Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e3132352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: /PFCwLP6cdZHL8J34ohni/cwEig6umGnZolLo8fPtik=
Subject key identifier: AB:75:01:29:A4:8B:36:6A:97:A1:D0:B6:5D:74:9C:2B:9C:EB:9A:E5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76B5A5670000321A72314C9B46B465A6EEFB772E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e2032393134.roa
Signing time: Tue 15 Sep 2026 07:28:56 +0000
ROA not before: Tue 15 Sep 2026 07:23:56 +0000
ROA not after: Tue 14 Sep 2027 07:28:56 +0000
asID: 2914
IP address blocks: 145.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b5:a5:67:00:00:32:1a:72:31:4c:9b:46:b4:65:a6:ee:fb:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 15 07:23:56 2026 GMT
Not After : Sep 14 07:28:56 2027 GMT
Subject: CN=AB750129A48B366A97A1D0B65D749C2B9CEB9AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:e8:bb:c4:8a:1a:67:08:4b:72:2f:b2:7f:
27:98:d5:75:2f:dd:02:bd:08:d5:5d:60:1a:d3:50:
76:59:42:7b:61:22:e2:f7:d7:db:62:06:63:9d:49:
b8:8b:46:17:4d:af:90:a4:07:66:36:d6:67:49:72:
02:8a:77:2d:eb:88:71:f7:72:fe:97:d9:64:46:49:
96:da:04:7f:60:6b:54:24:30:b6:fc:2f:3e:14:1e:
91:d5:7f:61:64:d0:e8:1a:f0:ce:5c:5a:64:49:61:
7c:bf:7a:d1:f0:9c:26:00:11:53:df:77:93:83:9b:
91:c5:9b:81:9c:c7:6e:ca:be:f2:07:06:0b:62:f1:
20:ae:4f:d8:91:e4:df:cc:4b:42:2b:49:44:24:e3:
18:30:9b:95:4c:1e:27:7a:b4:af:c0:8d:d8:bc:30:
11:29:dd:40:a8:06:6c:13:d7:54:70:91:96:e8:1c:
6e:e2:6f:4f:38:33:ae:00:eb:ad:1e:3b:05:5f:9f:
91:ab:e2:9c:2c:52:c9:c5:f2:ab:c6:f0:eb:d9:e9:
d4:24:9b:ce:5a:53:96:aa:7f:e4:da:85:5f:92:3a:
4b:bb:40:29:09:88:2f:5b:3f:af:ae:8e:a1:8e:d2:
76:d0:14:48:8c:56:c0:d1:94:96:01:ce:92:16:a3:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:01:29:A4:8B:36:6A:97:A1:D0:B6:5D:74:9C:2B:9C:EB:9A:E5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:67:31:72:09:76:01:35:76:3b:12:2b:63:f6:dd:9c:c6:34:
3d:c8:c8:ca:3b:b2:a4:88:b6:72:bf:48:70:60:68:47:d5:7d:
3e:17:31:9f:c5:74:38:ec:16:e3:48:44:13:7a:1a:1e:02:b1:
fe:bc:17:fb:5d:cb:fa:c2:a7:9f:db:5c:31:9d:e4:72:1b:e2:
d0:b3:ce:98:70:6b:ad:35:a0:9c:74:93:e0:6b:d8:25:f9:32:
d4:2b:a6:6b:90:89:06:87:35:16:bf:70:b8:6a:67:f8:c5:27:
ac:97:3d:a5:07:26:e4:b7:01:5a:5b:ae:bf:69:84:1d:06:a6:
a6:a6:07:5f:09:06:d7:4a:f9:b2:f2:61:e7:9d:b1:06:4f:95:
6c:2c:45:4a:4d:b2:7c:82:83:f4:60:13:dc:15:78:f4:51:23:
87:4c:2c:be:37:c9:00:7a:3f:1e:1e:2e:e4:3b:13:0a:30:dc:
e9:3a:3e:98:c0:d6:18:f1:ad:0a:a8:40:5d:75:03:45:fd:d0:
2e:28:ff:2c:60:a7:b6:bf:72:ae:51:6a:73:45:e1:9d:a5:93:
8e:6e:29:64:bc:51:77:c2:cc:14:65:f3:d4:30:14:cb:3d:b1:
93:2c:6f:0e:3e:bc:64:34:4a:2f:54:85:e4:eb:cf:8a:fa:7c:
2a:6c:5c:4e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdrWlZwAAMhpyMUybRrRlpu77dy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTUwNzIzNTZaFw0yNzA5MTQwNzI4NTZaMDMxMTAvBgNV
BAMTKEFCNzUwMTI5QTQ4QjM2NkE5N0ExRDBCNjVENzQ5QzJCOUNFQjlBRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpei7xIoaZwhLci+yfyeY1XUv
3QK9CNVdYBrTUHZZQnthIuL319tiBmOdSbiLRhdNr5CkB2Y21mdJcgKKdy3riHH3
cv6X2WRGSZbaBH9ga1QkMLb8Lz4UHpHVf2Fk0Oga8M5cWmRJYXy/etHwnCYAEVPf
d5ODm5HFm4Gcx27KvvIHBgti8SCuT9iR5N/MS0IrSUQk4xgwm5VMHid6tK/Ajdi8
MBEp3UCoBmwT11RwkZboHG7ib084M64A660eOwVfn5Gr4pwsUsnF8qvG8OvZ6dQk
m85aU5aqf+TahV+SOku7QCkJiC9bP6+ujqGO0nbQFEiMVsDRlJYBzpIWo3HvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUq3UBKaSLNmqXodC2XXScK5zrmuUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMy
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJFP
fTANBgkqhkiG9w0BAQsFAAOCAQEAO2cxcgl2ATV2OxIrY/bdnMY0PcjIyjuypIi2
cr9IcGBoR9V9Phcxn8V0OOwW40hEE3oaHgKx/rwX+13L+sKnn9tcMZ3kchvi0LPO
mHBrrTWgnHST4GvYJfky1Cuma5CJBoc1Fr9wuGpn+MUnrJc9pQcm5LcBWluuv2mE
HQampqYHXwkG10r5svJh552xBk+VbCxFSk2yfIKD9GAT3BV49FEjh0wsvjfJAHo/
Hh4u5DsTCjDc6To+mMDWGPGtCqhAXXUDRf3QLij/LGCntr9yrlFqc0XhnaWTjm4p
ZLxRd8LMFGXz1DAUyz2xkyxvDj68ZDRKL1SF5OvPivp8KmxcTg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:53:53 2026 by rpki-client