Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132342e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e3132342e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: CZ5YaCCSa7HjQ/X2ZRGxgMIl6Rqg2u6uvv5WL0D2h9Y=
Subject key identifier: 7F:63:79:53:19:90:F0:32:67:70:38:7E:AA:65:61:DD:00:31:0B:DF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 224247FE1D8B60FB8575629016865EFC8DAF9B96
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132342e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 10 Jun 2026 11:25:10 +0000
ROA not before: Wed 10 Jun 2026 11:20:10 +0000
ROA not after: Wed 09 Jun 2027 11:25:10 +0000
asID: 395793
IP address blocks: 145.79.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:42:47:fe:1d:8b:60:fb:85:75:62:90:16:86:5e:fc:8d:af:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:10 2026 GMT
Not After : Jun 9 11:25:10 2027 GMT
Subject: CN=7F6379531990F0326770387EAA6561DD00310BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:72:50:cb:8c:db:1c:f4:23:c9:3d:d0:40:
12:17:d7:8f:54:9e:6b:e7:d6:8e:a3:3c:7a:eb:f5:
03:ee:17:fd:91:4c:7b:86:3f:65:d6:70:9e:9f:9b:
c6:02:bf:71:cc:ed:c3:d1:5c:c4:5d:50:3a:4e:24:
c6:cf:66:d2:0b:3e:62:00:d9:4c:f0:0b:5b:d2:1c:
6a:e7:a5:ee:c1:65:44:52:16:34:1f:da:ba:73:0a:
d4:07:9f:bb:18:84:c2:72:46:fc:4c:83:42:0b:0e:
31:26:b8:6a:b1:ea:c0:5c:e5:59:35:d4:d8:ad:d8:
8a:33:9a:2f:de:e9:4e:32:5e:94:52:8e:22:68:70:
a5:bb:79:01:0a:7d:8d:b1:20:b8:47:76:b9:ee:92:
f3:3b:59:b6:77:86:c2:c9:79:f9:a1:32:7b:96:a0:
57:4a:8c:32:9a:e3:11:dd:a4:4e:ff:19:1c:36:23:
48:5e:55:7c:af:b3:39:d9:0f:da:d8:23:43:00:6e:
b0:62:56:1f:4f:a5:b4:da:94:3c:6b:2d:a6:3b:13:
b6:10:6b:1e:cf:5b:11:d1:8d:eb:09:84:bc:fe:ad:
34:7b:9f:16:7b:00:b6:3f:01:e8:06:dc:7b:6a:f8:
33:c5:a1:fa:0a:3d:02:76:84:e2:3d:49:fd:da:1a:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:79:53:19:90:F0:32:67:70:38:7E:AA:65:61:DD:00:31:0B:DF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132342e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:0b:1a:e0:9b:f4:e1:17:9f:b1:fd:ff:3a:48:75:60:1f:af:
06:5d:b1:bc:3f:68:97:ea:0e:c3:62:d9:88:67:bd:e2:97:5e:
d0:0e:30:7b:7a:22:2e:cc:aa:6d:90:93:31:81:89:ff:1c:f7:
0e:4d:72:09:4b:fd:f4:dc:82:31:49:d2:b1:12:7c:51:0a:38:
5b:5c:77:90:e4:f2:e8:b0:14:05:b8:82:5c:6b:7b:78:b0:65:
87:5a:6f:18:04:84:4d:cd:70:c1:84:39:23:c2:9b:ca:0f:88:
32:f5:28:47:17:e6:6c:33:52:43:64:d6:6d:62:b2:5b:6b:90:
81:9c:33:87:b9:1d:7e:ad:10:e3:b5:7b:54:f1:b8:48:73:54:
6d:a5:f5:39:09:38:d9:64:37:bc:4d:0a:e4:a7:5f:68:d0:5c:
41:94:e7:6a:b1:44:c0:db:22:47:f0:40:5f:a1:a6:29:ea:8c:
42:fe:b7:85:6c:6d:17:f3:ed:a5:b8:67:00:0c:2e:5c:7f:52:
55:0a:2b:f1:a1:a8:3c:3a:eb:80:90:50:02:bd:b8:a3:9f:d3:
9c:b1:2f:54:01:36:0e:ab:aa:0a:a9:e5:27:f4:b1:37:1e:d0:
45:8d:1a:15:bc:ff:74:4c:39:08:29:6c:c4:09:96:fb:ec:7e:
8a:d3:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:30 2026 by rpki-client