Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34312e302f32342d3234203d3e203438323636.roa
File: 3134352e37392e34312e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: LCbNkIx5Gw6OJBpNqQAnvC91lJ1YmDl4OaMMzPya36w=
Subject key identifier: 1C:9B:66:43:32:52:E7:DF:75:B0:ED:4E:37:8C:96:EF:D7:38:CE:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0F0637254C79A99F4FEADEE1A263ED83B3EE017E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34312e302f32342d3234203d3e203438323636.roa
Signing time: Tue 24 Mar 2026 14:34:05 +0000
ROA not before: Tue 24 Mar 2026 14:29:05 +0000
ROA not after: Tue 23 Mar 2027 14:34:05 +0000
asID: 48266
IP address blocks: 145.79.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:06:37:25:4c:79:a9:9f:4f:ea:de:e1:a2:63:ed:83:b3:ee:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 24 14:29:05 2026 GMT
Not After : Mar 23 14:34:05 2027 GMT
Subject: CN=1C9B66433252E7DF75B0ED4E378C96EFD738CEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6a:2b:e1:08:26:64:5f:5e:8c:30:8b:cd:c7:
cc:6b:b1:e8:10:e8:cd:d4:35:43:7b:0c:71:bc:b9:
bb:35:57:1b:6b:2f:76:7f:70:60:8b:87:81:9e:91:
22:1a:3f:7a:ef:b0:bb:5d:49:fe:ef:be:a0:0b:1e:
65:6f:a9:70:aa:8f:13:b3:0e:33:5f:9d:6f:a7:1a:
2b:7d:a0:0e:be:42:73:38:76:41:97:cc:18:c8:b7:
85:fb:af:45:e3:f9:4e:32:42:47:92:9f:8a:a3:f0:
1a:26:ec:b6:3c:5b:dc:16:95:6f:2a:5b:a0:a3:87:
30:bd:4e:49:84:ba:2a:1d:83:c9:4b:fa:30:8b:98:
61:f0:4e:03:da:81:f2:b3:a9:df:4f:95:6c:e6:94:
5f:19:61:03:47:3e:1c:ed:e6:c2:a0:e5:88:d5:18:
3d:be:14:61:70:1d:b8:d6:b6:f0:8f:e5:33:4e:3e:
69:69:f6:ae:a5:d5:42:af:8b:40:78:24:f9:04:3a:
53:f5:e2:11:61:23:07:2d:07:a9:4e:46:60:7e:35:
1f:ab:6f:e3:94:95:32:91:37:fe:4d:8c:a4:cf:e7:
1f:4f:0d:93:12:45:b9:ac:cc:aa:f8:54:9d:2a:9a:
33:dc:dd:e8:bb:f3:74:0b:bc:89:f3:26:44:d6:60:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9B:66:43:32:52:E7:DF:75:B0:ED:4E:37:8C:96:EF:D7:38:CE:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34312e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.41.0/24
Signature Algorithm: sha256WithRSAEncryption
11:90:d7:af:bc:4f:ff:06:f2:85:30:f5:e2:66:3e:09:65:b0:
1b:36:35:8f:86:b2:49:bf:29:86:56:a8:12:91:76:9f:1f:b6:
cc:b9:a0:6a:a2:aa:82:47:ad:38:a4:63:7e:19:95:78:63:59:
f0:24:6b:a8:35:73:42:c9:c5:36:a3:52:59:f9:c4:61:0a:6b:
8e:c8:7b:57:7a:41:2d:e6:bb:d5:83:de:f9:0e:da:e3:b9:e2:
78:88:0e:11:b2:e9:5d:7f:d2:16:61:26:53:7d:79:60:c9:cc:
2f:5f:4c:cb:e4:c1:9e:c9:f3:5b:78:2e:d7:f1:77:5f:54:94:
22:d2:fa:47:e4:24:d1:5c:9a:e8:9e:f4:f0:7e:b8:0a:ab:be:
4c:a8:5b:c2:21:a8:1c:dc:d2:86:36:a0:5c:d3:ad:cc:2b:83:
5f:85:a3:ef:e7:40:20:72:c1:2b:a8:8b:c9:f6:a5:f5:87:e5:
75:0e:a0:a9:aa:fb:ea:a7:66:ce:b7:cf:90:b3:5f:21:13:21:
a4:4f:9e:23:56:fa:fc:12:9f:5b:49:52:31:c5:bd:10:cc:90:
ad:60:06:e7:a8:75:7f:a3:0d:4a:8b:0c:c8:5e:f5:e5:4d:2b:
c3:50:80:c6:33:52:07:1d:d0:9f:ae:d2:79:dc:d8:21:a4:11:
b9:3c:96:93
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDwY3JUx5qZ9P6t7homPtg7PuAX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMjQxNDI5MDVaFw0yNzAzMjMxNDM0MDVaMDMxMTAvBgNV
BAMTKDFDOUI2NjQzMzI1MkU3REY3NUIwRUQ0RTM3OEM5NkVGRDczOENFQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaivhCCZkX16MMIvNx8xrsegQ
6M3UNUN7DHG8ubs1VxtrL3Z/cGCLh4GekSIaP3rvsLtdSf7vvqALHmVvqXCqjxOz
DjNfnW+nGit9oA6+QnM4dkGXzBjIt4X7r0Xj+U4yQkeSn4qj8Bom7LY8W9wWlW8q
W6CjhzC9TkmEuiodg8lL+jCLmGHwTgPagfKzqd9PlWzmlF8ZYQNHPhzt5sKg5YjV
GD2+FGFwHbjWtvCP5TNOPmlp9q6l1UKvi0B4JPkEOlP14hFhIwctB6lORmB+NR+r
b+OUlTKRN/5NjKTP5x9PDZMSRbmszKr4VJ0qmjPc3ei783QLvInzJkTWYFTrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUHJtmQzJS5991sO1ON4yW79c4zrIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNDMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMyMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
KTANBgkqhkiG9w0BAQsFAAOCAQEAEZDXr7xP/wbyhTD14mY+CWWwGzY1j4aySb8p
hlaoEpF2nx+2zLmgaqKqgketOKRjfhmVeGNZ8CRrqDVzQsnFNqNSWfnEYQprjsh7
V3pBLea71YPe+Q7a47nieIgOEbLpXX/SFmEmU315YMnML19My+TBnsnzW3gu1/F3
X1SUItL6R+Qk0Vya6J708H64Cqu+TKhbwiGoHNzShjagXNOtzCuDX4Wj7+dAIHLB
K6iLyfal9YfldQ6gqar76qdmzrfPkLNfIRMhpE+eI1b6/BKfW0lSMcW9EMyQrWAG
56h1f6MNSosMyF715U0rw1CAxjNSBx3Qn67SedzYIaQRuTyWkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:52 2026 by rpki-client