Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: cA5NOOjYhtfBjVxYUQAMLHAgvBPC1H6xibBmuBQEJck=
Subject key identifier: 63:B4:D9:9B:21:27:52:E5:52:E0:1C:24:D6:18:EB:69:70:58:75:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4116A9289E5EDF94D034FC66BDDE76021B49A6E1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37362e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:24 +0000
ROA not before: Thu 23 Jul 2026 07:21:24 +0000
ROA not after: Thu 22 Jul 2027 07:26:24 +0000
asID: 2914
IP address blocks: 145.79.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:16:a9:28:9e:5e:df:94:d0:34:fc:66:bd:de:76:02:1b:49:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:24 2026 GMT
Not After : Jul 22 07:26:24 2027 GMT
Subject: CN=63B4D99B212752E552E01C24D618EB69705875E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:a0:0b:bd:2d:40:b5:16:97:97:18:d2:9a:
76:da:b5:c6:0c:ca:39:19:e1:d4:e6:b2:e0:73:5d:
a2:87:82:2a:24:11:c1:3e:6a:fd:57:93:b1:53:0d:
4b:b5:21:92:62:6a:8c:4f:20:37:c6:0e:a7:93:ab:
c4:a1:4e:21:36:98:13:b6:ae:66:19:9e:fb:10:65:
44:dd:2f:00:5f:a8:f5:b9:96:18:ad:75:af:56:c4:
0e:f9:3b:ce:c6:b3:01:a7:ee:be:92:d3:f6:03:d9:
8f:49:cc:eb:80:84:3c:31:a9:e7:0a:5b:f9:1e:7c:
1c:6c:ed:a2:2e:14:cd:a2:59:70:a6:ac:37:ed:e4:
ba:f4:c7:5e:81:63:08:10:0a:3e:75:d3:33:89:9f:
e7:49:0b:9f:0f:e4:c7:e2:41:72:97:66:e1:b2:c9:
3e:06:e5:f9:53:0d:08:0f:80:c6:1d:87:f8:2b:31:
82:3e:a5:fe:b1:bf:8e:61:5d:fb:98:ea:9f:6c:3a:
8e:ae:b0:c0:cf:3b:54:98:f9:49:b6:a1:a7:b2:68:
10:49:62:f5:06:09:19:ae:87:d7:28:29:50:4b:e2:
1e:29:0c:ae:52:81:5f:56:30:43:7e:03:46:9c:98:
1d:48:42:5d:eb:26:25:76:00:70:c8:d1:e0:b8:c0:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B4:D9:9B:21:27:52:E5:52:E0:1C:24:D6:18:EB:69:70:58:75:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:65:12:c3:06:e4:43:56:c5:f6:4c:38:44:0e:ce:96:c3:26:
0f:b4:08:61:b1:34:d2:c6:6e:ec:53:37:c9:e0:b6:8f:71:da:
5d:2f:ab:bc:08:19:b0:17:87:0a:a3:94:b5:1c:da:ea:21:8f:
0a:33:f9:3c:89:79:c5:7c:e0:61:08:3b:88:5b:13:22:9c:02:
82:37:e2:58:8e:ee:f7:94:9b:62:b4:45:3e:94:a7:00:5f:d8:
4b:44:0c:96:23:ab:dc:7b:aa:2f:bf:22:54:27:61:54:0d:24:
18:13:2f:1a:71:52:d1:fc:1d:c7:8b:cf:17:4c:38:ce:b5:4d:
8b:5a:5d:9a:1a:4d:dd:f0:54:b6:2c:09:84:38:e3:d1:97:f8:
9a:dd:44:b6:04:26:62:bd:d3:5d:89:ab:b0:9f:d7:6f:aa:6e:
14:5f:55:1e:c8:0a:ec:6b:8a:4d:47:bc:71:e3:29:72:0a:d6:
8b:3b:7f:db:cc:b8:fc:fa:47:7f:f2:a7:5c:67:a2:dd:3e:e5:
89:b9:fd:e1:d7:12:5c:32:e2:c1:a6:da:d6:e1:75:3d:f2:f2:
db:73:37:ba:57:09:34:59:d1:fd:39:61:2d:e4:5a:49:9a:d4:
79:9f:85:a2:c0:e6:7e:b1:27:65:87:49:61:0b:5d:39:24:a7:
15:e4:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:50 2026 by rpki-client