Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38302e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: yR0qM3nqi2Y6QcmGq+c2mHZnLzke7qf8DaWKVnMmabI=
Subject key identifier: FE:8F:C7:92:0E:1D:24:CD:4C:01:34:FF:43:7B:39:50:A7:46:B2:CA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 71A1ED31599AAD3ED82C12E250CAD9505BC41C1E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:27 +0000
ROA not before: Thu 23 Jul 2026 07:21:27 +0000
ROA not after: Thu 22 Jul 2027 07:26:27 +0000
asID: 2914
IP address blocks: 145.79.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a1:ed:31:59:9a:ad:3e:d8:2c:12:e2:50:ca:d9:50:5b:c4:1c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:27 2026 GMT
Not After : Jul 22 07:26:27 2027 GMT
Subject: CN=FE8FC7920E1D24CD4C0134FF437B3950A746B2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:85:1d:be:f1:e1:01:2a:47:99:ba:76:de:
ef:f0:b0:13:39:30:9f:c7:02:20:cb:7c:f4:1f:cb:
b5:99:d1:ba:7b:55:25:24:3b:fb:27:b6:ab:32:25:
e4:7a:4c:c7:ea:ba:cc:b5:82:a9:ee:0b:99:d0:cb:
0f:c3:0c:40:20:85:89:2b:55:07:04:e0:7b:f2:ef:
02:2e:f3:04:cc:6a:5e:27:a6:21:e8:cd:76:4c:5c:
ea:b7:95:f6:67:b3:99:5a:2b:9c:ad:f4:0f:29:59:
ba:b0:24:39:de:75:67:a9:e4:64:b7:b5:6e:83:51:
7d:f9:1e:16:55:4b:1a:65:41:22:5b:40:4e:71:e9:
a4:b3:f5:a0:f9:77:f2:1d:74:b6:a6:41:2b:4a:45:
92:59:8a:cf:ba:d0:40:71:23:a1:12:b4:fe:c6:12:
7b:fb:16:97:6e:cd:1a:df:5b:d5:b2:4c:d0:85:46:
49:46:9e:e4:11:9e:42:f3:78:c7:50:ef:f0:1c:16:
a6:6e:11:04:aa:38:47:78:34:b5:25:a1:9c:33:a9:
fc:b5:e6:c5:d2:1b:6f:4f:39:60:a0:b1:94:34:c6:
82:5e:9e:56:2a:18:83:eb:87:fa:ce:33:71:96:27:
68:2c:5f:f9:82:84:e2:bc:e3:49:90:0d:75:e4:07:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:C7:92:0E:1D:24:CD:4C:01:34:FF:43:7B:39:50:A7:46:B2:CA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.80.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ca:22:52:41:b9:93:75:ec:8c:76:28:ec:c2:63:97:65:18:
a4:76:95:38:f7:f5:94:6b:c2:6c:12:be:64:2b:a1:83:f2:fc:
50:73:70:dd:50:a1:ad:e3:30:24:69:dd:1d:ec:27:8b:a1:f0:
8f:5d:82:51:70:45:6c:a4:87:9e:13:fa:a3:78:f0:02:f3:41:
b8:43:f6:3c:8c:7e:ce:93:19:24:a8:83:4d:db:63:e7:70:57:
e7:75:c2:8c:3c:d4:1d:1c:b4:af:a3:b5:3a:7d:69:a2:90:cb:
90:f1:5e:ac:c7:42:7a:06:68:c2:ee:d8:12:9d:6c:d7:8f:e7:
67:12:8c:dc:58:a1:62:e1:06:d4:1b:3a:7a:6d:ee:0b:f1:21:
b2:29:30:34:4c:f2:8a:8b:6e:93:4e:3f:53:f7:6a:01:7b:e9:
05:79:35:fb:d6:aa:0e:cb:85:9c:c8:45:39:85:de:ca:e6:dd:
14:42:82:b8:57:e4:32:77:e3:b6:17:34:a2:db:16:a0:e1:21:
da:83:64:8e:8e:27:98:4c:4f:f7:e2:be:f9:50:ca:cc:89:ff:
0b:80:6d:70:ee:d6:f3:13:66:ec:3f:79:58:97:c0:73:f9:77:
9b:d8:f7:43:43:cb:82:3f:57:5b:ef:a3:8a:4f:c3:10:29:b1:
90:69:3f:5e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUcaHtMVmarT7YLBLiUMrZUFvEHB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjMwNzIxMjdaFw0yNzA3MjIwNzI2MjdaMDMxMTAvBgNV
BAMTKEZFOEZDNzkyMEUxRDI0Q0Q0QzAxMzRGRjQzN0IzOTUwQTc0NkIyQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdB4UdvvHhASpHmbp23u/wsBM5
MJ/HAiDLfPQfy7WZ0bp7VSUkO/sntqsyJeR6TMfqusy1gqnuC5nQyw/DDEAghYkr
VQcE4Hvy7wIu8wTMal4npiHozXZMXOq3lfZns5laK5yt9A8pWbqwJDnedWep5GS3
tW6DUX35HhZVSxplQSJbQE5x6aSz9aD5d/IddLamQStKRZJZis+60EBxI6EStP7G
Env7FpduzRrfW9WyTNCFRklGnuQRnkLzeMdQ7/AcFqZuEQSqOEd4NLUloZwzqfy1
5sXSG29POWCgsZQ0xoJenlYqGIPrh/rOM3GWJ2gsX/mChOK840mQDXXkB5cRAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU/o/Hkg4dJM1MATT/Q3s5UKdGssowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzODMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT1Aw
DQYJKoZIhvcNAQELBQADggEBAFjKIlJBuZN17Ix2KOzCY5dlGKR2lTj39ZRrwmwS
vmQroYPy/FBzcN1Qoa3jMCRp3R3sJ4uh8I9dglFwRWykh54T+qN48ALzQbhD9jyM
fs6TGSSog03bY+dwV+d1wow81B0ctK+jtTp9aaKQy5DxXqzHQnoGaMLu2BKdbNeP
52cSjNxYoWLhBtQbOnpt7gvxIbIpMDRM8oqLbpNOP1P3agF76QV5NfvWqg7LhZzI
RTmF3srm3RRCgrhX5DJ347YXNKLbFqDhIdqDZI6OJ5hMT/fivvlQysyJ/wuAbXDu
1vMTZuw/eViXwHP5d5vY90NDy4I/V1vvo4pPwxApsZBpP14=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:24 2026 by rpki-client