Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: ItwJeaOLnaC0imeX7tBc7koPbnD4UBfoWrIKw2SdH/c=
Subject key identifier: E5:48:36:DF:1A:82:2C:AA:74:3A:31:13:D8:A3:16:DD:9C:D5:00:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3466F613694EB159B96EF6B1344EA7356544EFE6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Jun 2026 20:24:55 +0000
ROA not before: Thu 04 Jun 2026 20:19:55 +0000
ROA not after: Thu 03 Jun 2027 20:24:55 +0000
asID: 214143
IP address blocks: 145.79.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:66:f6:13:69:4e:b1:59:b9:6e:f6:b1:34:4e:a7:35:65:44:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 20:19:55 2026 GMT
Not After : Jun 3 20:24:55 2027 GMT
Subject: CN=E54836DF1A822CAA743A3113D8A316DD9CD5001A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:02:b8:6a:2e:af:3b:87:fb:64:34:dd:84:
91:b7:a7:60:49:48:0d:2f:90:d7:d0:d4:40:77:19:
4e:cc:00:c6:75:d6:b4:7e:92:a2:cc:8e:ae:e8:48:
66:41:a5:95:2c:66:e1:ab:d3:57:af:0e:c5:65:a7:
7f:d1:70:bb:db:11:d5:d0:17:e6:ca:3f:a0:cd:59:
ab:62:df:00:22:12:54:c3:f8:ad:2d:f9:b6:80:1f:
97:d3:fe:c7:6f:d2:57:dd:4d:89:81:55:4f:7c:a5:
9d:46:d2:21:54:cd:85:0c:0e:da:12:b2:6b:e7:ba:
ea:f2:b0:28:7e:2c:2e:a1:ca:e6:2e:85:73:62:94:
b4:f8:26:b0:9b:e7:a3:cc:cd:cd:23:2a:31:88:cb:
0d:b4:32:f1:c4:14:e1:ed:79:4b:7f:5f:6a:a7:5a:
b4:d9:88:1b:86:60:d3:61:b2:38:5c:11:7c:ac:31:
2d:13:ca:ea:76:c8:29:14:39:05:c0:a1:26:27:b7:
22:8e:6a:43:a4:a4:96:e5:3f:5c:f0:4c:fc:f4:3a:
2a:24:92:08:48:f7:98:f0:74:47:25:71:0d:6a:8e:
97:ab:75:86:2b:19:c1:6c:8d:be:28:b9:55:51:9f:
a4:2d:a5:c2:75:0a:2b:3f:42:9a:3d:86:23:09:23:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:36:DF:1A:82:2C:AA:74:3A:31:13:D8:A3:16:DD:9C:D5:00:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3132372e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e3:b6:7b:01:f4:93:ea:6b:43:53:5f:d0:e4:fb:cd:e6:58:
bd:f1:2e:91:f5:c7:28:92:47:90:74:51:6e:0f:81:c5:a2:72:
66:6e:28:01:0a:59:39:60:b6:30:20:a6:cf:57:2d:0b:dd:a8:
b6:5a:16:ba:6e:8c:52:b5:de:0c:a0:f3:d4:b6:29:0f:dd:a5:
c2:74:ce:a7:54:6c:21:ac:f1:2f:e3:f4:ee:05:e3:bf:0c:a5:
ef:a6:b5:dc:84:39:ab:69:ec:22:09:df:9d:27:49:f5:79:fa:
6b:2d:9d:76:91:37:67:9b:03:44:5b:3d:0f:32:83:80:97:0c:
3e:71:14:33:5c:80:55:e3:dd:57:d5:b8:9b:36:c1:09:81:1a:
de:ca:14:f7:97:be:b7:2c:13:d8:2d:ac:f6:9f:d9:cd:82:ec:
41:b3:19:1f:27:f9:4f:d2:89:4c:4f:81:c2:ef:d3:bc:f6:da:
c5:10:89:db:ce:41:64:35:6d:00:0c:8c:f1:37:34:ed:63:21:
0c:9c:82:8e:f5:ab:ef:26:82:c5:81:53:45:4f:20:64:04:ac:
3b:c2:7b:e1:04:5e:62:41:da:b4:bc:a4:ee:71:00:2b:11:e7:
48:ce:5d:af:6a:e8:a8:f5:dc:a3:05:be:c8:66:75:38:ee:f2:
a9:80:95:7d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUNGb2E2lOsVm5bvaxNE6nNWVE7+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MDQyMDE5NTVaFw0yNzA2MDMyMDI0NTVaMDMxMTAvBgNV
BAMTKEU1NDgzNkRGMUE4MjJDQUE3NDNBMzExM0Q4QTMxNkREOUNENTAwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyQK4ai6vO4f7ZDTdhJG3p2BJ
SA0vkNfQ1EB3GU7MAMZ11rR+kqLMjq7oSGZBpZUsZuGr01evDsVlp3/RcLvbEdXQ
F+bKP6DNWati3wAiElTD+K0t+baAH5fT/sdv0lfdTYmBVU98pZ1G0iFUzYUMDtoS
smvnuurysCh+LC6hyuYuhXNilLT4JrCb56PMzc0jKjGIyw20MvHEFOHteUt/X2qn
WrTZiBuGYNNhsjhcEXysMS0Tyup2yCkUOQXAoSYntyKOakOkpJblP1zwTPz0Oiok
kghI95jwdEclcQ1qjperdYYrGcFsjb4ouVVRn6QtpcJ1Cis/Qpo9hiMJI7T9AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU5Ug23xqCLKp0OjET2KMW3ZzVABowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMTM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT38wDQYJKoZIhvcNAQELBQADggEBAHvjtnsB9JPqa0NTX9Dk+83mWL3xLpH1
xyiSR5B0UW4PgcWicmZuKAEKWTlgtjAgps9XLQvdqLZaFrpujFK13gyg89S2KQ/d
pcJ0zqdUbCGs8S/j9O4F478Mpe+mtdyEOatp7CIJ350nSfV5+mstnXaRN2ebA0Rb
PQ8yg4CXDD5xFDNcgFXj3VfVuJs2wQmBGt7KFPeXvrcsE9gtrPaf2c2C7EGzGR8n
+U/SiUxPgcLv07z22sUQidvOQWQ1bQAMjPE3NO1jIQycgo71q+8mgsWBU0VPIGQE
rDvCe+EEXmJB2rS8pO5xACsR50jOXa9q6Kj13KMFvshmdTju8qmAlX0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:56:59 2026 by rpki-client