Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39372e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: bmlttzBuIj3on9XYyuiRys3EXT0uvCS1dkIECaoUQWI=
Subject key identifier: FC:3E:59:C6:D7:2B:66:76:32:62:5C:9C:57:B8:CF:F1:50:0B:3A:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 503C8E882332A02D76FE1DB8D51F24983E50B157
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:30 +0000
ROA not before: Thu 23 Jul 2026 07:21:30 +0000
ROA not after: Thu 22 Jul 2027 07:26:30 +0000
asID: 2914
IP address blocks: 145.79.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3c:8e:88:23:32:a0:2d:76:fe:1d:b8:d5:1f:24:98:3e:50:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:30 2026 GMT
Not After : Jul 22 07:26:30 2027 GMT
Subject: CN=FC3E59C6D72B667632625C9C57B8CFF1500B3A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:87:90:b2:09:a1:db:49:b2:0c:e0:35:10:
a1:1f:1f:10:ee:42:fe:30:fa:de:de:ee:63:37:10:
12:3a:c5:74:92:96:87:52:22:e1:11:25:0d:72:2d:
a9:01:2d:9c:c3:14:bc:1c:b3:41:e7:7f:06:0a:4c:
b6:95:2b:85:38:f5:ce:15:53:cd:63:38:c4:a2:bf:
86:1e:ff:04:59:7b:c0:f6:f7:b4:3b:e5:7c:79:d1:
f7:9f:3f:23:a3:58:c7:b2:14:fb:f3:96:6d:45:f4:
01:f1:96:df:e1:48:b4:e2:b0:94:51:4d:35:64:f4:
1d:22:dd:0e:7c:e3:da:df:0e:b5:af:c6:0c:7d:8b:
ae:ba:54:63:6f:58:ab:2a:0b:f1:fc:76:d1:8a:65:
70:06:74:23:e0:46:70:49:43:7a:88:f2:73:7f:00:
77:4f:ae:bf:f5:58:68:0b:05:7e:41:31:2e:6b:01:
db:cf:4d:d6:84:ac:c5:ed:e0:3b:e0:d7:cb:80:9f:
ad:6e:2e:59:d4:53:c0:0f:80:53:3c:44:43:70:67:
86:2e:06:00:f5:95:57:df:13:2a:ad:a3:2e:4c:ae:
03:0e:08:83:26:c9:12:ca:64:fb:42:99:59:0e:b1:
25:d0:c6:cb:3e:5b:0c:9b:c9:e2:2a:df:35:3d:65:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3E:59:C6:D7:2B:66:76:32:62:5C:9C:57:B8:CF:F1:50:0B:3A:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.97.0/24
Signature Algorithm: sha256WithRSAEncryption
42:eb:09:50:62:81:70:82:6b:3a:55:16:f2:61:73:39:69:13:
9d:ed:d4:57:c3:ec:94:29:ad:10:c1:15:77:af:3d:74:d7:ad:
78:bc:19:d8:2c:e6:43:4f:6a:67:28:a2:1a:f6:72:13:a8:20:
8b:4a:b4:d9:4f:9e:c0:74:0c:33:4d:59:fe:d1:1e:11:0f:cb:
42:3d:e3:f7:60:0c:cd:37:b5:e8:5c:80:40:5a:4e:29:d4:86:
6a:1b:10:ac:6f:33:a6:e3:2e:f8:d6:93:4a:e2:16:39:95:64:
71:cb:28:ee:96:51:2c:6c:d3:e1:12:f9:81:8a:ae:3e:d5:10:
fa:90:c0:b3:c4:09:ef:c0:f0:d0:d5:21:9c:81:04:62:df:18:
7e:dc:f5:00:22:2f:9f:78:e3:d3:90:36:1c:3f:5e:ee:88:aa:
4e:2d:ab:c6:01:f5:a3:b6:ba:15:13:c3:09:3d:77:d0:d3:5f:
34:e5:2f:c0:7d:c4:51:c0:8c:7a:90:c6:7f:b7:bc:84:14:b2:
76:2d:d8:2d:cf:a4:a9:96:37:f6:dd:7d:2b:51:d7:86:30:61:
c8:b1:4e:11:b1:c2:dd:f4:67:29:50:a2:34:6e:80:06:22:58:
4e:d3:5f:da:a4:46:8e:9b:da:7a:64:0a:5a:ca:96:54:ad:0c:
60:06:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:33 2026 by rpki-client