Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e3132352e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: Hz49HyBscaR1VwjJdLqZZJpgjG75NIpVmgvhOqbedFc=
Subject key identifier: 05:31:91:C6:9F:D9:A0:6F:75:1E:48:19:71:A5:30:3D:20:98:ED:63
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0EE919460FEB9DEBC360EE95123FE9449F10288F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e203332303433.roa
Signing time: Wed 10 Jun 2026 11:25:05 +0000
ROA not before: Wed 10 Jun 2026 11:20:05 +0000
ROA not after: Wed 09 Jun 2027 11:25:05 +0000
asID: 32043
IP address blocks: 145.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e9:19:46:0f:eb:9d:eb:c3:60:ee:95:12:3f:e9:44:9f:10:28:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:05 2026 GMT
Not After : Jun 9 11:25:05 2027 GMT
Subject: CN=053191C69FD9A06F751E481971A5303D2098ED63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:1b:5e:7c:ba:95:83:bb:27:f7:db:8b:42:
dc:63:16:ab:b3:1d:18:ad:81:47:f3:f8:17:ed:88:
ad:f0:b3:6a:59:37:d4:10:39:ec:39:c3:60:2d:28:
9f:9d:c7:79:26:6c:92:9f:ce:f0:f3:ca:19:a0:85:
96:7d:01:0d:08:55:a5:aa:ab:a9:1d:c9:cb:52:45:
b6:94:a0:2d:0f:f0:e7:35:3f:1b:0c:1c:d1:f3:f0:
63:bf:cc:bf:e3:5f:01:ed:1b:fd:17:bb:e6:f5:4c:
68:29:a7:ca:75:f9:c7:57:17:9a:0e:f5:97:a5:e8:
73:5b:e7:f8:6a:18:af:40:14:d6:00:23:20:a7:d7:
5b:1f:42:5a:8c:95:24:98:e6:0f:7a:ab:48:8e:a2:
89:fd:62:b1:1d:61:de:39:d8:fe:87:4c:03:2a:cb:
e1:ea:83:6d:7c:d4:91:6e:11:08:f8:ba:7b:9d:17:
a1:c4:4e:b0:90:b8:52:10:c9:f2:19:f7:01:6f:12:
9d:5f:5f:23:7b:14:ae:39:aa:e5:ad:d7:26:47:93:
d3:aa:0a:7a:4a:89:bf:72:e8:b2:35:c5:95:7b:58:
bd:0f:51:43:82:28:b2:70:a8:50:b2:8e:51:6d:18:
21:ed:77:45:77:e3:26:2c:97:35:47:42:9a:fa:33:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:31:91:C6:9F:D9:A0:6F:75:1E:48:19:71:A5:30:3D:20:98:ED:63
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132352e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f0:8f:11:09:37:6f:bb:34:d7:d2:3f:d8:d6:45:6c:6b:ad:
75:05:fc:0b:d1:af:ef:36:2d:a1:95:2c:69:ea:72:12:32:02:
73:58:b6:b5:d3:a9:3f:a6:8f:37:22:fe:26:83:74:02:c0:e4:
d1:c8:cc:d3:6d:a2:a2:65:ae:41:11:7c:24:c8:16:f1:08:6c:
7c:f5:c4:76:8b:8e:86:e0:54:37:1d:b5:d9:db:29:c5:97:a3:
af:d7:00:8b:1d:e1:72:90:c5:e3:46:f3:c1:67:04:8c:9b:7f:
b1:ed:bb:43:e6:6b:4a:e2:c9:10:9d:db:a0:a1:1f:5b:82:8e:
6d:f7:20:40:12:e5:a5:f0:d3:5e:e0:4f:7d:bd:6e:0a:ce:66:
ca:06:fc:c4:45:c9:ed:59:01:da:61:a2:de:9d:29:ed:29:7e:
2b:98:08:84:c6:ca:c1:f0:be:48:ad:9a:d2:ae:57:4f:a9:a9:
d2:74:53:e9:68:b6:72:73:e7:ea:50:b3:56:4e:7b:cd:57:5b:
79:ed:e0:56:d0:fc:b5:eb:0e:f7:d6:80:f5:33:61:9b:ec:63:
ef:77:8d:5c:e0:63:bc:56:54:04:f0:a4:21:9e:fc:6d:32:90:
0c:25:df:ee:16:37:85:6f:3b:04:b0:a6:0e:cc:e4:d6:75:36:
c8:a6:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:31 2026 by rpki-client