Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e382e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: /xldo5eCSGACXRBUjwlJzF+j07VLRGuVnCzZBf5HcpY=
Subject key identifier: A6:43:FB:31:E8:D4:73:6F:32:AE:0E:F8:89:3A:6D:95:2D:6F:05:37
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 492AA42F0C4D158113C3CC4603490F5D12521299
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e382e302f32312d3234203d3e203437353833.roa
Signing time: Thu 12 Mar 2026 10:23:24 +0000
ROA not before: Thu 12 Mar 2026 10:18:24 +0000
ROA not after: Thu 11 Mar 2027 10:23:24 +0000
asID: 47583
IP address blocks: 145.79.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2a:a4:2f:0c:4d:15:81:13:c3:cc:46:03:49:0f:5d:12:52:12:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 12 10:18:24 2026 GMT
Not After : Mar 11 10:23:24 2027 GMT
Subject: CN=A643FB31E8D4736F32AE0EF8893A6D952D6F0537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:43:86:6b:b9:9e:ff:75:c8:b5:dc:dd:34:
47:c6:7a:d2:36:ed:3b:17:2b:38:e6:42:87:50:af:
cf:4a:9e:f1:0d:77:91:64:4c:75:6b:cb:11:1d:e0:
8a:06:54:83:57:cc:c5:a3:b8:15:9b:29:f3:dc:68:
f8:28:1e:93:30:b8:ea:d2:ac:38:db:ed:5a:c6:45:
14:f0:85:be:84:27:21:5b:7b:a9:47:b2:76:14:71:
96:d1:fe:66:e9:ca:a9:93:46:2b:52:a8:f7:87:aa:
0d:84:95:4e:5a:a1:7b:36:a7:21:4a:ac:e2:0b:98:
73:57:d4:06:39:c3:c2:5f:52:6f:01:ea:68:40:19:
21:3b:6b:fe:51:15:28:aa:6d:db:72:2c:fc:91:9b:
6b:70:c5:19:f4:b3:99:7c:7b:db:7f:4c:8a:70:57:
5a:03:5e:0d:21:e3:76:48:65:a0:aa:d1:f5:89:ee:
c8:ae:b0:43:cc:c3:6c:d4:3d:4e:28:96:a4:18:2d:
51:64:f6:4a:18:df:f4:f9:3f:c4:c4:7f:5a:36:69:
31:60:0a:16:85:82:ef:07:7d:e8:92:ca:20:b7:79:
64:a7:89:db:ae:53:d8:c0:93:33:09:87:4f:ce:79:
74:9e:d9:b3:ff:a7:57:8a:db:bc:d6:22:52:75:d8:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:43:FB:31:E8:D4:73:6F:32:AE:0E:F8:89:3A:6D:95:2D:6F:05:37
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:b0:9a:d9:16:50:f7:ae:2e:1e:58:29:78:81:0c:99:57:ba:
61:7a:09:2d:a2:e4:28:b9:4b:c1:45:8d:56:39:23:8b:6e:87:
99:9a:d9:66:94:ac:1f:50:d5:d4:13:48:97:8e:09:a7:0f:6e:
6a:8d:33:1e:b3:e3:df:a2:da:97:1e:d6:22:51:72:7e:d2:df:
8d:90:60:04:6b:ca:52:ab:05:e9:a7:e6:ff:74:8e:7a:2f:52:
c2:5a:22:f0:db:71:d1:ab:0e:ae:83:0f:f3:f1:0a:f1:d5:e2:
e7:df:fe:8e:7f:fc:2e:ec:ea:17:bd:8f:66:fb:6d:2b:08:15:
b8:2e:9c:32:fe:bc:c6:74:96:ca:a1:16:72:d9:c9:96:75:32:
22:33:49:b4:71:dd:1e:f6:23:af:38:05:53:eb:53:f4:7b:71:
b3:90:4f:dd:42:45:03:cb:87:b0:dc:0b:5f:06:36:81:b7:c0:
b9:d1:c2:46:4e:40:b7:3b:a4:99:78:69:37:56:8b:3c:0d:66:
d7:e7:ad:e9:97:5f:b6:b2:62:ad:cf:08:cd:3b:3b:9d:c4:b2:
46:17:b7:f0:35:88:8f:de:43:b7:f1:2c:b8:20:ad:22:0d:22:
83:13:00:a4:b8:d6:f8:40:0d:2a:c0:07:33:bb:65:2e:e7:05:
e6:77:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:54 2026 by rpki-client