Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: tLEal340rm+3AQR4CA0/naeeEBOoQdXB055TZYnQ94U=
Subject key identifier: EB:10:62:47:51:7B:96:4C:EF:ED:B6:D6:81:6D:F7:13:4E:14:DB:6F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4303BCC57E3ED9F172D1FA62AD1BB1DC702BE8D9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 04 Aug 2026 14:27:37 +0000
ROA not before: Tue 04 Aug 2026 14:22:37 +0000
ROA not after: Tue 03 Aug 2027 14:27:37 +0000
asID: 395793
IP address blocks: 145.79.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:03:bc:c5:7e:3e:d9:f1:72:d1:fa:62:ad:1b:b1:dc:70:2b:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 4 14:22:37 2026 GMT
Not After : Aug 3 14:27:37 2027 GMT
Subject: CN=EB106247517B964CEFEDB6D6816DF7134E14DB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:8b:f9:65:78:cc:ef:9d:27:e8:ca:66:40:
f0:72:a8:ba:9d:bf:a8:0a:f8:ea:23:48:8b:da:39:
bc:4b:a2:5b:c6:05:4c:3d:1a:2b:95:88:f1:d0:b5:
75:f0:d8:6e:68:4e:35:90:61:8e:54:81:7d:09:b5:
d3:f9:6c:aa:6a:e2:f4:86:f4:3f:6d:0a:95:18:59:
be:5f:68:5b:43:e2:2f:42:03:53:ee:27:2a:1f:87:
0a:71:91:52:10:73:f0:b6:6e:4d:ef:a8:d4:e1:da:
56:11:54:7c:99:5e:05:2e:6f:a8:aa:f9:88:e4:44:
06:21:b2:7f:dd:58:92:e3:02:90:a6:15:a1:96:43:
de:e7:77:8d:fc:69:6c:58:b8:1c:f8:22:ab:8e:27:
fb:a8:b3:08:73:58:d3:64:71:2e:50:64:37:90:d3:
8d:eb:48:68:a3:0e:f1:90:42:e6:93:e5:30:de:a6:
8a:c7:25:38:1e:fa:e0:eb:8a:a7:01:f8:7d:69:3e:
74:ba:a2:c2:7b:7e:af:bd:cd:ae:b5:94:13:d4:09:
94:dd:a9:4e:01:9a:e7:bd:5f:b7:91:09:4e:7e:b1:
d3:c3:57:ec:9e:f9:ae:c9:7d:3c:7b:85:bc:c1:1b:
ab:33:9d:cb:e9:66:6d:ab:c3:9f:2e:6a:e0:ab:10:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:62:47:51:7B:96:4C:EF:ED:B6:D6:81:6D:F7:13:4E:14:DB:6F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130342e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.104.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c3:25:0c:67:6c:cf:45:2e:78:2d:27:d1:49:ae:98:4f:2b:
23:7d:b8:02:e3:57:22:26:b6:0e:22:0e:f7:a2:47:cd:7d:0b:
dd:f7:52:f4:59:9f:75:66:65:3e:7e:e3:28:16:28:aa:b1:d3:
af:8a:8b:3b:d9:e9:1d:32:3d:9a:66:55:e3:bb:cb:0e:68:de:
36:f2:84:2c:d8:8e:40:1a:7c:91:38:6e:3c:35:bf:10:19:a5:
6c:4e:44:9b:ba:b1:38:46:9f:2e:ab:aa:1d:75:78:c8:0e:02:
ae:38:80:71:92:a4:a2:0c:40:01:21:a9:5e:27:8b:ad:e1:38:
4f:12:ce:6d:6a:2e:7d:70:b5:81:9e:9e:17:33:13:2e:75:fe:
65:57:2e:6b:4e:b8:c4:a7:14:ff:e5:dd:06:74:f0:e9:ef:74:
07:f5:9c:af:d9:55:1f:a1:04:27:d6:66:fb:7a:35:07:08:4b:
5f:0f:a3:3d:34:47:8c:86:cd:81:fd:db:c8:41:02:ed:7f:3f:
ea:4a:13:ca:40:49:b1:6d:f7:e0:53:58:56:35:ea:e4:58:1b:
86:91:1f:8f:6c:97:da:46:c4:67:cc:81:2e:f2:db:c9:73:0e:
6d:03:f3:0d:b7:c7:75:77:26:6c:35:cd:15:b0:0c:2c:0b:2f:
60:22:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:11:48 2026 by rpki-client