Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: M+JaOxMM3K7uG+dzDPejVOd3PwTvce/WIfv01r15p6E=
Subject key identifier: 51:9B:F5:68:56:91:99:08:0F:42:4C:EC:DC:8D:57:AA:46:BE:08:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 052E54F174A1431CDF23160ED53382AE08F86DE4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 04 Aug 2026 14:27:37 +0000
ROA not before: Tue 04 Aug 2026 14:22:37 +0000
ROA not after: Tue 03 Aug 2027 14:27:37 +0000
asID: 395793
IP address blocks: 145.79.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2e:54:f1:74:a1:43:1c:df:23:16:0e:d5:33:82:ae:08:f8:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 4 14:22:37 2026 GMT
Not After : Aug 3 14:27:37 2027 GMT
Subject: CN=519BF568569199080F424CECDC8D57AA46BE088F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:88:e9:a3:dd:8e:2f:52:02:c2:00:b5:15:
0f:78:34:6f:59:e3:bd:2a:62:cc:77:c8:fc:a9:f7:
94:0e:17:06:3b:a4:ec:ad:a6:ca:0b:40:53:90:69:
61:09:c0:51:d8:8b:f7:f5:3a:08:83:fe:64:1f:97:
36:05:bb:67:ea:48:33:d0:ce:37:94:01:c4:d6:7d:
e5:12:d9:ad:06:3b:9c:f0:12:8e:85:eb:64:78:bf:
93:9c:36:6c:1c:9f:d1:86:5a:87:5d:49:d3:4a:9f:
bb:66:40:c0:9e:b7:bb:d0:98:2b:80:4a:87:91:9c:
f0:ad:60:ae:e9:2d:98:87:44:4e:72:34:23:46:d0:
60:72:00:4f:27:95:5d:90:4a:4f:45:71:66:c4:b7:
e9:4c:4a:98:d7:73:7c:63:2c:22:81:48:03:0a:53:
0e:bb:9c:68:8b:5e:25:06:9c:58:7d:39:cd:0d:08:
cf:40:50:84:74:94:39:71:b2:1c:b7:7c:3e:84:38:
4f:f6:7f:d6:bf:ee:65:cf:1b:f5:d2:31:55:88:b6:
34:6f:11:25:10:09:76:6e:22:d0:05:d2:34:02:bb:
40:37:37:aa:ce:5b:8f:63:04:6d:db:98:7a:1f:2c:
2b:3c:7c:a8:66:14:8b:a7:c0:cb:02:f4:11:84:de:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:F5:68:56:91:99:08:0F:42:4C:EC:DC:8D:57:AA:46:BE:08:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131352e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.115.0/24
Signature Algorithm: sha256WithRSAEncryption
45:70:ee:23:7c:ba:4a:63:86:ac:5e:02:24:7c:4a:26:fc:e3:
8d:a5:e8:25:91:4b:9c:37:73:ad:57:a2:8f:94:1b:37:01:b4:
cf:7b:2e:2a:9f:fe:53:69:f1:96:1e:c1:18:d8:14:c9:37:48:
89:8f:54:f1:7e:42:e6:6c:82:9c:a1:39:7d:20:4b:44:62:cf:
9a:b9:cb:0f:06:2b:dd:cc:0f:d7:64:29:88:fc:96:7b:3a:8b:
9c:35:64:00:e3:0c:f2:09:74:99:04:39:f2:72:fa:d9:87:fa:
d5:69:d5:1b:13:c8:38:8a:ed:81:00:0b:3b:58:ee:2c:3c:53:
bb:0d:ef:f9:1c:37:3d:8e:76:59:5a:e2:ed:c8:8d:5c:d1:85:
73:2e:c0:da:ed:14:e6:3c:79:65:f9:58:f1:4b:ad:ae:a9:7f:
ac:35:63:21:0e:cf:6e:98:73:f4:96:99:40:67:0f:3d:d7:9d:
74:93:57:2b:39:2e:b5:e2:e5:df:c0:94:3f:e9:0b:9d:d6:56:
72:04:7f:cc:40:16:16:49:10:7f:3a:bc:c0:77:a7:aa:cb:74:
0a:b3:16:db:6e:fe:00:22:54:c6:33:d4:55:67:ea:20:79:d8:
77:08:b0:a9:be:38:b0:c7:81:75:b9:8c:e8:bc:eb:fb:9e:da:
6c:59:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:50:31 2026 by rpki-client