Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: WvRhUR5pc/aMSiFDT0RQhjMl5+EJo9OLbN+wl8dxK6Q=
Subject key identifier: E0:C5:D5:92:7D:C9:D0:57:2C:0B:71:58:D3:8F:F5:2F:15:6A:98:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F3D52B66739E28541E954EF13B4DE93E9ABDBDE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39362e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:26 +0000
ROA not before: Thu 23 Jul 2026 07:21:26 +0000
ROA not after: Thu 22 Jul 2027 07:26:26 +0000
asID: 2914
IP address blocks: 145.79.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3d:52:b6:67:39:e2:85:41:e9:54:ef:13:b4:de:93:e9:ab:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:26 2026 GMT
Not After : Jul 22 07:26:26 2027 GMT
Subject: CN=E0C5D5927DC9D0572C0B7158D38FF52F156A982A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:05:11:c3:cc:14:6f:cc:bd:54:bd:6e:ed:
46:25:fa:7b:ff:8b:6e:c7:f3:d2:0d:5f:6b:16:99:
0a:00:7f:69:68:6d:f5:5b:42:b4:78:7d:b8:b6:51:
45:37:96:e6:79:78:34:4d:98:be:08:57:b4:50:9a:
9c:da:22:30:b1:04:fd:aa:1d:f4:b2:06:bf:f9:5e:
47:25:27:95:e7:29:24:56:4e:76:e6:db:94:63:38:
1e:46:b8:4f:31:51:84:c8:e0:e2:bc:7c:0c:f5:ba:
3e:e0:eb:21:53:a4:3f:25:d2:82:cc:21:15:c3:7f:
2e:de:58:c7:0b:40:16:81:c4:fa:6a:3f:de:ce:cd:
3b:ee:2b:b4:25:4c:37:67:a0:00:31:a9:fd:16:7e:
1d:03:1a:e1:11:8d:a1:0a:93:25:1e:d1:00:b1:20:
73:59:40:9a:bf:44:46:80:c4:b3:13:9e:f6:26:79:
7e:98:9b:a9:ae:c2:4b:c0:52:c6:69:a6:56:8a:5e:
1b:83:d8:9f:af:4a:26:21:a0:59:03:ac:f2:eb:e5:
35:38:c0:17:8f:f2:ea:7c:02:00:1f:a8:35:f8:6f:
ca:02:40:37:2d:7a:63:89:87:8d:c5:8b:dd:bb:b9:
57:be:2b:2a:74:95:8b:03:1c:19:00:53:02:44:3c:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C5:D5:92:7D:C9:D0:57:2C:0B:71:58:D3:8F:F5:2F:15:6A:98:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.96.0/24
Signature Algorithm: sha256WithRSAEncryption
09:71:b0:1e:90:01:f1:59:3e:67:37:f5:ab:46:da:cd:35:d8:
92:7a:85:5b:f1:e7:2b:a6:6f:e5:b8:95:93:f9:d7:8d:23:c1:
ca:68:a0:2a:8c:78:ba:16:92:5c:1f:b0:93:b8:5d:fd:f8:34:
8a:f3:c6:f3:f5:f5:01:23:93:12:91:47:97:cb:ef:a5:f0:97:
a4:c7:23:53:83:02:be:91:72:74:b6:8e:d2:bc:b8:c1:43:e3:
5f:7c:eb:f3:49:76:8a:f4:45:ca:49:28:a8:f9:87:91:20:4a:
62:c5:93:60:8b:9b:b7:d7:b3:42:01:c7:d2:bf:ae:23:ee:25:
03:de:9a:e1:e1:cb:79:d1:b2:aa:fa:7b:42:88:88:b8:57:58:
5c:74:55:fc:b6:cb:41:73:92:4f:10:eb:41:86:08:ac:84:f9:
4c:ae:07:5b:6f:f7:70:07:67:02:ee:02:8f:9a:73:32:e9:c6:
53:01:be:f6:35:f4:96:27:8b:2a:86:f4:d4:f6:b1:30:14:3e:
bb:79:87:53:1c:b9:e4:b8:f8:7b:84:66:0d:15:46:b1:6b:af:
b7:04:cb:88:d4:dc:16:90:04:cf:d4:cd:ae:d8:c0:db:c8:ae:
48:9f:68:a3:12:f9:f9:1f:f1:a5:1f:46:e7:20:b9:63:38:11:
55:eb:70:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:44 2026 by rpki-client