Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132302e302f32342d3234203d3e20343031373833.roa
File: 3134352e37392e3132302e302f32342d3234203d3e20343031373833.roa (raw, json)
Hash identifier: 5OFdgnCpsOCNCqIhGXaHCdJP/ZotGrDA58TU4RRbGvg=
Subject key identifier: D1:5F:48:37:41:FC:78:27:8E:E0:A6:5C:A8:EA:36:B1:AB:A4:E1:67
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E1B865CD97BE3E04C9A94939C961A127A3E2485
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132302e302f32342d3234203d3e20343031373833.roa
Signing time: Thu 04 Jun 2026 20:24:56 +0000
ROA not before: Thu 04 Jun 2026 20:19:56 +0000
ROA not after: Thu 03 Jun 2027 20:24:56 +0000
asID: 401783
IP address blocks: 145.79.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:1b:86:5c:d9:7b:e3:e0:4c:9a:94:93:9c:96:1a:12:7a:3e:24:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 20:19:56 2026 GMT
Not After : Jun 3 20:24:56 2027 GMT
Subject: CN=D15F483741FC78278EE0A65CA8EA36B1ABA4E167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:0f:31:2f:43:e1:a6:69:25:42:ed:f0:03:
ee:f6:5a:46:9d:d7:83:82:45:a9:10:fe:5a:da:f4:
7b:81:5f:4a:e5:16:b6:f1:f2:6f:3b:6a:0c:8e:5a:
cc:c5:ea:04:4f:6a:11:20:a2:86:5b:a7:a1:4e:d9:
89:8d:06:a3:9e:ce:2d:7f:cc:42:a8:a1:f4:f2:ad:
20:e2:ae:80:1b:5a:85:3f:d5:4b:1f:5d:2e:21:04:
79:78:1d:aa:a0:96:e6:1f:16:85:4f:63:08:16:26:
49:9b:d9:d6:08:e9:14:e4:a8:69:fc:4a:85:ab:4e:
ce:c3:08:61:46:f3:ce:73:67:72:90:01:71:45:57:
8b:7e:7d:3b:5e:2b:dd:ba:b4:5e:d2:51:03:e6:27:
40:c3:6b:d9:aa:eb:38:77:69:75:e4:dd:b3:92:55:
cd:fe:ce:9d:75:fe:1f:08:f4:ab:fd:9f:50:4c:d7:
71:db:5a:c6:06:fe:d7:d1:fd:91:e4:cd:7c:f3:64:
52:ea:16:05:23:77:08:e8:62:fe:11:24:92:7b:f2:
c9:ad:d8:74:9b:f9:6d:32:bc:fa:c0:7e:d5:55:5b:
d1:6c:1b:ec:2c:f1:de:a7:6b:af:f6:5c:ef:7f:45:
33:68:ee:77:3a:09:46:4a:d3:9e:55:0d:df:be:02:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:48:37:41:FC:78:27:8E:E0:A6:5C:A8:EA:36:B1:AB:A4:E1:67
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132302e302f32342d3234203d3e20343031373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:43:05:a8:80:9d:fc:73:39:6e:03:c4:0f:70:fc:a5:c4:7f:
e2:59:90:b0:4a:e7:d7:39:b3:51:07:94:b1:a2:a3:4a:19:b1:
e9:ee:c0:99:5f:32:b1:e8:ad:83:48:b4:69:a7:f3:62:1a:27:
f6:52:a5:13:eb:c5:ad:25:36:8c:28:cf:ea:69:eb:cd:33:bd:
35:d2:c7:af:be:35:a4:ae:f7:89:ae:d0:f5:82:60:c6:0b:56:
ee:fe:96:f6:4c:d4:e2:3a:b8:77:4e:50:68:b2:57:cc:d8:9a:
8a:35:04:2c:8c:48:e0:b1:cd:fd:68:b9:e5:d0:6f:51:47:47:
51:a9:b1:dd:7b:16:6e:ee:aa:00:7f:54:24:4e:4a:3a:f9:a9:
1b:8d:97:82:4b:bf:0f:04:86:ac:73:9f:97:e1:4c:34:ac:56:
fa:a4:a0:09:3b:f9:ba:54:ab:4c:a6:ed:1e:10:f0:2c:fc:67:
59:07:27:f8:45:3f:0a:8a:25:b6:74:01:d3:5c:ab:16:19:9f:
6f:2e:a5:19:d7:55:aa:24:14:29:72:7f:c7:8a:1e:86:79:60:
7e:b0:ce:37:ff:9e:49:9c:53:17:95:f5:8e:3b:00:34:11:5e:
4e:f6:2d:69:39:c3:f1:23:b9:19:e9:8f:34:56:3f:55:76:31:
62:77:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:00 2026 by rpki-client