Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34332e302f32342d3234203d3e203438323636.roa
File: 3134352e37392e34332e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: hHuthNYqqSfZsqwqDFKJkj6xP9xWnim3fj2tMOwsFJs=
Subject key identifier: 8E:FA:01:AE:45:B1:70:F3:59:60:4E:7C:F2:27:52:C5:47:08:4A:EE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C7EA47E994E1204AB90FC665F480834F2452319
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34332e302f32342d3234203d3e203438323636.roa
Signing time: Tue 24 Mar 2026 14:34:23 +0000
ROA not before: Tue 24 Mar 2026 14:29:23 +0000
ROA not after: Tue 23 Mar 2027 14:34:23 +0000
asID: 48266
IP address blocks: 145.79.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:7e:a4:7e:99:4e:12:04:ab:90:fc:66:5f:48:08:34:f2:45:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 24 14:29:23 2026 GMT
Not After : Mar 23 14:34:23 2027 GMT
Subject: CN=8EFA01AE45B170F359604E7CF22752C547084AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:e9:7b:ae:cd:ad:b9:cd:c1:10:c0:8f:d7:
8f:fc:48:25:e1:f6:d4:b0:79:29:47:21:09:f5:20:
6a:3e:9b:e0:b6:cf:8b:f9:43:0a:7c:56:2b:33:c6:
37:f2:b3:f7:28:aa:fd:81:7f:e5:cd:35:00:a7:0d:
4e:8f:9b:fb:0d:8b:0a:5a:d3:58:aa:73:e1:1c:cc:
48:3c:46:51:15:a2:2d:ca:f0:1a:38:73:fb:09:0b:
4f:10:8c:fe:db:0a:a3:c5:1b:26:b5:2c:4a:f7:a5:
90:db:4f:88:83:47:8d:e9:c2:c1:4a:ad:82:8a:22:
ed:40:04:61:44:4c:0f:a3:e1:b6:7b:23:e5:d3:8d:
bb:ec:a4:bf:94:f3:bb:66:03:4a:5a:84:a4:b3:12:
2f:a5:63:59:00:7d:07:d5:1f:b1:2b:72:92:5a:0d:
03:5f:32:a3:0d:b8:ba:fd:f1:19:e0:e5:c3:4d:fc:
4d:10:db:63:3a:47:20:a7:3b:4a:0c:a2:ad:70:e4:
86:a5:e7:c1:c5:6e:73:8e:f9:d4:d8:e9:72:91:6d:
41:b1:16:dc:21:02:9d:51:3d:13:f0:31:70:1e:4d:
01:84:2e:b2:06:0a:50:00:9e:0f:ce:a4:ec:a3:2c:
06:7a:09:4c:8d:65:f2:39:cb:35:c4:16:12:95:83:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:01:AE:45:B1:70:F3:59:60:4E:7C:F2:27:52:C5:47:08:4A:EE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34332e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.43.0/24
Signature Algorithm: sha256WithRSAEncryption
88:18:7c:bb:6e:86:6a:c5:74:6b:58:74:46:9f:c2:20:35:9c:
38:67:2c:90:66:4f:5f:2d:b8:38:ff:c8:a2:c0:a5:cc:c8:f8:
5f:19:2d:bd:1a:d5:e3:cc:58:01:87:28:50:32:8c:f4:d8:98:
24:fe:fc:07:d7:3d:af:15:80:44:6b:21:73:6c:d9:f1:a5:17:
aa:10:09:68:28:73:ef:08:94:13:a4:bc:01:dc:4f:76:34:c6:
25:fa:bd:3d:7f:8b:e9:c8:75:11:de:b6:68:e7:fa:c0:b8:f5:
fb:0c:12:c7:de:6d:ee:0c:8e:8b:9c:3f:fe:c7:94:b7:09:59:
9f:c3:53:cf:de:0e:74:3d:e6:68:a1:a3:03:b9:8c:c2:51:62:
43:fc:9f:19:2b:ca:42:82:e9:70:05:de:3e:03:b3:a9:ca:c1:
30:cc:80:4b:67:99:9b:59:79:ee:3f:81:99:2d:d5:64:64:c3:
c7:47:c8:6a:83:b6:c3:39:d9:dc:02:6e:2c:a9:7a:5e:5f:25:
05:d1:7f:f3:19:61:d4:62:d8:68:c9:35:fc:d2:f6:02:ce:dd:
94:8a:e2:cb:c7:43:90:fb:f6:1a:9c:46:ce:c7:49:76:7e:49:
f7:04:b2:e4:54:57:f7:db:a4:fd:73:45:8e:3b:9a:21:0a:f1:
7a:b2:3f:db
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfH6kfplOEgSrkPxmX0gINPJFIxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMjQxNDI5MjNaFw0yNzAzMjMxNDM0MjNaMDMxMTAvBgNV
BAMTKDhFRkEwMUFFNDVCMTcwRjM1OTYwNEU3Q0YyMjc1MkM1NDcwODRBRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23+l7rs2tuc3BEMCP14/8SCXh
9tSweSlHIQn1IGo+m+C2z4v5Qwp8Viszxjfys/coqv2Bf+XNNQCnDU6Pm/sNiwpa
01iqc+EczEg8RlEVoi3K8Bo4c/sJC08QjP7bCqPFGya1LEr3pZDbT4iDR43pwsFK
rYKKIu1ABGFETA+j4bZ7I+XTjbvspL+U87tmA0pahKSzEi+lY1kAfQfVH7ErcpJa
DQNfMqMNuLr98Rng5cNN/E0Q22M6RyCnO0oMoq1w5Ial58HFbnOO+dTY6XKRbUGx
FtwhAp1RPRPwMXAeTQGELrIGClAAng/OpOyjLAZ6CUyNZfI5yzXEFhKVg2QnAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUjvoBrkWxcPNZYE588idSxUcISu4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzNDMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMyMzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
KzANBgkqhkiG9w0BAQsFAAOCAQEAiBh8u26GasV0a1h0Rp/CIDWcOGcskGZPXy24
OP/IosClzMj4XxktvRrV48xYAYcoUDKM9NiYJP78B9c9rxWARGshc2zZ8aUXqhAJ
aChz7wiUE6S8AdxPdjTGJfq9PX+L6ch1Ed62aOf6wLj1+wwSx95t7gyOi5w//seU
twlZn8NTz94OdD3maKGjA7mMwlFiQ/yfGSvKQoLpcAXePgOzqcrBMMyAS2eZm1l5
7j+BmS3VZGTDx0fIaoO2wznZ3AJuLKl6Xl8lBdF/8xlh1GLYaMk1/NL2As7dlIri
y8dDkPv2GpxGzsdJdn5J9wSy5FRX99uk/XNFjjuaIQrxerI/2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:52 2026 by rpki-client