Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e20333939393535.roa
File: 3134352e37392e3233322e302f32312d3234203d3e20333939393535.roa (raw, json)
Hash identifier: SzkgBoAJE3A42fL/t7n6HhzPeBZXKMkBYat1XU1R6tI=
Subject key identifier: 6A:6E:46:2F:DC:A1:17:42:FC:3E:1F:99:5A:BA:EC:18:CC:82:15:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 213C76DB95D5725D06297F9BD8C902895B25DB5F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e20333939393535.roa
Signing time: Thu 30 Apr 2026 13:46:28 +0000
ROA not before: Thu 30 Apr 2026 13:41:28 +0000
ROA not after: Thu 29 Apr 2027 13:46:28 +0000
asID: 399955
IP address blocks: 145.79.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3c:76:db:95:d5:72:5d:06:29:7f:9b:d8:c9:02:89:5b:25:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:28 2026 GMT
Not After : Apr 29 13:46:28 2027 GMT
Subject: CN=6A6E462FDCA11742FC3E1F995ABAEC18CC8215FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:3c:09:16:46:ca:91:9b:7a:2e:21:9e:dd:
4a:c6:56:54:1e:6a:54:eb:35:fa:87:36:7a:28:34:
2f:47:be:e1:04:56:ff:a7:62:7e:84:d8:26:03:e1:
94:7b:48:98:ee:b3:3a:cf:3a:3d:c3:07:1a:cd:ad:
be:5f:05:a2:d9:14:6f:77:07:35:e2:47:93:08:f6:
fa:5c:7e:09:a6:00:20:76:e0:a5:c8:fc:87:7b:0f:
be:93:f0:85:04:25:b6:d0:02:a6:ce:32:86:e7:a3:
c2:ef:47:cd:2a:0f:a7:da:7c:05:3e:84:49:b9:48:
10:0a:20:bd:b1:bd:20:a6:83:64:d1:94:5e:56:d6:
d3:d0:47:60:4c:95:22:e0:8e:1c:6c:b9:95:e2:9a:
67:b9:13:bd:43:05:3d:9a:3d:db:92:ee:57:47:ac:
4a:8d:f9:ee:68:06:0a:94:98:4b:d3:d1:5b:cb:31:
b5:24:d3:2c:97:8c:08:cc:1e:5d:a3:f4:39:2d:35:
69:80:13:fc:c1:88:35:39:83:27:ef:93:94:d2:b0:
05:25:f8:88:e8:dd:da:01:50:9c:b5:41:88:e1:9f:
71:d8:5a:ab:e3:2d:08:73:f6:7a:65:f0:cd:df:98:
51:dc:94:31:44:42:e5:e4:26:8e:d9:cf:84:46:14:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6E:46:2F:DC:A1:17:42:FC:3E:1F:99:5A:BA:EC:18:CC:82:15:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e20333939393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:78:70:6a:c5:dc:76:f6:25:2f:9f:09:16:90:8b:47:e5:29:
78:ae:65:d0:2a:86:0e:d2:7d:4f:90:9a:00:c4:40:cc:8c:17:
fa:83:fa:04:bb:82:19:52:7a:bc:fb:9a:2d:a8:63:5d:86:49:
e9:55:d0:83:93:ab:d4:3e:89:5e:02:f1:8e:2c:7f:61:32:9f:
bf:29:7a:22:be:e8:c0:70:f6:8f:13:e6:f6:e9:19:e8:8b:c1:
a8:de:e7:a9:d8:3f:e6:b3:1b:c3:2f:8a:e9:55:b7:90:3d:d0:
a7:60:ab:e1:e8:3e:75:4c:78:ab:9b:dd:c9:26:6f:d8:d0:db:
1b:b9:32:31:1e:fc:df:0e:7a:b9:5d:0f:03:a2:78:65:83:eb:
87:10:b4:66:6a:9f:22:ba:50:63:fc:ca:d0:39:6e:ad:08:06:
db:70:aa:06:90:18:f8:98:7e:3d:85:27:32:0d:a5:87:53:b8:
71:6c:7e:8d:62:ff:8d:0a:35:b4:0e:ed:e4:36:42:62:18:1e:
9b:da:1f:58:ea:be:f0:79:1f:04:62:be:f7:63:76:c6:7a:da:
2d:a9:77:fc:8e:93:f3:b9:00:b8:d2:6d:83:59:b3:c6:87:64:
48:3b:61:bb:48:bf:ee:a7:e7:70:91:95:03:b7:7c:25:1d:7f:
a6:cb:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:30 2026 by rpki-client