Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3230382e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e3230382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: daBXk8AVIPSjkqTMI6DQIDESLVhuoeekb3YUbygO8pU=
Subject key identifier: 86:74:3E:36:CB:DB:45:B4:F2:CE:44:E7:19:1B:4A:8E:B0:3B:16:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2255879B135F6E7AD591E44C13763B43A9ED88E2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3230382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 12 Mar 2026 10:23:24 +0000
ROA not before: Thu 12 Mar 2026 10:18:24 +0000
ROA not after: Thu 11 Mar 2027 10:23:24 +0000
asID: 47583
IP address blocks: 145.79.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:55:87:9b:13:5f:6e:7a:d5:91:e4:4c:13:76:3b:43:a9:ed:88:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 12 10:18:24 2026 GMT
Not After : Mar 11 10:23:24 2027 GMT
Subject: CN=86743E36CBDB45B4F2CE44E7191B4A8EB03B1645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:ae:49:6a:09:55:e1:81:1a:4f:08:40:81:
36:a4:7e:c9:08:e8:02:f5:f5:6c:3d:a5:91:f7:2d:
90:25:e3:2a:70:88:59:5c:16:81:3b:31:44:1b:c7:
e8:ca:43:94:87:8f:0b:c8:50:e9:d7:17:89:6c:6b:
07:3d:f0:4f:91:7a:45:be:74:6b:0f:20:51:24:5c:
73:62:2c:e1:bf:79:d6:68:af:a2:0e:a9:e9:30:24:
b0:6c:49:06:65:b9:4e:0c:ff:bc:65:55:ec:cc:31:
9b:ee:ea:dc:18:eb:5c:e0:fd:03:56:ed:73:ae:ef:
6e:31:a3:2d:4e:0f:88:a4:45:31:3c:b7:8f:11:0d:
e1:49:54:31:ff:bc:5e:57:0b:e7:c3:fb:fd:2e:39:
cc:9a:ec:ef:c5:98:ec:2a:37:03:13:a7:76:22:e9:
ef:32:3e:b2:ba:d0:3c:ec:ac:4f:80:90:24:10:2f:
60:b6:ea:25:2f:d4:b9:0b:9e:f6:9a:4c:27:99:79:
3d:96:74:9a:da:e9:10:ea:f1:86:b2:03:00:95:58:
4a:1a:23:8b:6d:d7:d9:c3:af:74:28:be:8c:be:5a:
f4:fb:07:83:76:02:7e:09:7b:39:52:98:46:a6:e6:
c7:b3:a9:5e:76:22:45:6f:1d:b0:8a:a8:68:c7:3e:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:3E:36:CB:DB:45:B4:F2:CE:44:E7:19:1B:4A:8E:B0:3B:16:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3230382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.208.0/21
Signature Algorithm: sha256WithRSAEncryption
95:57:2d:d5:87:b4:e6:f3:45:1f:4f:d7:00:95:8d:d1:bc:e1:
fa:06:c5:ba:11:db:5d:70:a4:fd:10:5a:be:9d:77:c8:16:0a:
51:07:7a:98:91:e3:40:8e:9f:87:d3:11:22:e8:ce:90:c1:64:
15:1c:89:b1:2c:ac:40:b3:e3:c6:2b:f9:71:50:b6:0f:61:dd:
94:5b:5e:c6:2c:6b:e9:56:01:8e:21:10:41:40:19:15:5c:7c:
c1:4d:d8:5d:9a:a9:b2:e4:19:df:05:48:00:eb:0e:f5:73:d0:
f1:09:eb:aa:f6:8b:4e:de:a0:63:48:2a:24:92:d9:71:6b:75:
c2:8d:84:a0:33:b4:18:cc:1f:40:13:1f:51:74:65:75:3f:b3:
33:3b:cd:7e:b8:c8:41:ac:83:4d:53:47:95:5c:89:cd:fc:91:
9c:59:b9:a7:4d:29:51:24:8a:35:8a:78:fb:a3:04:ca:5d:b0:
36:32:ea:25:f3:12:bb:7f:15:f0:2b:93:03:98:a2:52:a9:e8:
ba:9a:15:fc:0f:97:f9:f1:35:a9:79:1e:9c:fd:38:67:23:b8:
e0:44:82:c8:cb:2d:df:a5:c9:33:c8:d1:d1:74:d8:ec:2f:b4:
f1:03:4e:66:9b:50:ec:fa:a3:f9:a7:08:ff:78:00:fb:e6:a6:
b8:5f:03:3d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIlWHmxNfbnrVkeRME3Y7Q6ntiOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTIxMDE4MjRaFw0yNzAzMTExMDIzMjRaMDMxMTAvBgNV
BAMTKDg2NzQzRTM2Q0JEQjQ1QjRGMkNFNDRFNzE5MUI0QThFQjAzQjE2NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xK5JaglV4YEaTwhAgTakfskI
6AL19Ww9pZH3LZAl4ypwiFlcFoE7MUQbx+jKQ5SHjwvIUOnXF4lsawc98E+RekW+
dGsPIFEkXHNiLOG/edZor6IOqekwJLBsSQZluU4M/7xlVezMMZvu6twY61zg/QNW
7XOu724xoy1OD4ikRTE8t48RDeFJVDH/vF5XC+fD+/0uOcya7O/FmOwqNwMTp3Yi
6e8yPrK60DzsrE+AkCQQL2C26iUv1LkLnvaaTCeZeT2WdJra6RDq8YayAwCVWEoa
I4tt19nDr3Qovoy+WvT7B4N2An4JezlSmEam5sezqV52IkVvHbCKqGjHPqDpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUhnQ+NsvbRbTyzkTnGRtKjrA7FkUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMjMw
MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
kU/QMA0GCSqGSIb3DQEBCwUAA4IBAQCVVy3Vh7Tm80UfT9cAlY3RvOH6BsW6Edtd
cKT9EFq+nXfIFgpRB3qYkeNAjp+H0xEi6M6QwWQVHImxLKxAs+PGK/lxULYPYd2U
W17GLGvpVgGOIRBBQBkVXHzBTdhdmqmy5BnfBUgA6w71c9DxCeuq9otO3qBjSCok
ktlxa3XCjYSgM7QYzB9AEx9RdGV1P7MzO81+uMhBrINNU0eVXInN/JGcWbmnTSlR
JIo1inj7owTKXbA2Muol8xK7fxXwK5MDmKJSqei6mhX8D5f58TWpeR6c/ThnI7jg
RILIyy3fpckzyNHRdNjsL7TxA05mm1Ds+qP5pwj/eAD75qa4XwM9
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:24 2026 by rpki-client