Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e2037303239.roa
File: 3134352e31312e3131322e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: fTibKairj4EDxpXKpxbi/7cLIaLuNDmWSQW1Ea4v2O8=
Subject key identifier: 0B:D2:96:C7:1B:55:E2:70:87:7E:5F:68:27:79:3C:40:37:F6:CF:3C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6DF8F8BD77E0DE83EBBA4C26B3632F5F786C9727
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e2037303239.roa
Signing time: Fri 10 Apr 2026 10:51:04 +0000
ROA not before: Fri 10 Apr 2026 10:46:04 +0000
ROA not after: Fri 09 Apr 2027 10:51:04 +0000
asID: 7029
IP address blocks: 145.11.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f8:f8:bd:77:e0:de:83:eb:ba:4c:26:b3:63:2f:5f:78:6c:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:46:04 2026 GMT
Not After : Apr 9 10:51:04 2027 GMT
Subject: CN=0BD296C71B55E270877E5F6827793C4037F6CF3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:08:24:e1:05:f4:04:07:2b:6d:ab:65:fb:
55:39:30:01:07:27:0a:0b:55:4c:41:f7:61:c0:02:
ae:d5:33:4d:f8:94:9c:4e:f4:cd:25:d6:08:3d:b4:
8e:d2:dd:0e:1a:86:a8:f5:7c:39:f4:91:cf:65:c9:
0e:20:e2:03:d5:4e:ec:69:5c:05:d1:e1:c6:5a:ca:
4f:06:5b:aa:ee:87:00:c6:d4:88:ae:2a:5d:1d:06:
62:87:09:1a:7f:c0:7a:f8:30:9a:9f:82:2c:68:ed:
b5:38:28:49:c7:60:ec:c6:e4:ad:21:d4:64:99:a1:
0a:38:ee:3a:29:c4:f9:d5:2f:fd:84:d7:cd:08:44:
ef:20:d5:5d:e6:7b:18:ca:77:12:e1:40:75:38:5d:
39:80:c8:52:da:77:a5:99:9f:b8:14:6b:87:0b:94:
ab:fe:bf:6f:5d:5e:39:d7:0b:2a:3e:7d:98:1f:5a:
22:21:6d:b5:da:ae:32:01:82:26:c1:69:00:33:ae:
8e:1b:d7:8b:c4:ce:32:f1:82:0b:3b:34:d0:78:bd:
23:43:4c:d7:b7:44:36:d0:2f:33:4b:bc:9d:62:49:
bc:17:bb:4e:da:78:3f:6d:cb:f4:4b:5c:bf:f1:e3:
ff:13:91:eb:91:54:60:91:d1:d1:b8:da:1f:ac:3e:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:96:C7:1B:55:E2:70:87:7E:5F:68:27:79:3C:40:37:F6:CF:3C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3131322e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.112.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:a3:b0:45:4a:06:db:6a:f5:ce:c6:ad:f4:0a:43:cb:ee:d8:
a2:fc:0c:d9:84:99:fb:c9:8d:96:df:f4:35:95:43:ca:8b:cd:
49:35:49:ef:f2:48:0e:ef:08:9c:44:85:89:c6:39:af:49:5c:
de:d0:13:dd:93:a1:2c:70:b8:42:7c:22:c4:68:11:67:b4:10:
7d:ff:e0:a1:e5:cc:b4:3d:9b:62:da:21:49:4f:15:68:e2:3f:
2a:9b:f6:14:f1:8f:5c:80:63:02:d0:18:ab:a6:7f:70:02:41:
d1:5b:d4:fb:18:23:f5:58:2a:21:08:4c:91:5b:34:aa:3b:b0:
2f:70:c5:e5:ad:6d:e3:48:bb:b9:f1:18:5f:9d:95:c8:7f:a6:
bc:1f:95:5e:b5:58:52:8b:85:eb:aa:19:22:3e:b9:ed:bd:60:
bf:1f:a0:a4:67:76:a9:dd:3f:d8:9f:79:14:31:57:af:54:02:
0e:80:77:c4:5f:b4:c6:8a:0d:48:68:4c:5f:f0:f3:61:cd:26:
1e:9a:24:80:30:94:79:91:b7:66:17:c0:41:8b:7f:89:9c:d6:
c3:ff:c8:8c:25:36:42:6e:3b:bc:57:fa:f1:ec:a0:a5:f2:d4:
fb:fe:5e:b1:52:e3:fd:2b:44:99:96:e0:6d:88:09:e6:1f:37:
92:c4:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:14 2026 by rpki-client