Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38382e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38382e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 02Sp8j6HW+mKGM4u2mlXOiJYa9MN6LXAiiOlKoWVA80=
Subject key identifier: C7:29:35:F6:2D:8E:7B:87:1A:27:61:9F:15:FA:00:C4:55:11:F3:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D4DFBB6F6CB4C46A2212CD4DC537FFA8A86EE59
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38382e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:24 +0000
ROA not before: Thu 23 Jul 2026 07:21:24 +0000
ROA not after: Thu 22 Jul 2027 07:26:24 +0000
asID: 2914
IP address blocks: 145.79.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4d:fb:b6:f6:cb:4c:46:a2:21:2c:d4:dc:53:7f:fa:8a:86:ee:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:24 2026 GMT
Not After : Jul 22 07:26:24 2027 GMT
Subject: CN=C72935F62D8E7B871A27619F15FA00C45511F30F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:e4:52:a6:6b:17:83:3c:f0:d5:55:69:29:
9a:20:06:85:da:20:af:9b:f7:94:a4:1a:4e:a8:ab:
f2:c0:c9:87:8a:37:93:c5:d1:6f:56:8b:fb:6b:9e:
0a:3a:88:f5:48:1b:32:9f:1b:28:d7:cd:5c:32:7d:
9f:9b:ae:3a:d0:91:e2:c8:df:45:bc:2a:2b:53:1e:
9a:37:1a:d5:97:25:20:00:9f:fa:4b:13:b4:e7:08:
e9:b1:80:30:a2:bf:5a:4c:33:43:75:e8:59:b6:1c:
75:71:6d:db:15:c7:8e:b5:45:61:b4:1f:2f:99:fe:
09:aa:d0:9c:a8:18:dc:fa:04:cf:23:91:6f:3c:6d:
c3:3f:d3:1b:84:54:fb:50:2a:b2:45:e9:ac:0e:67:
97:78:f1:a3:b4:69:60:e4:d8:b2:8a:55:2e:a4:2c:
54:d5:d3:ef:19:cc:13:c0:6d:e1:73:58:a1:2d:cd:
f0:d2:d3:15:3e:23:c2:02:c0:ba:3a:f0:f5:36:ad:
2b:24:23:76:57:09:a8:da:4d:2b:5a:0a:2d:12:cc:
90:c9:27:e4:9e:b6:e8:a8:07:ff:b8:a6:2e:7e:fe:
9c:fd:8d:10:bd:c0:af:9e:2b:9d:1f:80:e4:98:55:
e0:7f:2e:7a:b1:3c:41:3e:6c:e1:51:8f:57:38:7a:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:29:35:F6:2D:8E:7B:87:1A:27:61:9F:15:FA:00:C4:55:11:F3:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38382e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.88.0/24
Signature Algorithm: sha256WithRSAEncryption
06:81:ab:70:0d:b0:86:d9:1c:4c:d6:6f:79:3a:3a:8f:67:bf:
81:9c:48:e2:77:32:23:43:93:59:2e:4d:d4:95:0e:38:27:96:
f8:74:cd:30:f9:eb:82:42:7f:c1:cd:0c:9b:92:49:27:23:9f:
f2:91:3d:af:b7:be:ab:31:da:56:05:93:70:7f:b5:89:0e:8f:
f3:47:04:e4:3a:91:25:9a:2a:e5:46:4b:33:d2:71:3f:95:af:
a0:05:a2:9a:f6:fa:d4:f4:d9:0c:13:b1:a9:4e:16:a5:66:d1:
a1:08:ef:ea:06:2e:a1:a4:08:5e:95:f2:2e:2f:58:01:8d:54:
0e:08:78:cd:32:a4:ab:0d:cd:a4:6b:ff:b8:d0:ce:ab:3e:e5:
c1:21:0a:fe:fa:bf:b7:41:5d:3a:e6:53:e1:7c:6a:dd:a6:9e:
e1:8a:03:9c:83:70:c7:36:af:30:4d:b7:30:97:77:ae:69:e7:
68:1b:a1:e5:1b:04:ff:7a:4c:34:6f:29:93:ce:49:d5:9f:6e:
48:84:05:ac:42:a3:b9:d8:ce:e3:05:96:0b:76:99:f3:d3:4d:
63:2a:06:8d:24:ae:54:c2:30:cf:04:23:72:ab:92:02:30:83:
20:26:ea:c0:2c:67:20:8f:ee:3e:49:50:df:2c:e2:d2:57:fc:
94:c6:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:41 2026 by rpki-client