Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130362e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3130362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: uUGh3wjXo8LtfhuvmVYaMDJIzt/WF4CG+NdvsLPFjoQ=
Subject key identifier: 59:28:61:BB:AB:32:54:5C:B4:8B:2B:EF:72:B4:16:6B:AA:44:2C:D2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 412E00D5593DB362D0483422F8CFD5A532D2F533
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130362e302f32342d3234203d3e2032393134.roa
Signing time: Tue 15 Sep 2026 07:28:56 +0000
ROA not before: Tue 15 Sep 2026 07:23:56 +0000
ROA not after: Tue 14 Sep 2027 07:28:56 +0000
asID: 2914
IP address blocks: 145.79.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2e:00:d5:59:3d:b3:62:d0:48:34:22:f8:cf:d5:a5:32:d2:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 15 07:23:56 2026 GMT
Not After : Sep 14 07:28:56 2027 GMT
Subject: CN=592861BBAB32545CB48B2BEF72B4166BAA442CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:81:44:f1:93:88:1c:64:f4:f3:00:68:a9:
75:99:95:4b:4d:be:fa:2e:35:1a:8d:6b:63:71:14:
ab:f5:42:4e:9c:cc:22:c4:d0:7a:23:7a:67:36:31:
a5:57:98:5c:ce:c1:fe:cc:c2:ba:0b:82:76:c4:d7:
6c:0e:26:3d:cf:3f:04:c0:1c:40:f7:d7:b0:4a:61:
4b:0a:f7:89:2b:be:0a:91:5f:24:e4:af:0f:0d:b8:
33:e8:c5:1b:c0:8c:8b:98:8e:ec:57:9f:18:99:73:
d0:45:87:cf:0e:d8:4f:06:56:de:16:36:a6:b9:cf:
20:e9:b1:b6:95:82:ad:c3:24:46:14:43:6c:71:8d:
18:cf:f5:09:2c:b7:ad:b1:9a:2d:38:fc:b9:59:9f:
3a:5f:de:34:db:0d:97:3c:4e:6d:90:3f:3a:72:11:
0e:da:9f:21:b0:e0:4a:06:c7:77:14:ad:e3:02:35:
7e:12:8e:20:69:db:9a:e2:6b:51:d4:a3:d1:68:9a:
51:f6:b9:27:95:77:a6:79:98:32:a1:9f:ac:6d:1e:
e5:de:ee:ed:ce:3c:84:30:3d:ff:46:92:52:16:88:
0c:6c:c2:a8:f2:d8:12:20:c7:cf:ee:a4:44:e5:53:
82:8d:e3:50:4d:55:e7:4f:6d:ab:f1:93:c4:90:78:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:61:BB:AB:32:54:5C:B4:8B:2B:EF:72:B4:16:6B:AA:44:2C:D2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3130362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.106.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a6:15:26:39:57:b5:d9:b6:2f:38:10:16:b2:e5:40:5b:50:
57:d1:f6:c4:4c:51:2c:d1:a5:b1:f6:c8:3d:48:2c:b3:d8:e0:
e1:f9:cf:33:81:48:05:47:49:a9:f7:2a:55:6c:7e:00:1f:2b:
9a:59:42:d1:41:fa:36:7b:df:94:e5:88:ef:7b:f9:8f:b7:45:
cc:75:4d:32:3e:8f:05:8c:14:86:40:bf:83:01:48:79:60:ba:
9c:26:16:97:2a:11:1b:1c:c9:a2:40:ce:df:59:80:59:91:62:
be:f3:08:36:9f:cc:fe:aa:66:08:f7:9a:5f:0c:1b:92:16:95:
99:78:ba:6e:dc:5c:a6:27:40:7c:a5:f5:f4:5f:a9:a2:5c:ef:
cc:53:53:93:68:1d:87:8b:f7:9e:13:69:db:7c:92:62:8f:4a:
3d:93:07:b7:9b:da:cf:88:de:e6:8c:fd:14:eb:bf:79:d9:b5:
82:9d:85:96:ce:6b:c9:7c:11:f6:76:8c:f9:65:35:31:f3:d4:
30:56:f0:90:aa:5f:e7:68:1f:b3:f9:ee:03:eb:91:1f:43:e3:
c4:76:ed:96:ec:78:c6:07:2a:84:af:8f:39:fc:08:6b:77:3c:
c2:60:0e:fa:cd:4f:33:72:74:d0:91:8e:0f:f3:08:20:9e:63:
a3:68:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:23 2026 by rpki-client