Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138332e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3138332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: D9WMHeo6UJdPuYe/EhlyyJK0bFVwxPqjXbkqqlVuoHs=
Subject key identifier: D0:77:17:B9:F5:80:98:93:F3:A3:35:B1:F1:23:25:1C:DD:23:FF:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F54F1FAAC3330C0EF75E6F564CD24E3233178C5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138332e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:28 +0000
ROA not before: Wed 22 Jul 2026 16:31:28 +0000
ROA not after: Wed 21 Jul 2027 16:36:28 +0000
asID: 20473
IP address blocks: 145.79.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:54:f1:fa:ac:33:30:c0:ef:75:e6:f5:64:cd:24:e3:23:31:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:28 2026 GMT
Not After : Jul 21 16:36:28 2027 GMT
Subject: CN=D07717B9F5809893F3A335B1F123251CDD23FF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:e7:33:09:ba:f7:72:ed:f6:53:88:6d:8a:
92:8f:7a:9f:b1:d9:f6:c1:13:97:9f:04:9b:4b:64:
67:9d:83:a6:0d:5f:49:e4:44:27:6a:55:06:07:5e:
3b:63:4c:ad:04:be:49:8b:8e:30:7e:c8:83:6a:e9:
ea:84:a9:92:c9:a5:cd:99:79:0d:4a:35:83:20:de:
ed:b9:f7:59:5d:cb:4c:bc:6a:bd:89:40:50:0f:3f:
0a:51:4c:a4:0e:d0:98:a4:4f:7d:20:eb:3f:b2:9a:
59:d1:ac:cb:fb:34:c3:7b:74:1a:22:79:8b:d8:7e:
c0:b5:70:8a:f7:71:ac:3e:64:73:c6:18:89:59:8e:
c5:c3:3f:b3:47:d8:f3:4c:57:66:60:82:a6:76:a3:
46:31:9c:2a:1d:5a:c5:a1:b3:d4:cf:ed:73:30:5d:
b7:2a:2e:da:1d:b4:5b:a9:b1:9c:98:68:b4:e4:67:
6a:f0:3d:98:a9:cd:4b:66:3f:c2:88:4e:cc:61:39:
a4:d9:53:e0:a7:35:ba:5c:3a:c4:4f:b8:8f:97:c3:
60:a3:28:41:e1:53:9a:8e:b6:36:d9:32:ce:de:2d:
c2:62:94:b6:04:c2:b0:d0:a6:5f:f0:69:a1:27:17:
70:5d:1a:b4:a9:8a:1f:9b:f9:65:ee:6f:f2:32:92:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:77:17:B9:F5:80:98:93:F3:A3:35:B1:F1:23:25:1C:DD:23:FF:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138332e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a5:58:ec:0f:24:78:c3:a5:05:06:d6:c7:f3:73:c9:50:7b:
25:7a:43:dd:52:7a:70:14:2c:3f:55:c7:24:37:d9:ae:f3:ee:
43:f1:6c:1c:b7:3f:bc:8b:71:03:a8:6d:8d:48:d6:bc:6a:68:
09:e3:ed:bc:cc:78:7c:a2:08:d7:c9:da:40:fd:01:b2:07:93:
a0:43:17:6d:6e:97:b4:e3:45:69:92:d2:9b:76:c4:6f:d7:c8:
80:c3:a4:ab:e4:1d:05:1a:ca:1a:f0:d0:12:44:22:cf:fe:c1:
63:5e:de:e5:6a:29:eb:53:12:57:3d:ea:cd:c7:56:71:45:e8:
8d:b7:70:4b:b9:ce:40:54:f4:72:a2:0f:23:12:7b:08:d3:0b:
5b:b9:02:3d:4a:47:a4:26:89:30:5e:dd:43:a5:0a:fc:1d:0c:
07:d3:53:cb:ae:36:bb:b5:70:14:25:ab:27:34:e9:37:07:c9:
24:29:43:72:5c:98:fd:61:71:02:d0:6a:e7:62:72:41:30:ed:
83:db:45:65:a9:82:37:29:e5:7d:17:4f:c3:fe:9e:c2:d0:6c:
f4:8e:6a:72:54:e4:9c:9d:d2:de:eb:de:72:f7:e3:68:86:d4:
ed:ff:83:d0:4c:b4:31:df:74:44:1d:8a:13:ee:53:d8:9a:47:
5b:de:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:08 2026 by rpki-client