Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39352e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: bDatKfNRqU+7/W2kEfDEgwmH5m8ObzA6GlHnxKgmjGY=
Subject key identifier: ED:81:48:A4:3F:AD:D0:AE:15:E6:40:CF:C1:03:51:19:75:A4:54:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B8E390EFE21F3715AFA6FE581F10D5A2369A75A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39352e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:24 +0000
ROA not before: Thu 23 Jul 2026 07:21:24 +0000
ROA not after: Thu 22 Jul 2027 07:26:24 +0000
asID: 2914
IP address blocks: 145.79.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8e:39:0e:fe:21:f3:71:5a:fa:6f:e5:81:f1:0d:5a:23:69:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:24 2026 GMT
Not After : Jul 22 07:26:24 2027 GMT
Subject: CN=ED8148A43FADD0AE15E640CFC103511975A4544D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:fb:b0:38:a9:e9:21:53:52:97:62:d9:6a:
19:6d:e7:95:24:9f:aa:11:d5:54:7d:ee:ff:0c:52:
d8:74:14:a0:ba:82:e1:20:f0:21:1c:e2:be:69:b4:
55:0b:09:7d:75:47:52:7d:01:dd:52:b6:0c:98:60:
b9:22:4d:5f:af:75:da:92:fd:55:76:d1:f4:92:14:
d2:66:84:48:c8:84:71:01:50:2d:8c:3b:69:e2:0e:
93:92:46:ed:7b:1c:0e:69:b8:ae:59:ab:b9:a4:fd:
29:b4:99:60:f1:84:82:3b:42:20:fd:f2:c2:3f:e1:
79:5e:88:db:89:b0:7b:1c:84:4d:01:33:45:63:f7:
76:49:9c:90:f8:14:99:82:03:3b:43:99:a0:18:5e:
c5:7c:68:bc:53:77:ee:c5:1c:fc:64:6c:d2:83:f2:
b0:67:dc:e1:e2:99:50:29:04:3e:80:16:aa:a8:11:
04:51:4a:ef:3c:8a:56:d7:e6:5e:d2:44:91:0a:62:
25:8f:c7:db:0e:70:94:46:f3:53:84:22:e9:64:4d:
73:67:ce:0e:79:d0:be:85:7f:b1:33:58:28:06:8b:
16:9f:1e:1c:5d:52:88:f8:71:c9:27:8e:ff:00:8d:
d4:6f:12:cf:6c:95:63:ab:67:b4:78:29:48:30:99:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:81:48:A4:3F:AD:D0:AE:15:E6:40:CF:C1:03:51:19:75:A4:54:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.95.0/24
Signature Algorithm: sha256WithRSAEncryption
48:51:f7:f0:c0:6f:18:b9:03:7e:a0:29:e4:cc:c2:87:80:ff:
79:c9:e8:76:15:2d:68:f0:e5:7c:7b:af:aa:1a:a7:d4:9a:99:
74:59:05:a9:d5:cd:63:d7:53:5b:86:cc:dd:4b:65:cb:c1:c3:
cf:5e:46:4b:f0:81:e0:bf:e8:98:0c:7a:d8:1b:28:ee:49:08:
26:93:7b:6b:a7:bb:92:45:27:0d:75:23:a0:53:81:fd:3f:ca:
75:4c:77:3d:57:71:12:24:df:a1:50:17:6d:f7:27:b9:9d:8a:
29:3b:4c:19:65:d5:55:eb:5e:8e:87:bf:8b:e8:57:77:e7:e1:
b0:e1:52:8a:30:24:75:ab:5f:94:21:15:44:3e:41:d7:5a:ce:
87:2d:6f:37:5f:b4:ad:16:a3:a0:98:f0:61:83:c1:77:d3:60:
cf:fb:38:ca:50:00:25:e0:f3:47:d4:d7:f6:1c:d6:66:6d:02:
65:56:a8:ae:24:8b:01:3d:b3:47:de:9b:fe:29:b3:f3:b7:e4:
6c:b9:57:8c:75:3f:de:57:63:6b:dc:81:59:19:3f:53:87:f4:
50:8d:3b:05:86:10:88:76:c4:08:97:fa:c0:51:0e:03:4d:91:
d3:0d:f3:be:df:b8:55:10:ea:76:0c:97:19:23:61:a4:41:d0:
09:e8:7c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:54 2026 by rpki-client