Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3133342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: FUr60kiXZsbzV/EI7X1hPp6gJMe9w0uJ/fSF0znszEY=
Subject key identifier: 48:C3:50:F6:CC:40:5B:53:92:74:75:8B:A8:BD:EA:09:BC:57:F0:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 48B4D3CA2D5365EAC49E8F6B5B1165EDB9800737
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e20383334.roa
Signing time: Tue 14 Apr 2026 08:27:30 +0000
ROA not before: Tue 14 Apr 2026 08:22:30 +0000
ROA not after: Tue 13 Apr 2027 08:27:30 +0000
asID: 834
IP address blocks: 145.79.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b4:d3:ca:2d:53:65:ea:c4:9e:8f:6b:5b:11:65:ed:b9:80:07:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 14 08:22:30 2026 GMT
Not After : Apr 13 08:27:30 2027 GMT
Subject: CN=48C350F6CC405B539274758BA8BDEA09BC57F07E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:e8:71:82:fb:b3:29:40:a3:6f:b8:1f:2c:
b7:c7:3c:4e:2f:e0:07:da:74:29:16:be:5d:9f:f6:
fe:54:a9:07:d0:a2:5e:1a:4c:8c:4c:d9:09:41:bf:
4d:75:73:df:ea:31:67:85:a9:46:8b:30:2d:7f:ca:
89:88:ec:80:f2:74:fc:b5:05:9f:0f:96:b5:85:03:
2d:21:50:ef:5e:17:ce:fd:fe:5e:9a:72:94:de:1c:
2a:df:b1:f6:42:22:9e:7e:3c:7b:5b:2a:0e:d9:09:
38:71:22:1c:d5:48:8b:c3:4c:d8:cf:7d:aa:70:03:
eb:d4:c5:1d:95:29:b0:03:c7:08:ff:bb:59:eb:20:
fc:33:09:ff:62:4f:85:cd:a2:77:f8:25:91:34:b6:
44:7c:64:e7:b3:03:40:98:2c:e1:bd:1d:5f:9d:cd:
2b:a1:37:b6:db:14:fc:d7:c0:44:20:05:96:86:61:
fe:40:cd:65:42:f0:44:17:76:1e:ca:db:27:bf:29:
05:33:42:e6:6b:de:35:1d:ca:79:1c:c7:ea:bf:03:
7c:d2:e1:69:a1:eb:47:0f:7f:38:0c:66:76:a8:11:
a1:ad:ab:c0:52:8c:b4:62:fe:a7:03:51:67:3c:30:
58:d7:71:a9:df:f9:ae:97:a6:11:5b:1a:99:d1:bc:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:50:F6:CC:40:5B:53:92:74:75:8B:A8:BD:EA:09:BC:57:F0:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.134.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b7:0c:9c:e2:9e:17:84:e7:1f:5c:9c:da:42:6b:14:9b:52:
8c:ce:8d:e7:d6:8e:30:14:53:17:d3:94:4d:e0:b5:51:cd:e5:
f9:7b:9e:e0:62:0e:2a:d3:1c:aa:b1:35:b6:3f:c4:92:da:57:
3e:0e:21:7b:24:df:5e:aa:b0:83:dc:04:fc:7f:3e:68:6c:df:
f7:8e:84:5a:bb:f0:4f:17:78:52:d4:02:e3:f8:ed:0d:e4:00:
4d:57:e2:07:6b:1e:8e:88:b6:02:00:0f:e8:e6:bd:0a:15:dd:
a8:2a:b8:0e:17:02:a1:21:64:36:71:10:99:c9:f4:d5:80:39:
1f:08:58:9b:63:f5:06:e7:22:f8:6b:74:a6:66:6a:a7:6f:46:
94:b8:23:03:25:5d:16:bc:7a:e8:e7:2b:ef:9d:b7:05:9a:3a:
ea:54:2b:62:cf:8e:be:4c:72:e2:48:40:ff:e2:66:55:3e:82:
f6:7a:76:d2:93:c7:86:51:72:9a:54:87:ec:cb:5f:b8:35:d0:
80:b1:c4:23:f4:f7:c7:ba:6f:a7:0b:e3:8d:c7:27:eb:8a:23:
2f:bf:87:aa:d2:f4:6f:f3:ab:d8:b5:92:a8:5b:52:e7:fb:de:
f8:c4:a3:97:7a:e6:60:5b:68:eb:45:89:09:da:70:57:69:7b:
b6:7b:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:20 2026 by rpki-client