Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137392e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3137392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: PJtBnEZ+eZYfiZdjdEh2HW01FAjxkHcR7Ov1mnnaCq4=
Subject key identifier: 97:66:72:6F:EC:F6:E1:7D:92:4F:4F:CE:D4:F4:0D:1C:97:09:3A:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16E509465B40F89F17AC13D2E7C74FAAB357D44F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137392e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:23 +0000
ROA not before: Wed 22 Jul 2026 16:31:23 +0000
ROA not after: Wed 21 Jul 2027 16:36:23 +0000
asID: 20473
IP address blocks: 145.79.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e5:09:46:5b:40:f8:9f:17:ac:13:d2:e7:c7:4f:aa:b3:57:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:23 2026 GMT
Not After : Jul 21 16:36:23 2027 GMT
Subject: CN=9766726FECF6E17D924F4FCED4F40D1C97093ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:53:a8:30:43:16:ce:64:57:f8:61:1f:03:
a3:0f:05:4a:8b:68:4c:c9:3e:0f:cf:0a:42:db:34:
bc:87:84:4a:66:66:c0:e1:2f:b9:53:83:84:bc:23:
f8:2b:b0:72:06:88:2e:dc:19:6e:50:f8:a5:bb:58:
70:b7:50:92:0d:2f:22:05:33:0f:42:a5:04:fe:69:
e0:d9:31:ad:98:54:9a:c1:c9:23:02:b7:6c:35:3a:
75:93:89:44:ac:4b:ae:ef:a1:62:8a:0c:1d:55:c6:
e1:24:46:ab:f4:99:02:67:0f:2f:9f:74:fe:48:9d:
7d:0c:7e:f3:18:53:e5:3d:b8:28:fe:ba:7a:ae:cb:
5a:f4:15:01:bf:0b:c0:97:08:d1:e0:eb:f8:f5:23:
ed:fd:86:cc:6f:b3:37:03:5d:23:77:ce:26:d6:34:
3d:ec:60:5f:44:df:53:fd:9f:f8:f1:96:85:31:c7:
25:6f:a4:27:3a:90:ad:ef:80:e6:76:70:70:71:62:
d3:a8:c4:74:f9:56:41:a7:38:87:66:58:11:fd:d9:
75:04:a0:a9:85:37:f6:f0:fd:e5:fa:f5:1d:da:d5:
31:8d:81:2c:1b:d8:85:bd:23:52:36:e2:b2:ea:eb:
7c:75:a2:75:0a:1f:09:72:fc:79:76:28:6e:a2:e0:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:72:6F:EC:F6:E1:7D:92:4F:4F:CE:D4:F4:0D:1C:97:09:3A:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137392e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.179.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b5:2b:f4:ac:f2:1d:5c:e9:93:20:e7:c2:e6:25:e0:1d:9b:
36:2f:d2:23:14:23:2d:50:27:8d:dd:22:da:c2:b6:32:27:11:
50:a8:61:a2:5c:2a:fc:40:5c:96:08:e2:0d:30:d2:cd:0e:09:
d8:cd:25:52:65:42:ef:8e:df:39:e2:57:a8:f4:26:71:1a:16:
b9:2a:b8:ea:95:b6:50:92:58:ea:49:21:ca:9b:5a:8f:4d:9a:
83:09:ee:13:36:45:d5:96:ab:23:66:0a:84:b0:51:a4:ec:05:
5c:6a:40:6a:d7:28:f0:16:93:35:17:ec:f6:da:f8:e2:5b:89:
c9:ab:8b:c9:17:37:26:45:7c:bb:2c:1d:ac:1b:81:68:db:8a:
a8:44:77:8e:78:f0:f9:6c:bf:43:49:76:65:1a:9d:f8:05:c5:
aa:29:ab:04:97:2d:bb:64:1c:d3:26:62:56:46:d5:3f:aa:48:
d3:b6:92:6b:92:78:3b:2f:9d:16:1c:20:30:8e:18:ff:00:63:
a1:dc:1e:12:9c:ca:a0:71:44:e1:a5:c3:16:fa:37:c4:c0:14:
c8:8e:a2:d0:50:80:8e:01:a2:70:27:4c:50:93:96:d1:72:4b:
93:fb:77:e0:76:a6:f0:4e:c2:6c:40:8c:81:ec:ca:23:41:c2:
e1:3a:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:05 2026 by rpki-client