Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa
File: 3134352e37392e3134312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yc2fKyG2Rhm6UqBl00SqJXJZp8c/dGar4C2KVcM+ahE=
Subject key identifier: 0E:F4:3D:82:D1:A9:A1:97:F9:EF:16:27:27:29:B2:4E:C6:40:0F:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 191FA8F3FAA431330B50E824B48653312674C3DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa
Signing time: Mon 16 Feb 2026 18:21:24 +0000
ROA not before: Mon 16 Feb 2026 18:16:24 +0000
ROA not after: Mon 15 Feb 2027 18:21:24 +0000
asID: 834
IP address blocks: 145.79.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1f:a8:f3:fa:a4:31:33:0b:50:e8:24:b4:86:53:31:26:74:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 16 18:16:24 2026 GMT
Not After : Feb 15 18:21:24 2027 GMT
Subject: CN=0EF43D82D1A9A197F9EF16272729B24EC6400F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:79:b6:96:38:f5:93:42:c8:c5:5c:88:9d:
91:b8:d6:dd:98:b1:67:ef:4d:d9:09:5b:d7:bc:74:
7f:c2:a2:f5:ab:db:ca:8a:fc:e4:bf:5c:44:14:f9:
23:3c:2c:8b:b8:92:f7:3d:ee:a7:a1:a5:04:cb:84:
12:36:5d:df:d4:28:1a:5b:85:08:41:8c:00:fb:51:
df:c9:c2:46:5f:39:62:4f:89:df:98:66:5d:5a:19:
1b:f8:90:eb:a8:d5:bf:da:3e:ee:b8:ed:58:b8:28:
73:51:37:a1:2e:ae:40:f1:9f:bf:2f:ac:91:1d:3d:
8e:40:4c:a5:e0:55:c1:b9:d4:9e:ba:8e:a8:a5:2d:
ec:d4:6c:2b:d9:20:bb:5a:6b:05:fe:71:43:e8:71:
a6:02:00:b5:79:25:55:f9:78:a4:0b:04:b3:e7:d1:
99:42:5a:1b:77:de:eb:3d:22:c9:15:61:ad:90:18:
cf:c2:a5:3a:81:6e:e8:97:0b:af:32:b1:67:f3:41:
12:ad:42:ae:52:5a:0f:ee:9b:03:2a:64:a3:e4:fc:
6d:7f:2e:c2:a8:0d:7b:d9:f3:84:76:1a:53:b0:8b:
48:bd:37:e1:bb:a2:be:42:63:e4:56:ae:f1:c7:df:
8c:de:e3:43:86:bf:61:af:6d:45:d9:a5:dd:17:b5:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:3D:82:D1:A9:A1:97:F9:EF:16:27:27:29:B2:4E:C6:40:0F:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.141.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f6:84:cf:2a:7d:5d:13:61:da:ff:34:43:c3:6b:40:88:6d:
7b:50:ad:42:49:88:96:e0:89:1b:12:33:aa:96:19:7e:61:b8:
96:38:ae:91:e0:74:c0:e9:d4:b5:20:fa:98:f1:2a:d5:e6:d3:
6b:74:11:1c:7e:8f:11:3b:d7:f2:39:d1:7c:af:08:47:9c:f1:
3a:1f:17:bc:76:4e:a0:33:ac:63:4f:59:47:2f:c7:31:26:75:
3f:0f:bf:63:fa:13:3c:a5:4e:17:05:9b:90:52:70:17:4f:55:
82:93:b1:3d:25:55:86:d2:70:ee:fe:97:c5:57:5b:74:1b:8f:
85:1f:ab:a0:28:42:7c:9b:8b:40:f7:d6:58:6d:17:02:d5:6a:
7d:b0:5f:a1:bd:08:1f:a1:02:c2:d1:43:9d:68:a9:19:38:ff:
7f:9c:88:79:54:92:9b:b2:2d:a6:39:80:38:3a:3a:01:a6:11:
a7:96:1e:e7:14:cc:b7:5c:9c:c6:9a:69:4c:91:f0:c0:2d:01:
7a:e2:bd:cc:f9:5a:d7:a3:53:c6:8c:67:87:44:f1:51:ab:47:
74:f8:3d:70:12:ae:ab:1f:1a:f9:d4:ed:da:60:41:b8:46:a0:
f9:ad:f9:21:e0:cb:1a:17:e5:18:42:70:0a:1f:b7:58:f5:9c:
cd:55:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:11 2026 by rpki-client