Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138302e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3138302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: QXmBPp+DLTfjRrj/QUnij7IFoBnHW7QXlwSJ02UfEKA=
Subject key identifier: FF:EB:1F:DE:58:39:A2:EF:5B:55:F5:80:A5:D2:D4:EA:B1:A0:85:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 327103CE2361A9645D8EE9B95737F6ED9B3C5D52
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138302e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:25 +0000
ROA not before: Wed 22 Jul 2026 16:31:25 +0000
ROA not after: Wed 21 Jul 2027 16:36:25 +0000
asID: 20473
IP address blocks: 145.79.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:71:03:ce:23:61:a9:64:5d:8e:e9:b9:57:37:f6:ed:9b:3c:5d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:25 2026 GMT
Not After : Jul 21 16:36:25 2027 GMT
Subject: CN=FFEB1FDE5839A2EF5B55F580A5D2D4EAB1A085CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:be:4a:50:36:f2:b1:dd:12:30:9c:6b:8e:
4f:b0:98:d2:85:c9:db:74:71:7d:06:46:c2:71:66:
a9:7d:7a:c3:5a:25:07:f1:8b:53:4a:95:d2:c4:26:
61:0c:4f:b6:88:ac:11:48:70:65:b2:c3:a9:52:1b:
2e:5d:d5:18:24:22:4b:65:7d:f7:26:f4:c0:2e:f6:
19:e0:28:7f:9e:fb:f9:23:0d:87:52:eb:53:81:a5:
f4:ee:18:87:63:56:21:00:3b:fb:c6:9e:40:6f:3e:
53:fc:00:59:83:f4:1b:9b:59:5c:5f:0b:02:03:1e:
3d:9d:51:63:d7:46:45:19:57:c6:01:bc:22:21:01:
6d:10:11:36:73:54:d5:d1:22:c4:9f:0f:bb:23:c5:
d4:0c:82:82:8f:08:f6:ea:76:69:37:db:93:03:75:
17:31:3d:74:d8:86:1a:e8:56:6a:af:6a:3d:c9:5d:
bc:3b:0e:92:08:26:97:80:b4:ed:b9:70:28:96:e5:
a6:f0:48:90:de:dd:cc:ac:2c:9d:e3:9e:ef:ac:f6:
02:db:ee:a6:e4:f2:ae:3d:55:ff:ae:9e:94:f9:6a:
d8:5d:c2:e4:67:cd:4b:a9:24:48:0b:bb:97:fa:63:
9b:77:be:34:8e:95:61:9e:6b:cd:25:9d:37:00:fc:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:1F:DE:58:39:A2:EF:5B:55:F5:80:A5:D2:D4:EA:B1:A0:85:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138302e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.180.0/24
Signature Algorithm: sha256WithRSAEncryption
05:95:14:af:de:d8:ef:20:a7:f9:c7:da:87:9d:d7:46:96:1e:
62:d6:fb:c7:7b:13:5d:56:5a:31:2a:3c:f1:3c:f5:6d:b2:c7:
f7:3a:c7:b8:20:28:d7:df:ff:53:f3:5e:1d:4e:89:1a:ef:f3:
04:ba:ad:3b:8e:61:c3:09:af:79:20:a4:de:35:af:51:4e:4d:
22:90:28:2e:e5:1b:3c:4e:56:24:bc:c1:d6:69:21:4d:00:77:
eb:9e:9b:87:9e:36:c6:1e:40:5e:fa:bb:a0:91:fa:21:c0:4f:
e3:3c:bd:90:5c:40:78:1d:ad:01:ee:59:bb:6c:92:1e:df:61:
cb:33:3a:de:fb:34:9d:5d:d9:05:04:67:a4:65:5b:66:d8:96:
3f:2a:fe:a9:cb:05:cf:69:00:0a:63:5b:b2:d3:bf:06:a3:71:
2e:79:cf:c0:49:96:d9:28:c4:17:67:64:a8:55:e6:01:cf:0f:
ab:ce:4a:81:06:84:7c:57:2b:57:7a:b0:58:24:85:69:fc:b3:
98:fd:90:e4:42:29:a1:31:f1:30:65:99:d8:68:e8:c4:d5:dc:
57:15:65:71:cf:13:b8:50:9b:fa:26:ae:52:88:92:42:52:de:
00:10:0e:52:80:0a:a9:5d:92:70:76:5c:c5:21:7b:b6:b8:04:
cf:e4:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:09 2026 by rpki-client