Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3132302e302f32312d3234203d3e2037303239.roa
File: 3134352e31312e3132302e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: 4aeuPG7nC0xqILb2SC5F9C5M+9orlM5MjnbgoAlBwcc=
Subject key identifier: 59:8D:08:21:04:C2:EF:C4:09:B8:AB:73:E5:C7:0C:36:31:08:F6:B2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43C66800D63EEFAE7B71D79B8CB6F9B3FDFF58B3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3132302e302f32312d3234203d3e2037303239.roa
Signing time: Fri 10 Apr 2026 10:51:14 +0000
ROA not before: Fri 10 Apr 2026 10:46:14 +0000
ROA not after: Fri 09 Apr 2027 10:51:14 +0000
asID: 7029
IP address blocks: 145.11.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c6:68:00:d6:3e:ef:ae:7b:71:d7:9b:8c:b6:f9:b3:fd:ff:58:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:46:14 2026 GMT
Not After : Apr 9 10:51:14 2027 GMT
Subject: CN=598D082104C2EFC409B8AB73E5C70C363108F6B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:c5:6e:f0:40:d8:fb:12:8e:f2:b4:aa:94:
bb:24:43:24:df:38:60:56:27:e4:f6:ef:c4:23:be:
b9:53:18:1a:23:75:03:1c:bd:ed:64:b2:c8:96:fa:
52:8e:f3:c9:9f:ff:5f:32:75:83:d2:76:9a:6f:f7:
de:62:7c:ee:76:79:77:c7:10:d2:2c:ea:24:9e:e2:
05:17:34:b6:f9:2b:46:73:44:fa:09:cb:bd:17:0f:
a7:c1:bc:96:49:1c:1f:29:5a:b8:04:46:96:06:bf:
31:52:7c:1d:ee:ff:d7:6f:44:39:62:06:c7:d9:1f:
0f:6e:0b:e0:dd:b9:69:84:d1:22:f4:3e:ce:08:65:
29:9f:e5:b6:e8:e4:12:97:70:8b:be:a3:f9:9c:8c:
3c:74:18:6d:b4:3f:c8:e9:ce:72:30:61:fc:4c:0f:
48:4d:66:2c:f3:bd:31:54:6c:d5:e3:54:4b:0a:2f:
8f:bc:1a:7b:7e:c9:50:5b:a7:27:2b:6c:e9:aa:f8:
c8:5f:e6:b2:46:e7:be:07:82:23:86:77:e7:4a:4c:
b4:88:da:63:b8:1a:0d:36:ca:b9:71:ea:14:b0:79:
c1:0e:0c:fb:e8:d7:7b:be:b1:02:a1:bd:26:5f:a4:
bd:12:ba:0f:c9:b2:20:00:b7:d6:d3:d7:09:81:f3:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:08:21:04:C2:EF:C4:09:B8:AB:73:E5:C7:0C:36:31:08:F6:B2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e3132302e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:1d:4b:1f:c3:83:04:02:c3:5a:22:52:d4:ad:b3:17:3c:3c:
2b:fa:00:94:45:33:1a:73:1f:c8:89:3d:9c:24:60:a6:9a:4d:
25:35:08:5b:b1:96:c8:eb:8e:4c:e3:42:66:5a:d4:aa:04:70:
cc:1f:7d:87:67:30:01:29:bb:bc:e9:f4:e0:60:d1:c6:e7:e2:
99:38:11:93:70:07:4d:47:17:a8:a8:e8:8f:bf:6f:70:e0:96:
fd:f5:05:41:01:6e:8a:b6:79:70:0c:08:58:7f:91:58:bd:6b:
ad:76:35:b5:0b:ed:1f:0b:86:f4:1f:17:e6:63:7b:9c:7d:f6:
ab:fa:2e:18:04:07:26:3c:be:70:81:75:c2:d0:a7:47:4d:fb:
0e:73:22:76:a4:b5:ed:91:c1:a8:bc:94:4d:35:70:7c:63:2b:
40:9e:59:a7:53:00:b9:4d:de:9a:f0:45:a2:53:e2:b7:60:78:
10:4e:e0:a4:31:42:6e:c7:55:0c:fa:57:80:21:29:79:91:cf:
01:4f:d1:b3:a2:32:71:85:d6:79:fc:1d:6d:33:ba:0e:47:0f:
b6:68:10:4d:d9:9c:0b:5e:18:bd:f8:e8:b6:75:17:f9:9f:ce:
eb:9d:75:a8:6d:b6:28:53:8c:24:7b:8e:2a:19:0d:2a:ff:db:
a0:dc:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:28 2026 by rpki-client