Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: ezfaMBdMnfVyibgcwOMvAwkDeck+Xwm+2oA2numpUfM=
Subject key identifier: 6C:89:B3:90:4B:D5:51:64:92:98:C1:C3:66:D3:B6:E9:A1:B1:30:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2638B6A084445AE9B241D5768E0044856D65AAA7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 04 Aug 2026 14:27:36 +0000
ROA not before: Tue 04 Aug 2026 14:22:36 +0000
ROA not after: Tue 03 Aug 2027 14:27:36 +0000
asID: 395793
IP address blocks: 145.79.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:38:b6:a0:84:44:5a:e9:b2:41:d5:76:8e:00:44:85:6d:65:aa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 4 14:22:36 2026 GMT
Not After : Aug 3 14:27:36 2027 GMT
Subject: CN=6C89B3904BD551649298C1C366D3B6E9A1B130FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:0b:a8:dc:7b:dd:5e:f1:be:53:37:7d:62:
36:bd:08:13:93:20:31:bd:21:13:07:be:5e:cd:59:
b9:96:29:74:4f:5b:76:13:df:a7:7b:80:7d:c3:8a:
4e:93:5e:84:4f:97:e5:8e:19:25:f2:53:d1:b3:62:
93:26:ce:23:b0:9f:c6:6e:fd:d3:5d:ce:ef:a8:38:
fc:f0:06:21:6a:27:8a:2f:58:fb:f9:0c:b6:5c:e0:
0f:f2:5f:a0:e6:40:cd:81:f2:a0:ac:3f:cd:51:2d:
d2:c9:d6:de:4e:c3:58:07:fc:5c:bf:62:0e:d6:f3:
65:01:00:aa:0f:b0:7f:4c:5a:ea:4f:6b:e8:ce:a9:
b6:1e:70:9e:c1:a1:df:fa:8c:b9:82:d6:0a:90:cb:
03:bc:46:e7:f3:53:92:d1:e4:bc:7b:7e:b3:ad:46:
3b:90:97:49:d3:dd:03:e7:e3:9d:49:39:6b:e5:91:
6c:85:78:de:f1:6f:0a:fe:e8:56:b0:59:71:4d:50:
02:34:bc:44:60:4e:c6:0f:52:ce:18:ea:4f:52:d2:
a5:e1:73:a5:bd:dd:97:c4:a9:9c:de:06:df:8a:60:
2a:8f:36:ee:8a:fa:ca:cf:dc:8d:b2:63:0c:80:62:
15:58:f2:a0:b5:31:e4:6e:e9:49:85:c3:f7:98:92:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:B3:90:4B:D5:51:64:92:98:C1:C3:66:D3:B6:E9:A1:B1:30:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131392e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:06:f0:47:44:2a:de:34:9b:d4:cc:59:7a:72:1b:69:60:71:
da:26:9f:fb:63:86:80:3e:e9:cb:bd:94:d5:02:02:0f:c3:6d:
70:b3:d7:82:43:bf:c5:46:9d:73:6c:34:77:e9:e3:f6:42:c0:
7e:c3:42:96:66:e3:c8:6d:d6:c7:3b:1e:6f:9c:97:cb:94:85:
0e:da:f4:cb:05:4b:1a:a6:25:32:71:31:0b:33:b0:b7:9b:5f:
43:0a:99:1c:de:53:a3:d4:d4:57:3c:b4:54:36:e7:3e:12:25:
c7:6d:03:36:49:14:d1:0e:42:f1:26:c8:ab:3a:c3:35:e1:5e:
0e:a3:78:51:00:46:fc:2d:07:a8:d9:8b:f3:c1:68:ee:dd:41:
ef:c2:78:80:1f:2e:e5:d0:50:aa:63:6f:00:b4:b7:73:ec:7c:
86:7b:c5:8d:66:75:12:2c:23:de:e6:ee:7c:ec:bd:bf:3f:7e:
21:dd:3a:78:fa:9c:78:cc:81:b2:25:b7:bb:3a:e1:fc:2e:88:
26:92:c1:a8:8b:95:b0:b7:f0:40:11:fc:b9:fd:54:70:a9:f0:
26:83:03:98:b8:ad:fb:ec:0f:16:23:fb:6e:bf:77:de:fb:f5:
45:f0:ab:c9:77:7e:c5:c1:4c:51:30:6c:a4:33:f9:5a:18:19:
20:dc:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:27:10 2026 by rpki-client