Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: HtKHqEAOpoQ6DdM7fcxfVLUNefEgqwNrM5YLqN4gM84=
Subject key identifier: 51:D0:71:12:34:F1:B1:F7:32:EC:8D:13:EF:51:41:DF:5D:BF:77:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 829CB23F160F874D7781754472A37BC86D45BD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 08 May 2026 12:24:06 +0000
ROA not before: Fri 08 May 2026 12:19:06 +0000
ROA not after: Fri 07 May 2027 12:24:06 +0000
asID: 136787
IP address blocks: 145.79.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
82:9c:b2:3f:16:0f:87:4d:77:81:75:44:72:a3:7b:c8:6d:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 8 12:19:06 2026 GMT
Not After : May 7 12:24:06 2027 GMT
Subject: CN=51D0711234F1B1F732EC8D13EF5141DF5DBF7744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:5f:91:5e:8f:d7:53:9f:15:92:e1:ad:4d:
63:77:bc:0a:49:60:6f:38:73:f5:01:5b:d6:34:c5:
24:f2:2e:45:9d:eb:82:41:b1:07:f8:04:0a:65:55:
cb:78:d1:0c:b3:5a:d9:a5:74:78:9a:c2:25:0d:c1:
0d:79:c5:24:09:a0:a2:9d:38:fb:ce:06:60:a7:de:
b6:95:6e:0a:5c:45:d4:0f:b8:fa:13:ea:b4:90:d8:
b2:05:85:b3:18:02:70:e5:40:47:bd:f3:04:2a:67:
4d:08:d3:fa:66:40:a2:8e:1b:8a:3a:b2:ae:1f:43:
a7:9d:e6:4c:82:10:65:58:a8:ce:f9:0a:98:b8:30:
e6:d8:47:84:e2:ae:66:50:1d:37:61:fd:55:f9:5f:
b5:1e:ea:f2:cc:8c:ff:70:c0:7c:c4:c9:b9:fe:e0:
3e:b9:41:af:20:4d:68:9a:7d:c7:65:8d:44:06:2d:
ff:a2:0a:89:2c:e2:d2:6e:19:73:9d:19:58:b6:b7:
43:aa:6c:db:a3:d6:0e:99:56:dd:01:1f:e0:28:52:
fb:29:ad:43:95:73:ac:f3:f4:02:a4:7f:75:05:19:
85:3b:c2:99:02:71:9f:b4:46:0f:01:7a:4a:67:9e:
1f:51:76:54:6d:32:d1:6d:54:1b:37:84:49:4e:e8:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D0:71:12:34:F1:B1:F7:32:EC:8D:13:EF:51:41:DF:5D:BF:77:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.196.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9f:41:23:64:b8:a3:8c:66:b5:f7:33:11:04:06:ab:0f:53:
d5:9e:a6:be:64:64:ec:11:65:13:b0:e8:2a:4a:12:77:0a:3b:
e4:b8:43:ee:54:05:74:b2:14:e5:93:d4:19:63:17:69:01:af:
8f:20:a7:54:96:38:fe:cd:97:53:36:b2:38:98:67:bd:62:6a:
77:39:cf:05:d6:8a:d1:20:43:90:b9:ae:93:d5:16:03:6f:86:
ff:c3:c6:22:35:08:19:0a:33:1c:8c:37:8a:df:9a:28:44:52:
1b:95:73:e2:7a:eb:d9:2f:cc:4b:0f:93:8c:ce:75:48:7e:0f:
ba:21:73:ff:41:a0:4f:a3:28:1e:89:05:ba:ab:71:de:35:32:
33:88:5e:9e:39:4e:dd:95:28:cb:b8:0c:5d:50:c7:06:63:9e:
1b:e0:72:b4:c7:eb:8b:e1:c1:9c:4b:cd:59:77:ae:0e:01:24:
c1:1e:dc:14:9a:03:7f:71:d2:bd:f6:54:97:43:e4:8b:9a:96:
b7:2a:dd:9f:c1:7a:3f:cf:d7:93:5f:68:53:1b:0d:3f:4d:0f:
75:3e:8a:4b:d6:5c:f0:02:1c:9e:59:48:1d:b4:ae:6c:16:a8:
1c:d4:00:9a:ba:07:64:05:a9:56:23:6c:5b:e4:be:86:eb:ee:
57:59:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:13 2026 by rpki-client