Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: P/X+TeIGEt1WexskId7ZLHm/44cs5z94bqByspecce0=
Subject key identifier: 0F:83:80:5F:C8:7A:E9:17:85:EF:E9:61:8C:06:0D:2E:9F:6B:CE:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67E245C295F3A5986764A47631DCF97BCAE984EB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 10 Jun 2026 11:25:07 +0000
ROA not before: Wed 10 Jun 2026 11:20:07 +0000
ROA not after: Wed 09 Jun 2027 11:25:07 +0000
asID: 395793
IP address blocks: 145.79.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e2:45:c2:95:f3:a5:98:67:64:a4:76:31:dc:f9:7b:ca:e9:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:07 2026 GMT
Not After : Jun 9 11:25:07 2027 GMT
Subject: CN=0F83805FC87AE91785EFE9618C060D2E9F6BCE6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:e5:08:f5:57:7a:e0:7b:f0:27:5e:64:d4:
10:5d:0b:17:2f:e9:ea:6e:d5:95:39:65:cd:b0:5a:
d3:13:29:b2:e7:2f:fa:d4:39:70:93:46:5b:ce:5f:
af:97:2c:e3:83:2c:ea:b4:44:09:4a:db:74:5f:51:
0a:b9:3b:6c:f0:5f:e9:e8:e6:62:03:f9:be:99:3f:
62:21:27:11:a4:13:2f:19:40:c1:67:7d:39:e1:30:
3c:df:70:9c:17:9f:15:24:5f:dc:71:6e:85:2d:b2:
3f:e2:5b:0a:78:4a:17:da:32:ef:2f:bf:56:22:10:
9a:86:e1:90:93:28:44:c9:e0:c0:cb:e8:63:6f:38:
69:7b:37:5a:46:79:ef:4b:68:7d:b1:42:ed:f5:09:
22:96:02:43:f0:fd:75:cf:98:d5:7f:16:4e:ef:d6:
24:41:7c:7b:ff:4e:71:f5:4b:a0:c4:8c:cf:d0:7c:
5f:c6:12:a9:01:72:14:39:74:df:14:df:58:72:77:
65:03:d7:69:ad:5d:00:de:e8:52:22:cf:0c:fa:46:
61:da:54:df:33:40:29:12:3f:08:7d:45:ef:83:a0:
ee:e3:97:a1:d7:5f:5f:ec:2d:f8:53:8f:4d:7b:38:
c5:cb:fa:80:75:17:9a:85:00:50:3b:31:9a:06:87:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:80:5F:C8:7A:E9:17:85:EF:E9:61:8C:06:0D:2E:9F:6B:CE:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130352e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d6:e7:8a:c1:86:c9:39:93:7e:31:d4:02:a0:f1:80:a8:4f:
4d:2a:68:ae:3f:4c:38:68:a7:b5:5a:7a:d3:d3:53:af:68:b7:
f9:b4:0f:32:ef:74:09:26:77:ad:9a:5a:f9:77:df:93:22:52:
c9:e3:cf:37:93:ce:13:bf:90:b1:77:75:0a:44:6f:14:ae:44:
67:63:f5:81:96:78:49:3f:c9:0b:f8:16:47:d4:62:ef:97:2d:
6c:4f:00:d7:84:6d:c4:d2:f9:3d:3c:4b:79:9c:1c:87:19:ec:
bc:e5:8b:fd:ce:99:8b:29:c7:5c:d1:41:03:f7:37:c6:7c:05:
c7:a2:e9:a2:d6:4a:c8:8e:ab:62:f5:be:eb:58:b6:a4:bd:40:
31:1a:52:35:89:ef:5d:4a:4e:51:04:3f:03:3d:a6:32:01:96:
af:1c:df:37:fc:ca:18:7e:59:ab:e4:36:61:15:c0:9c:0f:24:
62:d8:36:72:7f:72:31:65:93:ee:47:34:72:ac:d9:66:93:77:
a3:18:10:eb:09:43:05:3e:aa:a3:46:ed:e6:b8:7e:ac:96:8f:
2f:95:b7:2d:04:51:d6:5b:4d:29:bf:78:62:31:f0:81:ee:eb:
23:e3:ed:42:1d:20:8a:9d:ff:98:66:44:53:15:6c:35:e3:5d:
cd:d0:13:e1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZ+JFwpXzpZhnZKR2Mdz5e8rphOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTAxMTIwMDdaFw0yNzA2MDkxMTI1MDdaMDMxMTAvBgNV
BAMTKDBGODM4MDVGQzg3QUU5MTc4NUVGRTk2MThDMDYwRDJFOUY2QkNFNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWeUI9Vd64HvwJ15k1BBdCxcv
6epu1ZU5Zc2wWtMTKbLnL/rUOXCTRlvOX6+XLOODLOq0RAlK23RfUQq5O2zwX+no
5mID+b6ZP2IhJxGkEy8ZQMFnfTnhMDzfcJwXnxUkX9xxboUtsj/iWwp4ShfaMu8v
v1YiEJqG4ZCTKETJ4MDL6GNvOGl7N1pGee9LaH2xQu31CSKWAkPw/XXPmNV/Fk7v
1iRBfHv/TnH1S6DEjM/QfF/GEqkBchQ5dN8U31hyd2UD12mtXQDe6FIizwz6RmHa
VN8zQCkSPwh9Re+DoO7jl6HXX1/sLfhTj017OMXL+oB1F5qFAFA7MZoGh3PvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUD4OAX8h66ReF7+lhjAYNLp9rzm0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMw
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUzNzM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT2kwDQYJKoZIhvcNAQELBQADggEBAKHW54rBhsk5k34x1AKg8YCoT00qaK4/
TDhop7VaetPTU69ot/m0DzLvdAkmd62aWvl335MiUsnjzzeTzhO/kLF3dQpEbxSu
RGdj9YGWeEk/yQv4FkfUYu+XLWxPANeEbcTS+T08S3mcHIcZ7Lzli/3OmYspx1zR
QQP3N8Z8Bcei6aLWSsiOq2L1vutYtqS9QDEaUjWJ711KTlEEPwM9pjIBlq8c3zf8
yhh+WavkNmEVwJwPJGLYNnJ/cjFlk+5HNHKs2WaTd6MYEOsJQwU+qqNG7ea4fqyW
jy+Vty0EUdZbTSm/eGIx8IHu6yPj7UIdIIqd/5hmRFMVbDXjXc3QE+E=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:15 2026 by rpki-client