Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2036303739.roa
File: 3134352e37392e3233322e302f32312d3234203d3e2036303739.roa (raw, json)
Hash identifier: vzOxtwrJxL3dGIyOk0aIZzeqWdBVuMU+dq/HZ7bDMUU=
Subject key identifier: AF:B3:99:9D:42:7A:CF:09:37:3F:A7:97:CE:12:08:CF:86:FC:8A:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1D31ED63ABC44B121C70A4FF5C2D72D3F60B7FCB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2036303739.roa
Signing time: Thu 30 Apr 2026 13:46:15 +0000
ROA not before: Thu 30 Apr 2026 13:41:15 +0000
ROA not after: Thu 29 Apr 2027 13:46:15 +0000
asID: 6079
IP address blocks: 145.79.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:31:ed:63:ab:c4:4b:12:1c:70:a4:ff:5c:2d:72:d3:f6:0b:7f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 30 13:41:15 2026 GMT
Not After : Apr 29 13:46:15 2027 GMT
Subject: CN=AFB3999D427ACF09373FA797CE1208CF86FC8ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:a0:b7:2e:da:b1:7f:f1:cb:1e:31:d2:71:
fe:3b:de:7e:bd:a7:b7:05:59:34:27:33:77:ae:70:
44:95:d9:ab:c9:b8:cb:ed:e1:ad:bd:00:0f:bf:f9:
55:c3:69:a2:6f:d5:40:e7:fa:9a:c0:4b:6b:17:b8:
d6:23:28:75:2b:2d:11:40:53:75:bf:c1:ed:58:41:
b8:c9:72:55:de:c0:28:8e:1e:39:65:d1:b0:ba:31:
85:72:7e:fe:ec:5f:94:1c:ac:86:9a:52:a2:2d:7d:
b6:53:cb:11:74:37:22:a7:ef:2b:5b:bd:b4:7e:29:
76:54:d0:1b:11:75:b1:49:ad:67:d9:66:a1:c1:f8:
09:de:2b:35:92:98:01:e0:c0:16:de:0c:e4:ec:5d:
98:3d:a1:8f:ba:c3:1f:52:f4:58:76:e6:79:21:44:
7d:a3:3c:9e:c7:b5:8e:05:f4:44:c8:b3:11:c1:4d:
d7:36:eb:55:a9:72:85:db:80:c0:aa:b4:18:bc:da:
41:cf:ce:14:3f:67:e7:34:57:9c:27:b0:b2:8a:1e:
59:5c:f2:10:d8:ce:72:dd:be:8b:b4:08:41:42:d4:
55:97:c5:d8:c8:a2:f4:ed:1f:5b:af:70:b0:5e:87:
2c:41:d5:35:63:6c:9f:ca:99:a9:f7:2a:53:2e:49:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:99:9D:42:7A:CF:09:37:3F:A7:97:CE:12:08:CF:86:FC:8A:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:5d:02:19:a3:e5:72:a0:a5:77:ad:bd:1c:d0:ce:ef:d8:f6:
64:a7:62:24:ba:2d:64:72:60:ee:87:9d:cc:ba:4d:41:b5:89:
37:a8:91:f3:17:4b:61:51:0b:a5:1c:97:b5:bf:1f:6f:23:62:
fb:bb:90:cf:95:55:ab:aa:3f:3a:3c:d6:b6:42:f9:09:87:d0:
3c:c6:3b:63:d5:0c:9f:b4:82:02:05:6c:d4:f0:5d:43:35:53:
f1:99:8a:f5:d1:8d:3b:4d:84:5b:93:84:19:7b:ef:10:b7:67:
50:0e:77:2b:5a:b4:17:05:4b:5e:79:6c:12:69:40:fd:0e:80:
24:8c:46:a8:c0:e1:5b:c7:33:6d:bf:c7:56:a1:be:d9:a2:63:
35:88:47:f6:26:e5:f2:c5:45:fc:ed:42:3f:91:66:90:1a:d7:
b5:a9:e6:4e:4c:e8:78:48:9a:c2:a6:57:58:d4:b2:ae:99:06:
c7:fa:84:2c:74:6d:7f:89:57:92:2e:ff:b6:ec:98:d7:eb:4f:
c2:c8:4c:04:21:10:ba:56:a1:a5:e3:7d:46:50:b7:32:2d:fd:
58:d2:ca:d8:4f:06:e9:5f:70:25:1d:35:70:65:d7:84:db:ac:
a6:f7:06:9c:5f:26:55:66:f0:1c:ce:2b:ec:a1:61:38:15:0e:
f2:98:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:45 2026 by rpki-client