Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139372e302f32342d3234203d3e20313336373837.roa
File: 3134352e37392e3139372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: MebWauJRKEpC6pwl/KqigzwSqsLiF/KBZ1NqAz6s2KA=
Subject key identifier: F8:00:4E:CE:B5:8C:ED:3D:49:59:FC:A9:4C:1E:67:C1:06:1A:EA:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4A6563ACC0513EB5B062001CCBC00708D4597ECD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 08 May 2026 12:24:06 +0000
ROA not before: Fri 08 May 2026 12:19:06 +0000
ROA not after: Fri 07 May 2027 12:24:06 +0000
asID: 136787
IP address blocks: 145.79.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:65:63:ac:c0:51:3e:b5:b0:62:00:1c:cb:c0:07:08:d4:59:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 8 12:19:06 2026 GMT
Not After : May 7 12:24:06 2027 GMT
Subject: CN=F8004ECEB58CED3D4959FCA94C1E67C1061AEAC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:29:02:6b:12:33:d2:46:8b:a7:35:56:cf:
b4:40:65:a5:46:bd:d4:f6:83:96:3c:93:b0:90:7f:
65:c8:ea:5c:12:0b:13:7c:a6:4d:80:29:96:0a:9f:
c5:ef:bc:6b:29:a8:8c:7b:72:bc:a9:cc:dc:72:5c:
3a:12:6f:2a:f4:a7:73:27:b1:39:32:2c:8b:7d:13:
c7:78:77:29:c6:ae:04:45:68:ac:66:8d:c9:2a:29:
86:d8:34:1e:02:31:fd:b4:ae:5b:1e:c6:89:6a:88:
6c:b1:99:1b:bd:97:f3:ed:c0:14:53:5a:e1:59:a4:
bf:0c:51:ef:9f:5c:2e:bb:db:1d:91:07:10:4a:25:
cb:d1:ab:ad:b3:cb:73:13:30:20:0e:e7:c7:89:6b:
12:cc:59:40:ab:0a:35:26:86:10:3b:79:eb:d3:c7:
57:52:f2:fb:d0:36:8d:2e:b2:bd:1b:a7:ee:49:33:
a1:dd:eb:6b:83:3c:93:59:8f:c0:ca:5d:19:ae:68:
55:ce:82:6f:4d:59:16:8f:b9:d5:4e:61:e3:2c:98:
61:ec:f3:5d:82:ff:66:eb:22:dc:f8:63:0a:f7:35:
25:7c:1d:a7:14:38:c4:ff:43:12:76:08:0c:46:4b:
47:d5:37:7a:f5:38:e6:dd:61:85:b2:97:69:97:e8:
94:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:4E:CE:B5:8C:ED:3D:49:59:FC:A9:4C:1E:67:C1:06:1A:EA:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3139372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.197.0/24
Signature Algorithm: sha256WithRSAEncryption
83:73:dd:b4:7b:53:1e:de:c7:6e:de:ff:c4:ff:5f:ca:ca:12:
68:43:26:bf:48:74:a9:6b:27:bd:05:52:4f:01:fb:a4:1e:51:
20:69:84:c8:80:0f:aa:bb:2c:43:c2:27:c7:43:44:ab:c7:50:
6c:b1:c2:e7:8b:10:67:be:9d:d8:73:49:cc:24:0b:33:4c:c7:
12:1e:bd:46:46:cf:fb:5f:31:e0:85:98:c3:8b:6a:f1:cf:5e:
2b:34:ab:cf:85:b4:fd:eb:cb:b1:8f:47:aa:ae:b0:5f:b9:f2:
43:74:3b:59:f8:e8:71:29:5f:50:39:ba:76:97:29:d6:b5:97:
a7:47:d0:f0:9f:84:f2:51:2f:60:f1:79:76:a0:c1:ce:11:66:
3b:5d:e4:5e:b4:ce:80:8f:4b:2b:d2:bf:1c:d0:98:60:86:be:
4c:09:d1:83:ce:e7:74:54:88:5f:90:8f:27:38:54:fc:fa:2e:
9d:75:8a:0b:4e:50:bf:0d:c8:ac:01:22:d7:33:4c:c2:ea:e7:
52:15:01:3c:9a:73:a6:02:c9:af:04:56:87:35:39:d7:1d:46:
04:6e:bc:f9:e0:5f:cd:bd:2d:e4:38:6a:f5:ba:59:7c:8e:ed:
91:be:bd:9b:4b:15:b8:9e:21:a4:cf:fd:f7:6a:03:e8:67:a0:
4f:22:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:51 2026 by rpki-client