Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39342e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: 7Y56S6zTnLNfdfIWiM2ZYfnC3VkbHE/GggoBQHRMPzs=
Subject key identifier: 97:58:51:80:4B:FC:EC:C1:71:80:7A:7A:55:C8:2E:22:25:6C:88:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 107C60D2093009275CC97F33359FCDA5002F23EE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39342e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:28 +0000
ROA not before: Thu 23 Jul 2026 07:21:28 +0000
ROA not after: Thu 22 Jul 2027 07:26:28 +0000
asID: 2914
IP address blocks: 145.79.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7c:60:d2:09:30:09:27:5c:c9:7f:33:35:9f:cd:a5:00:2f:23:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:28 2026 GMT
Not After : Jul 22 07:26:28 2027 GMT
Subject: CN=975851804BFCECC171807A7A55C82E22256C88F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:54:74:c2:9c:4d:2f:f5:81:24:02:a5:b4:
10:e7:97:9c:b9:da:bb:f2:83:17:7a:13:48:28:73:
75:9f:7e:8e:0d:dc:a7:79:af:3a:da:70:91:bc:99:
71:7a:bd:c2:74:e6:a1:8f:f9:08:fe:0e:ae:72:65:
05:d0:9f:35:62:d9:81:08:a1:ad:7e:75:fe:7e:26:
79:8b:b9:84:c7:5a:37:56:a1:2b:42:ec:68:cc:f1:
71:d5:12:65:07:5f:fb:f0:70:45:b1:7c:33:9c:26:
9c:b1:bd:e8:03:11:13:35:09:f1:39:10:fa:98:41:
e8:ce:ad:d0:37:8a:93:d1:9c:d2:c5:5d:01:02:ca:
51:77:32:32:46:94:20:bb:40:79:43:64:9c:f4:88:
4b:7e:f4:85:fd:00:ca:62:25:d7:84:38:c7:c6:21:
b7:23:38:c8:fc:f6:16:39:07:68:00:d6:5b:09:44:
b3:65:5b:de:17:20:9d:c6:d0:df:8a:3f:a8:a6:4b:
51:51:41:84:31:9b:d0:a1:c2:b4:51:46:bc:97:25:
61:57:f7:4c:f9:36:bb:60:14:f0:1e:9d:18:04:c6:
ba:4c:bc:91:a9:17:de:c3:44:ff:4e:34:9c:f3:58:
b9:a4:4f:5b:47:39:31:fd:03:79:53:f4:84:a4:91:
7c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:51:80:4B:FC:EC:C1:71:80:7A:7A:55:C8:2E:22:25:6C:88:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.94.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e0:2d:97:e5:ff:7d:6f:96:93:0a:49:cf:7a:6a:08:89:54:
63:3f:9f:68:be:9f:03:cc:d8:7a:88:f8:37:84:4b:4a:97:6c:
59:c6:eb:19:2e:58:fd:7b:45:b9:ec:b8:ae:ef:6b:b3:8f:45:
3d:45:e6:7e:1d:a1:4f:fe:35:b6:2e:b9:2a:29:1d:07:8b:9c:
3a:c8:28:b7:c3:e9:00:8e:75:6c:27:6e:df:0a:52:32:2a:dc:
a0:40:19:51:e9:12:bf:41:59:7b:97:5d:30:eb:7d:8a:ec:04:
13:13:71:4a:22:57:55:e3:0f:33:45:a0:c5:d2:f8:88:49:e0:
65:8c:31:35:42:d4:f2:5a:25:92:ab:17:6f:7d:5c:da:4a:ea:
d1:22:13:2f:59:85:21:3b:08:0a:6b:a7:f7:07:ef:f0:a4:ee:
04:b5:de:4e:37:6a:00:d1:e7:a0:86:30:59:c8:f8:4f:f1:3d:
47:b2:bf:93:9d:a9:82:25:e4:bf:b6:e0:15:9d:67:8e:9d:5b:
3c:88:5b:cd:5f:1e:e5:4a:14:ef:91:55:79:21:ad:e4:13:ed:
45:35:36:91:46:b6:30:7a:54:56:c2:4b:2b:26:3e:69:d6:0e:
05:90:e2:99:22:c9:d3:ed:ea:89:7b:20:3e:fb:04:e8:cd:c4:
88:63:c3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:23 2026 by rpki-client