Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39392e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e39392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: evS5S9WXkvJIPCbEaj9KAW2n48c2VLVwJBabAlX3T5s=
Subject key identifier: 17:DC:EE:6C:B6:0C:37:21:41:7A:E5:EA:DD:D3:39:F2:11:8C:90:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33E537C4B37FA2643C76C62D57B4F13218679CA3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39392e302f32342d3234203d3e2032393134.roa
Signing time: Thu 23 Jul 2026 07:26:22 +0000
ROA not before: Thu 23 Jul 2026 07:21:22 +0000
ROA not after: Thu 22 Jul 2027 07:26:22 +0000
asID: 2914
IP address blocks: 145.79.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e5:37:c4:b3:7f:a2:64:3c:76:c6:2d:57:b4:f1:32:18:67:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 23 07:21:22 2026 GMT
Not After : Jul 22 07:26:22 2027 GMT
Subject: CN=17DCEE6CB60C3721417AE5EADDD339F2118C90D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:39:a7:6a:57:dc:a0:1e:ed:bd:e1:52:59:
e4:0a:3b:85:7a:64:05:3f:14:37:84:41:3b:a0:91:
cc:5b:c3:34:bd:5b:aa:d4:11:3a:e3:65:53:f8:c5:
09:f8:7a:74:a6:b1:50:70:b5:20:a7:42:71:0b:92:
27:cc:ff:fe:8f:e1:09:6d:d4:ac:d2:6f:ef:42:c7:
59:96:47:a7:e4:39:d8:da:9b:15:6f:2b:6e:6a:ed:
bf:0e:71:8d:1f:db:21:b9:c4:95:38:4c:15:e5:87:
47:ad:a4:85:e2:0f:ed:7a:91:c9:09:7e:6e:2b:78:
9f:17:47:d5:a1:66:f2:8f:4a:88:bb:b3:6e:83:89:
b3:20:07:0c:ca:40:2f:e4:38:e5:d1:56:a1:43:57:
08:76:13:11:cb:70:96:69:2f:ef:f0:75:11:2a:95:
e3:35:2c:05:5f:99:29:ac:44:31:f3:c9:5c:23:2c:
73:03:3a:5c:cb:88:ff:d0:d7:28:7b:f5:dd:25:68:
a7:bb:d4:30:9f:fc:12:b8:34:55:b5:b5:dd:d2:ab:
29:7d:37:bf:1b:02:39:c7:2d:ca:e6:fd:e0:f5:b9:
be:a1:9e:fb:58:62:e9:54:7c:54:dc:5f:96:03:c3:
ca:30:4b:66:b1:cb:8b:bb:a3:11:ef:d5:79:43:88:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DC:EE:6C:B6:0C:37:21:41:7A:E5:EA:DD:D3:39:F2:11:8C:90:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.99.0/24
Signature Algorithm: sha256WithRSAEncryption
19:62:ba:d8:97:39:e8:4b:18:10:3d:9f:f4:91:f3:da:f4:6a:
9a:a5:98:c1:89:16:14:cd:16:a4:f6:7c:de:12:fc:80:2b:a5:
0c:db:ec:e3:0f:d3:73:19:63:a5:06:f5:82:3b:66:cd:d8:d5:
7b:8b:8c:71:88:a1:80:54:f2:c1:cf:47:50:95:9f:03:f9:b2:
10:06:52:b2:00:a8:8f:0e:97:a7:7f:ec:03:d7:43:44:9b:0f:
54:2b:5e:45:2d:87:d7:b0:80:51:c7:f6:1d:bb:0e:f2:56:39:
17:0a:61:f9:f7:2d:e1:40:05:d4:8c:18:a5:d2:fb:ea:e8:05:
a3:85:e5:1e:96:9e:4a:9c:14:70:ba:07:bc:2b:39:4b:66:af:
e4:cc:37:0c:5f:d0:ec:61:36:9e:3b:d9:50:31:50:e3:11:a9:
90:4f:60:7a:64:77:d1:d8:2c:ba:c7:60:ea:83:4b:6e:26:de:
4b:61:d8:3a:88:d4:59:42:af:a5:3f:dd:b2:d4:5c:eb:21:85:
13:98:8e:78:2f:ce:f9:5b:5d:da:f5:1b:23:06:28:3b:ef:b9:
b8:33:ff:62:00:eb:61:f8:66:54:48:58:64:79:05:2d:3e:17:
df:52:3a:36:3d:58:81:65:9e:52:5d:29:7e:ae:4a:5f:c0:bf:
48:3e:66:ff
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUM+U3xLN/omQ8dsYtV7TxMhhnnKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MjMwNzIxMjJaFw0yNzA3MjIwNzI2MjJaMDMxMTAvBgNV
BAMTKDE3RENFRTZDQjYwQzM3MjE0MTdBRTVFQURERDMzOUYyMTE4QzkwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUjmnalfcoB7tveFSWeQKO4V6
ZAU/FDeEQTugkcxbwzS9W6rUETrjZVP4xQn4enSmsVBwtSCnQnELkifM//6P4Qlt
1KzSb+9Cx1mWR6fkOdjamxVvK25q7b8OcY0f2yG5xJU4TBXlh0etpIXiD+16kckJ
fm4reJ8XR9WhZvKPSoi7s26DibMgBwzKQC/kOOXRVqFDVwh2ExHLcJZpL+/wdREq
leM1LAVfmSmsRDHzyVwjLHMDOlzLiP/Q1yh79d0laKe71DCf/BK4NFW1td3Sqyl9
N78bAjnHLcrm/eD1ub6hnvtYYulUfFTcX5YDw8owS2axy4u7oxHv1XlDiFHdAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUF9zubLYMNyFBeuXq3dM58hGMkNAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzOTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT2Mw
DQYJKoZIhvcNAQELBQADggEBABliutiXOehLGBA9n/SR89r0apqlmMGJFhTNFqT2
fN4S/IArpQzb7OMP03MZY6UG9YI7Zs3Y1XuLjHGIoYBU8sHPR1CVnwP5shAGUrIA
qI8Ol6d/7APXQ0SbD1QrXkUth9ewgFHH9h27DvJWORcKYfn3LeFABdSMGKXS++ro
BaOF5R6WnkqcFHC6B7wrOUtmr+TMNwxf0OxhNp472VAxUOMRqZBPYHpkd9HYLLrH
YOqDS24m3kth2DqI1FlCr6U/3bLUXOshhROYjngvzvlbXdr1GyMGKDvvubgz/2IA
62H4ZlRIWGR5BS0+F99SOjY9WIFlnlJdKX6uSl/Av0g+Zv8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:00 2026 by rpki-client