Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e20323134303235.roa
File: 3134352e37392e3133312e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: QmHDgni/BlcS+7pdtepKUWvBcC/MzUvyZax+f8QWfrM=
Subject key identifier: 4F:8B:7D:BC:9B:2A:3D:B7:80:AD:58:D3:F7:56:D9:D4:A2:75:AD:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7FC8D34BD83D08366F4EC17AC8A6EE341F4FD141
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e20323134303235.roa
Signing time: Fri 06 Feb 2026 11:25:08 +0000
ROA not before: Fri 06 Feb 2026 11:20:08 +0000
ROA not after: Fri 05 Feb 2027 11:25:08 +0000
asID: 214025
IP address blocks: 145.79.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c8:d3:4b:d8:3d:08:36:6f:4e:c1:7a:c8:a6:ee:34:1f:4f:d1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 6 11:20:08 2026 GMT
Not After : Feb 5 11:25:08 2027 GMT
Subject: CN=4F8B7DBC9B2A3DB780AD58D3F756D9D4A275AD43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:c9:4f:da:15:8e:c5:fb:e9:c9:72:3b:6d:
72:b1:04:8b:3d:73:66:5c:b8:d2:23:cc:d6:0c:6d:
be:71:dc:91:e4:53:f7:0e:f8:66:65:8c:bf:cc:95:
67:f3:aa:a1:b7:73:6e:3e:d5:65:81:7a:12:30:23:
77:1c:17:00:e3:10:89:37:b2:6e:bf:1c:17:74:05:
a4:19:fb:3d:1f:7f:9c:c6:83:e8:cf:99:f2:18:49:
75:c7:fb:8c:ef:59:18:cd:e7:af:d0:2f:95:b5:62:
ff:52:33:e1:0b:b1:fe:41:41:d8:7f:02:91:7f:10:
cf:53:32:6a:c7:4c:cc:52:95:6c:b4:66:7d:84:33:
d8:dc:d0:ef:d1:71:80:1d:36:ee:19:55:e6:bb:2a:
6a:78:5b:83:87:4a:2e:cb:55:ac:bb:0d:6b:5b:49:
df:27:23:df:ac:c2:10:98:25:e0:5f:4d:3c:08:37:
f0:67:77:4c:c5:1b:8b:14:43:be:9f:4f:c3:3d:e4:
c4:01:58:c2:14:0e:a4:c3:c0:16:73:d8:be:ae:7e:
f0:b3:57:5d:5e:d2:ab:de:ae:2e:eb:78:8f:2a:17:
cf:bb:5a:9b:bf:61:4e:77:8d:ef:fc:61:ed:39:b3:
85:08:b6:3d:c6:ba:70:06:67:c6:74:0a:a1:63:03:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:7D:BC:9B:2A:3D:B7:80:AD:58:D3:F7:56:D9:D4:A2:75:AD:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133312e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:28:1f:b3:06:4c:b4:0d:10:40:07:2a:9f:db:30:a9:f6:08:
b6:32:63:b7:4f:68:e5:74:0d:e2:ed:b8:7a:1c:71:82:77:1a:
8e:26:1f:75:d8:dd:df:9e:e0:b9:96:16:fd:de:08:b0:2f:a3:
07:52:d6:df:f7:b2:30:d0:19:15:36:8c:14:78:5b:9c:a3:46:
0d:4a:db:6d:b8:0f:1c:9b:cf:23:a0:9e:d5:8a:7f:a0:b8:f3:
ca:1e:39:7c:48:3d:25:9d:42:51:f0:dc:3a:d0:fb:27:98:80:
60:36:2d:d8:c3:fc:31:08:41:81:4b:81:55:f7:68:6f:8b:1a:
3f:f5:6a:5c:97:d6:06:46:d3:e8:a0:71:4a:80:ea:67:5f:c3:
43:58:7c:32:8e:fe:ba:ca:75:27:ae:e4:5a:aa:c9:08:f1:d4:
23:da:c8:c2:60:c1:43:47:a1:d2:67:0c:e7:6c:b7:a4:7e:ea:
fd:df:94:80:c2:69:69:2d:d5:7e:0d:6d:48:7a:85:c5:8b:30:
58:93:02:84:d6:64:38:20:31:e2:3e:71:e4:41:59:c5:dc:3b:
a6:73:3a:76:4c:5c:0f:3f:57:68:c9:9b:76:8f:e5:3a:50:71:
72:72:34:41:75:aa:b6:9b:fe:13:9c:09:0c:d5:cf:48:e2:81:
12:04:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:04 2026 by rpki-client