Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138352e302f32342d3234203d3e20323031333836.roa
File: 3134352e37392e3138352e302f32342d3234203d3e20323031333836.roa (raw, json)
Hash identifier: 6mo13yb++vAlEHJJxrNbjwrki26drqzp+ChuriDtIoQ=
Subject key identifier: 9C:EB:EC:9F:4F:4E:89:1E:B8:FF:C9:F4:2A:EF:6F:8B:A5:EA:23:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E810F51A02FF28F8740E2DFD351BB68B90BB412
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138352e302f32342d3234203d3e20323031333836.roa
Signing time: Wed 06 May 2026 08:56:10 +0000
ROA not before: Wed 06 May 2026 08:51:10 +0000
ROA not after: Wed 05 May 2027 08:56:10 +0000
asID: 201386
IP address blocks: 145.79.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:81:0f:51:a0:2f:f2:8f:87:40:e2:df:d3:51:bb:68:b9:0b:b4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 6 08:51:10 2026 GMT
Not After : May 5 08:56:10 2027 GMT
Subject: CN=9CEBEC9F4F4E891EB8FFC9F42AEF6F8BA5EA2381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:27:ad:5d:ca:40:6e:61:79:9e:0e:42:a5:7f:
64:6f:65:f6:09:be:1e:50:aa:71:cf:d4:a4:be:5f:
74:cb:4b:37:7f:de:da:69:3c:d0:5b:1f:4f:ba:e2:
90:94:ee:7a:92:fb:a3:da:01:fa:ff:95:18:3f:a7:
8b:ec:6e:4c:74:5e:a5:9e:5a:2d:ba:11:b6:fc:eb:
66:73:1b:af:0d:c8:7a:22:9a:3f:6c:2a:3d:97:12:
03:29:5b:8f:25:81:b9:cd:b1:80:03:2b:48:7b:34:
55:83:ef:7f:a4:6f:cd:33:7f:ab:a8:05:cb:0e:58:
43:89:6e:eb:15:27:64:33:40:97:21:f0:ab:1b:94:
9f:41:24:13:88:7f:8d:df:15:eb:9b:dc:7b:cf:52:
2c:ef:84:5f:28:1f:ea:3f:81:6e:1d:04:e0:bc:d4:
3b:06:12:1f:46:43:3d:a0:7e:25:d6:2e:a1:48:03:
3f:95:d5:92:3f:94:a8:b0:5a:82:05:48:ed:66:65:
2c:3f:02:58:41:8f:64:a1:4f:02:e8:a9:44:47:81:
ab:0e:c9:77:9f:b1:7e:8d:70:69:4f:d8:b0:b7:f7:
d1:45:e9:20:83:09:4c:e4:53:0c:01:16:95:01:c0:
fa:54:cf:9e:1a:b7:45:c6:e3:a8:a8:45:6f:e7:26:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EB:EC:9F:4F:4E:89:1E:B8:FF:C9:F4:2A:EF:6F:8B:A5:EA:23:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3138352e302f32342d3234203d3e20323031333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1b:b6:a4:5a:81:4a:d3:7e:15:61:93:d2:d5:cc:53:1c:11:
be:a0:5d:51:0f:87:82:cc:62:76:29:9e:fc:f8:ed:02:8f:f3:
1a:74:90:f2:18:2f:f7:f2:74:7b:31:af:f9:72:e1:b8:86:2d:
5f:c8:1a:71:5c:fd:7a:c3:fe:56:ab:7c:14:6f:50:f1:7a:0b:
5a:8d:66:ca:2b:11:71:d2:1f:63:77:1e:37:05:7a:4c:7e:da:
bb:66:b0:17:66:ca:65:88:fb:24:f1:15:81:dd:f6:68:85:c3:
b6:2e:6d:d0:c5:e1:79:49:42:eb:63:3d:f4:fb:71:e6:c7:5d:
59:3e:13:13:23:92:60:bb:3f:19:f3:6e:14:66:cb:9e:0d:cf:
61:51:42:4a:88:4d:f8:71:c7:33:59:ac:61:5a:69:7c:b0:6d:
07:fa:44:4a:97:cf:69:65:f4:98:35:41:73:06:72:dc:91:5c:
8c:57:1b:38:ab:1f:ce:72:a8:13:7a:b0:e0:9b:83:61:1f:d6:
6b:34:87:96:1d:6b:a3:bc:ba:2e:d5:4f:e1:97:aa:f3:b9:57:
47:a5:39:15:50:d0:f7:19:83:ce:03:ba:9b:02:4f:b3:be:32:
75:0e:3e:6a:26:35:31:f0:7c:a6:d0:14:83:c0:cd:43:49:52:
e5:64:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:07 2026 by rpki-client