Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232382e302f32322d3234203d3e20333939393535.roa
File: 3134352e37392e3232382e302f32322d3234203d3e20333939393535.roa (raw, json)
Hash identifier: uz8mPjBXzIM33r6omqmqavdlPiWoI5eN9PcPMHEaH98=
Subject key identifier: 5E:AD:9C:18:97:99:4F:26:D4:C4:63:5E:F0:45:A8:B1:8E:2E:63:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3C503EF365D740987E8525C74A063876612FB97A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232382e302f32322d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:28 +0000
ROA not before: Thu 30 Apr 2026 13:41:28 +0000
ROA not after: Thu 29 Apr 2027 13:46:28 +0000
asID: 399955
IP address blocks: 145.79.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:50:3e:f3:65:d7:40:98:7e:85:25:c7:4a:06:38:76:61:2f:b9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:28 2026 GMT
Not After : Apr 29 13:46:28 2027 GMT
Subject: CN=5EAD9C1897994F26D4C4635EF045A8B18E2E63C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:ea:5a:29:6b:81:74:b3:17:ec:c8:e1:0f:
bc:d4:40:de:9a:b5:9f:84:5d:df:5a:34:3b:17:e8:
c9:fe:cb:20:ea:6d:5b:1b:93:bf:95:45:b7:0c:ff:
c0:f1:85:72:0f:28:dc:53:d4:c4:cf:75:44:f8:8a:
35:82:9c:77:ca:bd:9e:e1:85:96:0e:34:a3:bb:28:
d6:6a:c5:cc:fe:68:28:25:2e:60:11:de:5a:5a:67:
50:56:76:ee:66:46:6a:78:ba:3e:8d:88:a8:e9:17:
f5:94:c1:b4:e8:d4:d7:2e:d5:36:55:dd:2a:a2:ef:
d7:08:f8:54:22:b6:e2:e5:6f:92:3e:db:1f:9a:1d:
cd:3c:c2:78:98:32:8b:18:76:aa:33:02:06:3f:5f:
02:be:41:ad:b7:e4:eb:01:22:94:89:06:20:97:6c:
6e:2c:d7:1c:a4:6d:5f:51:66:d2:81:5a:72:e1:51:
a7:e9:4c:59:76:44:a3:5f:61:cd:23:26:cd:ed:1e:
38:05:35:b8:3b:bd:e7:17:c5:4e:d3:69:d2:79:13:
31:ef:40:5a:19:9a:2d:06:16:7b:01:05:50:dd:d5:
42:71:5c:25:59:82:19:a1:59:0a:59:fe:ba:8e:cf:
57:5c:c5:84:b0:7c:c4:53:2e:51:bf:93:4e:98:e2:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AD:9C:18:97:99:4F:26:D4:C4:63:5E:F0:45:A8:B1:8E:2E:63:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3232382e302f32322d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.228.0/22
Signature Algorithm: sha256WithRSAEncryption
79:35:65:27:b8:ae:9c:fb:ab:07:8b:77:c8:b2:ba:ef:86:5e:
eb:bc:88:ce:ec:76:ae:6a:eb:85:3e:f9:45:40:31:2c:09:29:
b0:f9:60:5f:59:e7:31:8f:a7:15:7b:64:f7:30:09:06:7e:3c:
d8:ba:96:0c:e4:90:82:99:ad:df:57:6a:d8:41:b5:d7:e5:49:
9a:f9:16:f9:52:00:fa:08:6c:d8:6b:4d:01:2f:50:e7:1b:ee:
63:50:3a:4a:46:a4:d4:82:e2:9a:2e:38:dd:48:8a:77:ec:ef:
90:d7:71:e0:11:33:12:d0:0a:74:54:b8:ac:84:ef:4f:df:6e:
82:c9:1b:cd:54:33:52:a3:82:35:30:1f:1b:78:66:6e:3b:6b:
a4:ed:7b:43:13:ae:d9:4f:b8:85:25:2a:c0:88:31:c9:da:3b:
1b:ea:88:eb:99:44:3d:21:dc:67:cc:17:ca:f3:0f:a2:b7:31:
3d:dd:70:ef:e0:14:ed:3c:c6:71:4a:6d:69:a0:72:8c:80:8e:
a2:e0:8a:43:61:bb:dc:ff:85:9b:c0:03:60:e6:83:eb:86:21:
1a:24:aa:7d:8e:57:6d:48:4b:84:c9:af:c2:85:42:01:2c:8a:
f9:7d:e8:c6:3e:7e:71:d0:1c:96:e0:4e:ef:e0:b6:fb:f1:19:
c7:e0:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:56 2026 by rpki-client