Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35362e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e35362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: Ng52cJaxTVgw0elviVcK4EgXIvmEqYha4XxmtIdyleo=
Subject key identifier: C4:02:AF:66:87:EB:1D:A5:E3:B2:B5:12:1A:88:23:08:06:2C:EC:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 513DF32536E067F68C6A9CFF36DB388D6ECD64DF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 12 Mar 2026 10:23:25 +0000
ROA not before: Thu 12 Mar 2026 10:18:25 +0000
ROA not after: Thu 11 Mar 2027 10:23:25 +0000
asID: 47583
IP address blocks: 145.79.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3d:f3:25:36:e0:67:f6:8c:6a:9c:ff:36:db:38:8d:6e:cd:64:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 12 10:18:25 2026 GMT
Not After : Mar 11 10:23:25 2027 GMT
Subject: CN=C402AF6687EB1DA5E3B2B5121A882308062CECF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:78:3f:30:77:a8:fb:29:9b:86:6d:0d:42:
f1:87:25:58:3a:d9:f0:07:46:fc:e3:fa:f6:0e:df:
ed:07:a1:bf:02:2c:3e:77:2e:3d:ae:19:67:8e:23:
f7:43:3a:e1:07:7f:2e:c1:ef:f3:bc:9a:32:5a:11:
93:dd:c0:60:55:bf:60:84:f9:34:74:05:ed:e6:72:
f7:31:f9:e4:64:b6:09:37:ab:74:59:80:4d:ab:b4:
47:d8:70:aa:c7:2c:e0:0b:b4:21:34:20:11:35:a3:
70:e5:ab:5f:77:f7:cd:52:34:42:c3:b4:00:9f:58:
bb:9f:b4:6f:b3:f0:a5:ec:1c:17:e5:49:d6:f3:77:
c5:40:2c:2d:f1:46:3a:66:68:f6:df:29:4a:d9:49:
7e:63:dc:f9:39:3b:75:37:f7:f2:2c:d1:1a:27:e0:
8d:51:cf:ae:67:69:d1:44:89:2a:47:d2:43:5a:98:
6a:f7:43:c0:30:f8:42:88:7a:9b:12:c5:39:f7:ad:
b4:d2:2e:23:70:f4:97:55:d2:c5:80:66:29:74:6a:
5b:f4:f5:8b:e9:2d:39:2c:18:ba:c4:ec:64:82:f6:
9a:e9:cc:53:b9:d1:4a:64:2c:67:7e:17:69:cb:b2:
74:8f:ef:cf:84:e8:24:49:a4:88:f7:b8:5c:e0:57:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:02:AF:66:87:EB:1D:A5:E3:B2:B5:12:1A:88:23:08:06:2C:EC:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.56.0/21
Signature Algorithm: sha256WithRSAEncryption
35:27:59:00:de:58:6f:cf:10:52:bb:9c:d1:91:79:f9:50:2f:
e3:9d:8d:93:56:cf:b2:b5:81:fd:7b:b3:7e:cc:50:94:b4:3a:
1e:97:56:fc:d9:30:8a:b6:85:6b:35:63:25:8f:16:f3:c7:8e:
fa:e1:86:ad:56:ee:58:06:2c:23:59:7a:58:89:78:97:5d:4c:
67:cc:4e:90:fe:b2:24:c4:e8:63:eb:11:81:5f:32:e9:8a:24:
5d:a0:10:90:2e:9d:80:17:83:28:32:5f:10:6f:cd:a1:24:ab:
82:47:31:b5:70:28:25:e5:15:49:09:71:50:96:e0:e0:b9:e5:
a6:f9:e5:63:da:3d:34:9c:6a:20:1d:bc:69:ed:20:6c:d2:73:
4f:ee:44:23:7a:ed:33:29:04:7e:70:10:44:f0:6e:ab:26:91:
a9:16:8b:4a:49:e3:8d:d4:d5:27:c4:b1:87:39:d4:59:88:68:
b7:43:5b:68:9f:c5:b4:3d:ed:49:4c:a0:ad:aa:3c:80:12:56:
24:7a:e7:a8:89:69:d9:4b:61:db:53:ba:64:03:5d:33:a0:2d:
0b:49:d6:0d:2d:87:fd:76:af:35:e9:44:96:71:b0:2e:73:9c:
64:22:47:94:c5:0a:df:98:94:9e:73:22:5d:40:1d:bd:8e:40:
3e:79:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:03 2026 by rpki-client