Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37302e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 1KJNONLs6lDCqVDVuALNMxRg/knWz7iNKHzrXzMBphw=
Subject key identifier: 05:08:1F:8D:F9:AE:CD:A1:F1:C8:12:43:92:97:E5:DC:14:6B:43:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58DB584962E923B38FC32EC98CEA9B9118D3B9CD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:27 +0000
ROA not before: Thu 23 Jul 2026 07:21:27 +0000
ROA not after: Thu 22 Jul 2027 07:26:27 +0000
asID: 2914
IP address blocks: 145.79.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:db:58:49:62:e9:23:b3:8f:c3:2e:c9:8c:ea:9b:91:18:d3:b9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:27 2026 GMT
Not After : Jul 22 07:26:27 2027 GMT
Subject: CN=05081F8DF9AECDA1F1C812439297E5DC146B4350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:06:4c:df:50:f8:5e:16:59:e2:8b:c5:d0:
f0:2a:22:24:f0:38:59:8c:d3:2a:72:6d:f4:3e:a2:
dc:7a:5f:98:bb:23:1a:74:97:c0:f1:7f:c0:19:c7:
42:67:cc:e1:a5:30:58:77:42:74:3a:23:ea:6c:45:
81:c5:bb:1d:09:8e:a9:72:60:cd:5d:2c:3e:e9:4a:
ac:b5:10:4c:17:60:a8:65:ab:0c:e5:98:70:82:f9:
41:17:79:c7:95:7b:33:e2:48:76:51:e9:f1:21:3f:
8c:57:8b:5b:c3:0e:e6:8c:c3:84:a0:2e:e1:ad:3d:
a5:e4:3e:4d:a0:d4:c5:8f:30:d9:75:16:3b:ea:d3:
45:1e:82:f4:b1:ec:e9:c5:ac:05:c4:3c:f7:0a:c7:
11:e6:4c:6f:9a:06:c9:13:b3:d6:b0:a1:21:43:25:
b2:bf:da:36:f3:18:9e:38:c2:8d:6d:7b:f2:e8:11:
22:ab:75:d8:3b:2d:ab:4f:1f:d8:fb:69:50:41:66:
9a:55:69:b4:70:71:fe:ef:79:e5:7f:3d:41:d0:3b:
d8:c5:23:9a:e1:24:c7:fa:4f:4d:17:91:ff:e7:4c:
67:57:ff:68:4d:98:73:4f:45:73:40:50:59:44:80:
89:3b:10:44:ea:f7:8e:90:5a:be:e8:d4:2f:a5:f4:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:1F:8D:F9:AE:CD:A1:F1:C8:12:43:92:97:E5:DC:14:6B:43:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.70.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a3:c6:32:cd:b7:23:52:42:f0:85:2b:e4:ea:78:b6:18:88:
9e:64:68:94:9b:35:3e:e3:00:5d:af:7e:dd:0e:19:2b:4c:8c:
73:a2:a6:14:f1:5c:9f:f2:4d:ac:a3:45:c6:4e:5b:44:a4:65:
a0:28:c5:2b:c6:39:c9:22:3e:d6:c5:8a:14:8f:fc:c4:c0:0d:
d7:28:3a:c4:c7:b0:7c:87:9f:aa:00:03:ac:47:e0:47:99:af:
cd:15:e5:94:8a:3b:24:8e:5b:2b:37:8e:84:84:de:48:33:1c:
5c:33:35:3d:96:df:09:8c:81:67:4c:3f:9b:5f:d8:4d:a2:5e:
ae:54:56:b4:20:e3:c0:bd:13:4d:a0:ad:f3:aa:da:c9:fd:2f:
64:62:46:08:72:7c:9a:cf:9c:3d:9a:92:2c:7b:9d:cf:df:2a:
8a:44:7e:47:6e:7e:64:b0:c8:3e:fc:9b:b5:63:b8:0b:42:4c:
96:3b:d0:60:6f:77:f2:bc:a0:35:24:65:45:e2:e3:53:c7:da:
fc:f9:35:dd:5d:4f:0a:a9:47:98:ca:33:d9:86:d5:d8:78:15:
e9:7b:6b:20:9c:d5:02:97:f4:1a:ef:cb:2d:9a:f1:a2:7e:ce:
41:63:4c:61:26:94:82:7e:e6:01:d2:6c:38:bf:6d:2d:8b:8b:
2c:d3:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:35 2026 by rpki-client