Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37312e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: zqfJup5m788IDOpCJWZb+lNMECAoB060qczPpUXXAm4=
Subject key identifier: 75:3C:33:66:1D:EC:59:D6:41:7E:A0:09:B1:8B:A0:FC:86:DB:DA:61
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F27705E0E66D165F8B0815E92467F99DD024632
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37312e302f32342d3234203d3e2032393134.roa
Signing time: Tue 21 Apr 2026 10:59:13 +0000
ROA not before: Tue 21 Apr 2026 10:54:13 +0000
ROA not after: Tue 20 Apr 2027 10:59:13 +0000
asID: 2914
IP address blocks: 145.79.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:27:70:5e:0e:66:d1:65:f8:b0:81:5e:92:46:7f:99:dd:02:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 21 10:54:13 2026 GMT
Not After : Apr 20 10:59:13 2027 GMT
Subject: CN=753C33661DEC59D6417EA009B18BA0FC86DBDA61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:b3:7b:97:97:36:86:3a:d1:59:30:69:41:
cb:e5:a7:0f:7b:a1:d8:9b:0c:80:4b:64:b4:a4:ec:
8c:4f:bc:4e:0f:c8:f4:d0:bd:11:ed:1c:3a:0e:bb:
7a:d2:4a:f5:17:2c:3e:f3:0e:78:75:fc:37:92:ff:
e0:c7:36:a0:a1:a4:0e:10:f5:c2:42:f4:8a:5b:ed:
34:e2:04:15:a2:16:ce:9d:2c:da:b3:60:74:d2:24:
de:3d:a5:de:36:f7:94:d1:4e:a6:a6:dd:e5:e4:2e:
37:03:18:51:74:b7:fc:95:d2:0e:d3:e9:f5:01:42:
37:fe:7b:1b:03:fd:1e:f8:e9:44:8d:89:f0:e1:9d:
2a:de:e3:d2:f7:55:d1:da:b0:d1:3b:dd:c2:de:ae:
dc:70:c8:e1:96:3f:a6:2c:5a:c6:10:b3:61:d4:e7:
5e:71:55:5f:5f:a9:c0:9d:69:38:89:59:17:23:d3:
e1:ea:90:93:ac:fc:16:dd:5d:1b:a3:e2:a6:46:78:
11:a7:2c:9a:36:03:67:ac:90:7e:19:2c:66:1c:6f:
83:4d:c0:81:2f:be:2b:94:c5:5d:dc:5e:31:b6:2e:
00:06:1b:b4:11:2e:21:77:d2:6c:17:00:ee:87:59:
a2:2e:fa:42:8c:8a:b8:a4:1d:53:be:7d:bf:7d:1a:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:33:66:1D:EC:59:D6:41:7E:A0:09:B1:8B:A0:FC:86:DB:DA:61
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5f:42:aa:e0:d9:a5:90:8d:e3:e7:5f:a7:1c:ac:93:3f:27:
e7:4f:a6:fb:d5:93:9d:bd:6e:95:ae:75:a2:35:0c:24:15:fa:
3e:43:19:50:88:4f:eb:dd:9f:ca:65:73:f4:6b:58:4d:d6:7c:
68:42:11:f1:6e:ce:a3:b1:6e:a9:b9:88:1a:5c:6a:35:99:ff:
46:d3:37:fc:17:8f:d9:fc:3e:bf:b8:6e:10:5d:13:1a:d7:6b:
ed:f7:a9:94:ce:4e:bc:6a:79:68:90:2a:f1:ab:4a:4d:35:8c:
33:cd:21:c8:e8:51:57:2d:f1:f4:4a:26:fa:0c:8e:13:71:e8:
9d:7d:9f:dc:c2:ca:04:47:77:4a:24:a8:e9:f6:9e:9a:24:e2:
03:a3:77:a8:d7:33:89:a1:2a:8d:bf:23:59:1a:f9:8d:b4:7b:
e5:37:4d:d5:bc:10:92:e5:36:19:ae:97:fa:84:ef:94:0d:8f:
b5:d1:75:be:9b:a5:d2:d1:1a:97:e7:90:c2:4c:57:b3:b9:0a:
93:d9:a4:44:6a:65:6f:e3:99:f8:44:2a:38:fe:c9:d4:21:1a:
8a:d3:b2:a8:ae:d2:19:5d:5e:9a:13:32:79:b3:d8:e9:41:17:
b3:6b:4c:1d:ab:fa:51:50:4e:36:b9:4c:9f:6d:24:92:fc:45:
65:62:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:33 2026 by rpki-client