Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: yzhgKadSXSCN1Xwow9o54cUDfK3zk1/s2r6FfLDebVU=
Subject key identifier: 6B:65:15:32:22:2F:03:62:63:1D:2A:C2:28:20:43:86:82:C2:8B:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 26E4C60E988ADEFB32B9F1617215A0EA95C67DDC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:29 +0000
ROA not before: Thu 23 Jul 2026 07:21:29 +0000
ROA not after: Thu 22 Jul 2027 07:26:29 +0000
asID: 2914
IP address blocks: 145.79.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e4:c6:0e:98:8a:de:fb:32:b9:f1:61:72:15:a0:ea:95:c6:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:29 2026 GMT
Not After : Jul 22 07:26:29 2027 GMT
Subject: CN=6B651532222F0362631D2AC22820438682C28B14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:6e:ba:34:f0:b5:f1:c5:78:4d:f7:f1:24:
7a:4c:a0:c6:4a:48:6a:3b:98:fd:22:b6:f4:69:9c:
bb:c6:36:38:b0:1d:c6:f1:df:20:4a:cf:5c:f1:38:
6a:eb:83:39:8e:cf:4a:6c:d7:30:a7:a6:50:ce:13:
25:ef:55:fd:93:f3:eb:bb:f3:80:ff:85:aa:cf:82:
63:a3:47:1c:ef:61:f1:5c:87:2f:b1:12:32:e6:f2:
f9:48:41:81:cf:17:36:2e:5c:74:4d:e1:46:b3:2c:
f8:fe:35:c0:99:aa:91:0e:5f:4b:e9:f8:2a:db:8b:
e6:8f:54:01:c9:6b:c0:02:c1:d5:5b:62:9b:28:e6:
c5:b2:f3:6e:60:e8:08:f6:da:e5:ad:c5:0a:04:24:
6d:41:82:a7:05:18:fa:79:1b:18:d3:82:df:fd:0f:
2e:c0:87:8d:64:64:ff:e0:75:10:b7:07:14:52:b9:
93:cf:c4:3a:12:6d:cc:96:de:12:ec:66:24:c3:bd:
8e:2a:c8:64:0d:56:b9:d4:1a:3c:47:03:f1:a7:1a:
43:35:b2:43:6a:8a:a7:80:be:28:44:6e:e6:fd:37:
af:54:a9:90:16:dc:df:f2:19:cf:c9:a3:3f:d4:98:
02:9c:9f:df:a3:e1:42:70:c9:fa:12:75:a0:77:a2:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:15:32:22:2F:03:62:63:1D:2A:C2:28:20:43:86:82:C2:8B:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9e:3c:a2:a0:a5:7b:13:58:69:05:cd:eb:95:f9:5f:41:70:
7c:78:b4:fb:3d:88:cd:52:ac:d3:7a:e5:72:6f:f7:3b:1d:ac:
3a:55:10:d5:ba:cf:4f:a4:4c:ef:73:e1:94:a7:96:41:e4:c2:
6b:ac:0a:ed:8f:16:54:c8:d4:ed:ee:cb:37:8f:6e:2c:18:eb:
8b:94:eb:be:a4:09:f3:ed:c3:a6:d8:5c:c0:97:80:49:99:de:
54:59:d6:30:a3:bc:aa:ad:f7:df:18:8a:ad:95:b3:3c:73:96:
b8:65:2d:55:d7:0e:b4:26:e5:73:50:3f:92:b5:34:60:65:8a:
f2:fc:b2:a9:d2:85:89:6d:3e:d2:32:00:3c:4d:a6:6d:a3:8c:
60:77:96:13:93:f3:55:7a:07:d0:88:a4:cd:c0:2e:e4:39:e1:
08:59:16:57:2e:3b:90:1c:e3:f6:15:1a:a8:90:d1:d8:e3:48:
8c:1d:fb:98:e6:e3:28:39:7f:d5:3a:fd:6d:a1:37:70:b7:00:
9e:b4:87:97:13:f2:93:6b:e1:6f:b3:b6:c6:fa:3e:d8:3d:e8:
6d:30:88:86:4b:3b:49:c9:3f:cb:33:f7:c7:0d:75:76:71:a6:
af:9d:bd:e7:bc:ec:b0:a6:da:64:d0:3c:2a:41:c4:a3:47:d8:
22:9a:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:20 2026 by rpki-client