Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e37372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: tkk/2KOqoOdK2nrtk5FD6npwH8RzZDMYTvjcAJO3zqA=
Subject key identifier: F6:75:82:0D:DD:78:44:C5:AD:23:EE:81:E6:6E:C3:79:93:6E:A9:09
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4DF53A69816F60BD69ECE3E9E1F35C4A841A7E21
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:26 +0000
ROA not before: Thu 23 Jul 2026 07:21:26 +0000
ROA not after: Thu 22 Jul 2027 07:26:26 +0000
asID: 2914
IP address blocks: 145.79.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f5:3a:69:81:6f:60:bd:69:ec:e3:e9:e1:f3:5c:4a:84:1a:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:26 2026 GMT
Not After : Jul 22 07:26:26 2027 GMT
Subject: CN=F675820DDD7844C5AD23EE81E66EC379936EA909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:54:01:42:a1:e4:f7:75:b4:ba:5d:dd:2f:60:
d3:cc:16:3a:b3:30:8a:e2:34:85:d4:f8:70:29:70:
73:c6:36:36:34:f8:a5:0b:4a:4f:f9:38:e7:10:4c:
17:f4:ae:0b:ee:c0:52:e4:bc:e5:87:d4:81:eb:12:
e4:6f:19:79:10:f6:b5:e2:d3:1e:82:14:85:e5:31:
1a:5f:47:36:c1:e5:92:36:c1:7a:69:6b:9a:a6:05:
a7:cf:cd:95:46:4b:4e:6f:2e:b3:2f:3d:f6:66:cd:
4f:e8:87:16:9e:8a:a1:8f:56:44:72:0f:e5:26:ce:
5e:43:c3:f7:bf:d3:1d:3f:e5:21:b4:2f:1d:b9:27:
20:13:a8:a4:ca:ab:ba:fd:cc:15:b0:d3:4b:23:98:
f5:ea:bd:34:ea:9a:79:cc:c0:4b:6c:dd:28:e2:6d:
ec:d5:4d:5f:c2:ac:fd:e4:f0:4a:0d:db:17:b8:56:
ce:4a:4d:17:0d:6d:77:a9:a0:12:75:90:9b:c5:eb:
0f:0b:89:5e:95:c0:3f:87:be:76:d1:ea:b3:ab:5e:
18:c9:88:d9:de:50:18:c3:0f:01:63:85:c5:80:3d:
26:88:94:63:ab:bb:15:70:ae:73:23:04:63:77:58:
6f:75:cd:e9:8f:b2:53:15:a4:9e:3b:e6:b2:e8:0b:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:82:0D:DD:78:44:C5:AD:23:EE:81:E6:6E:C3:79:93:6E:A9:09
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.77.0/24
Signature Algorithm: sha256WithRSAEncryption
27:78:3b:8c:98:7a:c3:0c:09:79:2e:44:e3:a1:d6:ca:a8:b5:
aa:a9:72:0a:31:33:c8:51:b4:6e:d0:5b:28:4b:cb:ac:a5:61:
1f:f7:20:17:f1:7a:36:aa:c4:85:7e:5e:cf:0a:96:5f:6f:d1:
30:94:0f:cc:8b:84:b5:32:c5:d8:ca:32:a3:96:f0:c8:0a:15:
a4:df:1e:ee:8e:88:17:53:a6:78:d5:0e:ee:09:f4:1a:31:55:
05:36:de:f5:68:8d:5c:f5:ea:5e:20:fe:67:89:c9:30:ad:6d:
6d:79:ae:2d:c6:90:64:97:11:3c:c3:67:a8:ac:67:de:9d:3c:
6d:65:37:57:29:74:83:99:fa:86:38:6a:1b:11:41:13:d1:99:
4a:90:2b:ab:33:af:ae:0a:4d:c5:e5:13:8c:22:18:dd:cb:46:
f8:10:5b:f8:d7:22:d3:16:11:cb:44:4f:1f:aa:fc:bf:af:3a:
46:ed:bd:28:58:9a:31:3e:af:c3:7c:79:1b:3b:1b:34:1a:18:
1e:e6:47:9b:06:01:72:0e:06:33:85:85:e5:9f:3f:40:eb:ff:
c3:88:b8:4d:25:2b:b5:a7:75:99:0b:32:9c:7c:ee:6f:33:7b:
23:f9:13:e9:a0:3b:c5:c6:19:c2:4e:1b:8c:a1:8a:2a:39:47:
5e:c4:b4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:32 2026 by rpki-client