Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139312e302f32342d3234203d3e203230343733.roa
File: 3134352e37392e3139312e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: L4Fnka/3M6q5Hg6oRiCwZJO3VyhwcW2gHI6VkWzQa1g=
Subject key identifier: 82:0E:5E:1F:78:D4:00:81:41:83:E5:ED:9F:CC:0A:AD:70:AE:92:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 72765088D3B15B6AF9343E6AF4ECCD3A493DF090
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139312e302f32342d3234203d3e203230343733.roa
Signing time: Wed 22 Jul 2026 16:36:36 +0000
ROA not before: Wed 22 Jul 2026 16:31:36 +0000
ROA not after: Wed 21 Jul 2027 16:36:36 +0000
asID: 20473
IP address blocks: 145.79.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:76:50:88:d3:b1:5b:6a:f9:34:3e:6a:f4:ec:cd:3a:49:3d:f0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 22 16:31:36 2026 GMT
Not After : Jul 21 16:36:36 2027 GMT
Subject: CN=820E5E1F78D400814183E5ED9FCC0AAD70AE9297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:a8:1a:af:5d:06:c3:26:b9:69:c6:59:8e:
18:bd:61:a0:13:25:7b:0a:4e:a9:21:e4:21:e3:13:
f8:ee:02:87:76:bf:76:7b:b5:e8:34:e6:41:0c:5c:
64:1d:a6:fd:d4:f7:02:97:2b:44:db:09:13:52:83:
f1:68:02:ee:a7:50:3c:be:b1:65:58:21:71:d9:84:
97:28:42:d1:96:7a:ce:07:c0:b9:7a:8b:81:1f:9c:
18:bf:19:ac:4b:94:8f:1e:f2:8a:d6:cf:96:74:3e:
c2:06:31:8c:dd:f1:21:e4:82:1d:a9:0a:7d:3b:ea:
7f:2b:e7:76:dd:7b:4b:18:77:7d:57:2b:29:50:f7:
8b:d2:8b:7e:be:a4:8b:47:4c:47:7b:95:88:20:a4:
af:52:5e:c9:99:93:ce:51:19:3b:da:d7:b2:20:28:
ab:91:e7:f7:32:35:5d:f7:82:29:99:13:b3:01:b0:
e5:e9:34:72:3d:46:ae:4c:b4:00:2d:e0:d5:66:9d:
4b:f7:6c:d8:32:2e:7c:ea:33:bd:eb:60:f8:21:07:
8f:7a:e7:04:51:b1:73:d9:c0:b0:13:ee:60:29:34:
48:cf:8b:12:68:af:57:f9:d1:81:d5:e3:52:4b:a8:
7b:19:d1:b5:74:3b:bb:ac:47:1a:10:ee:3a:8a:9e:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:5E:1F:78:D4:00:81:41:83:E5:ED:9F:CC:0A:AD:70:AE:92:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139312e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.191.0/24
Signature Algorithm: sha256WithRSAEncryption
74:6c:db:84:51:0a:54:f4:49:55:af:d3:19:a6:a2:6e:36:30:
b3:54:6c:af:5d:37:1c:ce:47:c6:29:39:13:0d:d3:97:ff:9f:
37:2a:3d:4a:06:56:45:49:c7:b0:5f:c3:0f:7c:72:4f:b9:10:
bb:c2:02:e1:10:68:6a:05:da:a1:70:6e:64:5d:51:c8:20:a3:
98:51:b2:f2:2c:2b:8a:b3:26:c5:de:13:6e:ab:28:86:fd:f1:
87:63:fa:96:5a:13:7b:2c:15:57:aa:a1:e2:6e:8b:e4:97:92:
48:d3:85:d9:c5:7d:79:b8:ba:91:d6:12:96:2c:81:dc:3e:e3:
5f:78:2a:88:38:12:b5:dd:a9:c9:5f:7d:78:23:e9:90:c8:50:
46:13:1b:2b:e1:6b:73:d0:85:07:f8:a1:e0:76:8b:13:6a:ad:
29:b6:16:c4:b7:26:37:64:aa:8f:97:14:b1:01:34:e7:a1:97:
0d:61:ce:77:30:44:48:95:14:50:24:0e:7e:a6:46:5b:8b:f7:
9f:13:83:9e:bd:99:55:71:82:f2:03:63:82:36:70:f2:98:b3:
fa:d0:30:59:53:3b:71:ae:f7:53:67:fc:4d:b2:1c:50:46:9c:
f0:ec:b5:78:e8:99:84:62:b8:99:1a:1e:e5:ef:50:99:10:38:
d5:37:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:14 2026 by rpki-client