Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: V3kfvmg3jJHnXMFU2CxxdnGj5y5XdsUtJAlVo9OlbPU=
Subject key identifier: E2:CC:2F:EA:0E:86:0B:52:F0:29:62:6C:04:11:26:51:D3:0C:E2:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20E268C87A0B76F2866AB49A159458000D87755E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 04 Aug 2026 14:27:36 +0000
ROA not before: Tue 04 Aug 2026 14:22:36 +0000
ROA not after: Tue 03 Aug 2027 14:27:36 +0000
asID: 395793
IP address blocks: 145.79.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e2:68:c8:7a:0b:76:f2:86:6a:b4:9a:15:94:58:00:0d:87:75:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 4 14:22:36 2026 GMT
Not After : Aug 3 14:27:36 2027 GMT
Subject: CN=E2CC2FEA0E860B52F029626C04112651D30CE22B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:ab:94:46:28:14:b8:46:81:c6:ff:79:8d:
f8:dc:cb:e8:02:76:f2:f7:01:fa:78:36:a7:9f:54:
ae:0e:c9:1c:ce:1e:6a:f3:0d:c3:21:28:06:09:2d:
6e:72:8d:0d:51:bd:da:79:0e:36:52:7d:46:69:74:
ea:94:4c:62:b5:6e:31:b4:7d:52:0e:1a:a0:45:f6:
0f:c1:70:46:77:79:52:1b:7c:d7:51:6b:d7:1a:df:
b1:20:93:0c:fd:e7:58:fb:71:8e:c2:5a:2e:f3:03:
c1:37:4c:69:bb:a2:9c:d6:8a:c1:ac:d8:3e:b1:aa:
cc:56:ac:94:09:49:30:d9:83:ac:9b:5b:8f:ed:f3:
f9:71:a5:b4:c5:4b:e9:bd:fd:48:dd:60:3b:4a:de:
52:e3:2a:6a:a0:17:f3:ef:1e:26:c5:12:a0:cc:b2:
ef:a7:c9:22:fd:74:52:80:2e:57:66:35:04:04:04:
e0:05:a1:1c:4a:5f:c8:35:ca:ab:4f:7d:2b:d3:8f:
79:2e:93:9f:f3:78:13:cc:20:71:5a:0d:3b:44:77:
8c:d2:66:c3:c3:20:f4:a6:a6:1c:8e:76:13:b3:6c:
fd:01:e5:b3:08:be:b4:8f:50:7e:60:6f:8c:99:20:
59:80:fe:9a:7e:1d:a2:ef:4c:7a:8e:01:59:a8:b8:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:2F:EA:0E:86:0B:52:F0:29:62:6C:04:11:26:51:D3:0C:E2:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131312e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.111.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9a:7b:bf:b6:0b:cf:73:20:41:d8:5c:f2:14:91:ea:73:14:
dc:8d:a9:9b:e9:c9:32:34:24:c6:bc:02:38:3d:24:89:e6:bd:
12:cf:6b:24:9d:87:d2:b2:4a:1d:45:b8:e6:38:c7:15:0a:6a:
a9:3c:c9:cf:98:cf:c5:b2:c2:88:a3:8c:9c:83:79:ed:52:e1:
8a:a4:a7:c2:aa:dc:89:04:bf:77:d4:42:62:40:02:8f:05:32:
e4:9c:93:6c:36:d1:fd:10:b1:21:9d:29:7b:61:06:29:95:8d:
a5:29:cd:ca:71:d1:6d:7b:53:e9:a7:b9:24:88:e9:6c:bc:44:
c3:fe:ff:86:42:f3:5c:b1:a5:03:09:16:a0:94:25:5d:fa:c1:
e4:c8:a6:a8:7a:2a:f0:e6:3f:c8:ec:72:12:8e:4f:9e:da:b7:
db:a6:ee:c2:6a:9d:4f:43:7a:5b:79:63:40:10:7d:91:f6:9a:
f3:d4:7e:2f:eb:94:2e:3b:18:ee:f2:ed:c6:c0:d1:32:94:38:
69:db:34:75:57:e8:f3:a3:44:77:a8:73:db:5c:48:cd:79:dd:
6c:79:92:34:98:9b:a2:16:25:12:b7:6d:9c:10:71:23:7f:25:
99:9d:20:8b:d7:17:e1:4e:ca:e7:3b:72:fc:d7:94:db:d5:90:
b5:8a:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:15:31 2026 by rpki-client