58:ae:e9:04:ab:b5:3d:84:34:e6:d0:22:c8:07:
0e:81:e8:7f:c8:01:0f:95:b7:7c:5f:35:a8:97:75:
c2:a5:b8:aa:e0:fb:31:20:21:14:3d:09:f2:e3:cd:
f9:99:7d:ce:31:04:04:e4:72:cc:23:0c:16:f7:ff:
a2:9b:dd:41:f4:77:bf:d9:67:ff:0d:00:c2:56:ac:
32:aa:98:cd:fd:76:8d:4f:4f:10:b0:18:b6:b0:09:
72:7c:9c:77:56:71:30:51:31:71:1f:df:ea:b6:0d:
db:57:dd:13:e1:df:23:65:25:ae:7f:72:a1:c5:52:
16:b9:2c:ac:86:b7:0b:cd:bc:2d:f7:65:d4:e7:28:
4e:e9:74:b4:0f:93:b9:b6:01:e0:b1:b6:02:db:d8:
76:74:c4:83:3c:1b:cb:3f:00:7e:11:dc:67:bb:b0:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:F0:97:2A:DD:1A:FF:76:D2:01:6E:57:BE:17:57:D1:07:EF:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137382e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.178.0/24
Signature Algorithm: sha256WithRSAEncryption
22:89:c7:99:c3:1a:c9:db:64:29:61:cd:72:23:d4:fc:40:22:
97:87:24:4a:c9:2a:c3:22:ac:03:56:14:fe:99:85:0e:4d:b3:
33:c3:72:59:4b:14:92:2e:2b:d5:74:bc:a1:66:56:97:43:9d:
be:db:78:fd:8c:2f:b8:2c:0f:ac:26:a7:ba:3c:98:c5:d8:52:
d2:24:de:b3:b0:14:de:94:76:cd:a7:33:e4:a5:09:b4:b3:7a:
fa:71:0a:22:92:25:4f:54:78:fa:31:74:76:8c:76:52:b9:52:
06:73:91:d1:74:a6:7d:2b:e3:47:1e:3b:65:08:b5:09:fa:b6:
00:7c:b5:ae:7b:40:ba:2c:32:37:a3:17:d2:47:be:a7:29:91:
ee:85:01:d2:23:ad:2a:ec:07:d5:71:28:b2:88:e3:d7:e9:1c:
6e:95:e4:bd:a0:14:f4:08:a2:dd:9f:79:63:19:a7:81:2b:8a:
f0:00:87:e6:f3:a5:8d:81:58:b3:a6:4a:89:32:fd:5d:d5:6a:
c8:ef:4f:a7:2e:09:a7:aa:27:f1:fe:0d:53:dc:a8:e2:b0:ad:
62:0c:db:47:a1:bf:0c:a3:96:1d:c1:95:cf:24:5a:61:37:fb:
30:33:b1:16:b6:ee:d1:cf:87:07:88:4e:d1:be:28:a6:64:02:
10:51:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:07 2026 by rpki-client