Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e2037303239.roa
File: 3134352e31312e38382e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: Ph5yIGPphxL+7Lu9h/gPvE7j6wSQigsXDf7Ebxim2xw=
Subject key identifier: 09:29:F3:11:29:97:5C:B0:EA:6C:0E:26:D3:24:B7:2D:92:1C:4D:68
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 288ED7E9DB8AFDE50762F3436A4010A5B21A099D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e2037303239.roa
Signing time: Fri 10 Apr 2026 12:44:07 +0000
ROA not before: Fri 10 Apr 2026 12:39:07 +0000
ROA not after: Fri 09 Apr 2027 12:44:07 +0000
asID: 7029
IP address blocks: 145.11.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8e:d7:e9:db:8a:fd:e5:07:62:f3:43:6a:40:10:a5:b2:1a:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 12:39:07 2026 GMT
Not After : Apr 9 12:44:07 2027 GMT
Subject: CN=0929F31129975CB0EA6C0E26D324B72D921C4D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:90:59:dc:6a:04:1c:b6:de:98:ca:66:9b:
cb:84:4e:66:28:fd:10:bc:99:ab:0f:48:c7:6e:32:
77:ed:d7:df:b5:57:68:6b:63:be:bf:c5:57:97:bd:
7f:d2:ca:14:37:75:36:28:d6:b8:bf:ae:0d:5f:25:
cc:d2:a6:39:2e:a9:e5:9d:1b:a3:af:b7:a3:ed:54:
aa:53:3e:a4:86:f5:9a:69:d9:aa:1d:80:b3:b5:39:
be:38:af:99:6d:49:a5:03:0f:28:2a:4f:e1:89:0f:
94:db:79:51:4a:11:d2:e1:6b:6a:6d:6e:a8:13:f3:
ba:06:96:5f:1b:1d:80:94:db:45:4a:4d:ba:c4:f8:
5e:2e:d1:99:7b:71:54:f7:80:87:bf:c1:58:44:85:
22:78:c9:8c:9f:67:3a:63:40:db:e2:dc:cc:53:61:
cf:9b:3a:24:0f:a4:55:94:a1:0c:09:a3:5e:04:ca:
c2:12:53:c6:79:ce:b0:33:18:99:97:ad:7c:b0:f6:
ac:70:02:4f:99:c9:d6:ea:cb:55:0d:a3:c8:92:7c:
0f:21:6f:1c:d2:86:d2:23:a6:91:01:6b:2c:fb:16:
a3:53:ad:42:8e:72:06:54:e3:b3:6a:02:1d:22:9f:
1a:5e:be:fc:65:b3:5d:64:02:aa:e4:88:24:c8:4b:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:F3:11:29:97:5C:B0:EA:6C:0E:26:D3:24:B7:2D:92:1C:4D:68
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31312e38382e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.88.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:25:36:96:50:85:b9:cf:57:90:93:f1:f6:a1:42:b0:05:45:
33:d5:1b:5c:22:c6:28:b2:d6:13:d7:94:55:c2:28:1e:63:35:
c4:06:0c:a7:bf:05:77:66:69:42:8f:4f:11:b8:10:4c:c3:8d:
f4:8b:90:94:57:79:55:81:33:46:65:5e:55:21:66:37:9a:5a:
4e:cb:23:b2:c3:3e:86:52:89:ea:7e:17:c3:82:ac:c6:b2:1c:
c3:64:01:6c:5a:ef:bc:4d:0f:b7:46:7e:91:b9:00:fe:cb:9c:
38:c8:2f:ea:f1:7a:3e:02:9a:ca:c5:f3:c8:f4:ea:e3:b4:d6:
7b:c4:8c:a7:f3:29:b1:33:8c:0d:2c:20:5a:65:0e:fe:3d:dd:
8c:a9:11:25:6c:3a:27:9a:9b:d5:5a:42:d8:0d:6b:c8:b0:f6:
7d:92:29:bf:4b:28:5e:c6:7e:f6:9f:dd:cb:b6:3d:b4:18:36:
65:ee:ef:55:1a:20:3c:3e:3c:8d:04:79:29:7b:27:0e:bc:45:
d4:18:e7:75:d6:d6:cc:d4:97:6c:46:78:38:f4:08:c2:be:7d:
cd:3b:fb:49:81:f0:8d:5e:3b:78:cf:db:23:27:b1:cb:2f:49:
0c:48:be:95:b5:99:76:ae:04:c8:e8:cc:10:bb:8e:b7:1b:d7:
ed:89:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:21 2026 by rpki-client