Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2037303239.roa
File: 3134352e31312e3130342e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: 5up+FrcWxdl9R37LEE1iRh54CJJ7+hzQYGimQmKAfZY=
Subject key identifier: 18:41:30:BC:AF:94:73:2D:1F:41:21:B9:16:C0:E5:69:96:CE:81:6B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7139186D76EC14C67F173AD93C774CA5914309FC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2037303239.roa
Signing time: Fri 10 Apr 2026 10:50:56 +0000
ROA not before: Fri 10 Apr 2026 10:45:56 +0000
ROA not after: Fri 09 Apr 2027 10:50:56 +0000
asID: 7029
IP address blocks: 145.11.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:39:18:6d:76:ec:14:c6:7f:17:3a:d9:3c:77:4c:a5:91:43:09:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:45:56 2026 GMT
Not After : Apr 9 10:50:56 2027 GMT
Subject: CN=184130BCAF94732D1F4121B916C0E56996CE816B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:65:8d:f8:67:7a:db:a7:d1:9d:e2:be:bd:
db:ca:26:c6:19:fb:47:58:de:18:16:50:24:85:9b:
42:c2:c5:43:36:0f:fe:98:36:9e:14:b5:6d:b1:eb:
d9:76:af:92:94:fc:c7:bb:eb:24:04:d6:42:44:38:
75:58:ad:44:fa:d0:dc:4f:a1:24:6d:15:7b:66:d0:
3c:91:89:f6:34:e1:96:fd:65:39:62:11:d4:fc:a8:
d6:5d:af:9e:cc:9a:1b:74:f6:dc:52:cb:8f:a6:ae:
89:b7:f7:28:91:db:a2:82:4f:c9:8b:df:53:0d:58:
df:94:36:47:45:ce:ae:c5:ec:54:4e:85:f6:52:4a:
c5:77:7f:2c:1e:f7:f3:79:aa:2b:01:66:32:d8:02:
db:60:ed:49:f7:c1:9d:ba:af:51:44:23:cb:6f:45:
35:31:e7:29:5f:26:a5:de:c9:ea:4d:0f:45:b6:6b:
c5:f1:c9:db:a1:ad:d3:c1:5a:8a:00:e1:0e:92:43:
ad:81:a8:4f:1e:b0:6c:7c:fa:f7:67:bd:26:a1:cd:
a2:b2:63:81:3d:67:bd:bb:49:4e:8e:cd:82:c8:24:
be:10:e7:44:9d:0e:05:6f:05:ec:33:e7:1c:8c:7b:
e5:72:92:d9:f7:c9:7d:51:2c:8b:1d:60:89:d6:95:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:30:BC:AF:94:73:2D:1F:41:21:B9:16:C0:E5:69:96:CE:81:6B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3130342e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.104.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:4c:dd:c2:aa:bd:61:4e:07:e1:81:77:3d:3c:0d:c3:26:b8:
b9:cd:7f:66:a4:97:d3:82:de:e2:83:08:59:78:05:4d:62:0e:
61:a0:c5:ea:6a:c6:8d:a2:1c:43:4f:38:13:8a:03:0a:e9:7f:
e5:f9:39:bf:c1:f0:5a:05:d8:12:c1:32:2a:18:71:19:f0:db:
d2:66:b5:12:a0:a2:0b:c7:12:da:f6:2f:02:b2:99:d2:25:03:
16:a6:04:eb:68:59:08:29:d4:24:a6:18:23:5c:49:8b:b2:39:
42:e0:57:a8:e1:d9:fa:b7:e0:c2:ff:2c:ad:33:bd:c3:98:2c:
9e:1f:95:d2:f2:b2:0c:89:08:ea:4d:ec:e5:a1:db:fa:5f:b1:
8f:d0:ab:40:4b:f5:92:8c:b8:46:9f:9f:3e:b1:9c:50:a2:15:
39:68:b5:05:97:45:74:75:b3:3f:99:e4:a6:e3:a2:b8:af:9b:
4e:aa:74:70:13:88:5f:26:a6:38:84:5a:8e:3d:73:5e:79:e8:
1c:f1:20:32:ea:66:8f:b3:ff:d7:8e:e3:13:1a:f7:29:6c:00:
ef:2c:98:f9:e7:f4:84:8d:1c:85:a4:59:e1:8d:2a:94:a5:df:
44:a3:52:c5:19:21:41:0d:24:be:2d:8f:0e:ca:b0:7a:86:37:
67:f3:5f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:20 2026 by rpki-client