Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32332d3234203d3e20383334.roa
File: 3134352e37392e3135302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 7ilYEJCN1VaNmw8sBirjQDtLmZtdUWlY39KSE+/sKVc=
Subject key identifier: 4C:7B:1D:48:11:F9:B3:9D:F1:77:29:8B:89:40:F3:21:81:6F:EE:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FA9307664BE6C7FE8AC3954BA73799084210838
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32332d3234203d3e20383334.roa
Signing time: Thu 30 Jul 2026 09:27:21 +0000
ROA not before: Thu 30 Jul 2026 09:22:21 +0000
ROA not after: Thu 29 Jul 2027 09:27:21 +0000
asID: 834
IP address blocks: 145.79.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a9:30:76:64:be:6c:7f:e8:ac:39:54:ba:73:79:90:84:21:08:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:21 2026 GMT
Not After : Jul 29 09:27:21 2027 GMT
Subject: CN=4C7B1D4811F9B39DF177298B8940F321816FEE74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e2:7d:d8:e0:a8:de:52:ec:30:49:69:14:8d:
b7:aa:96:ce:8e:51:74:86:8e:33:1b:41:44:63:16:
bd:c4:d3:da:24:cf:df:9a:56:17:eb:e9:f7:83:5a:
34:5e:0c:70:b6:2e:05:f1:0f:d2:12:e3:25:67:54:
e3:93:cb:b3:87:21:78:da:5e:4d:9d:54:ab:1d:73:
03:d3:7c:f1:8b:12:d8:81:ac:a6:62:fe:e9:4f:3c:
09:a9:01:76:8b:e6:5c:ff:17:0f:38:29:3d:78:c6:
55:64:88:4c:af:71:c4:87:84:94:31:36:07:53:96:
cc:b9:1d:86:62:26:38:1e:fe:d1:fa:28:06:76:ac:
ac:b6:0a:7b:18:71:eb:c3:b6:ab:8c:62:db:58:72:
19:c7:c4:48:ae:3c:0f:05:85:2a:38:c0:b7:39:8c:
ec:7b:2b:92:cc:43:f2:4e:3a:00:44:4d:35:a1:89:
fc:db:e9:6a:b4:68:74:43:90:f2:4b:37:9c:74:05:
d6:7c:83:0c:41:27:32:d3:2f:64:ed:49:7b:22:28:
9b:4e:80:9f:bb:7c:6b:ce:59:55:bf:9d:c6:ed:b4:
ef:a0:eb:fa:c5:fb:72:b4:3a:94:43:f1:98:d0:5f:
a8:3a:6f:35:4c:64:1c:ca:7f:6c:82:66:b9:88:8b:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7B:1D:48:11:F9:B3:9D:F1:77:29:8B:89:40:F3:21:81:6F:EE:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.150.0/23
Signature Algorithm: sha256WithRSAEncryption
29:07:92:47:f2:b2:fc:cd:4f:c2:ea:1a:0a:97:80:31:97:d1:
2c:87:a4:5d:de:c9:99:e7:d7:60:b5:29:27:75:33:fa:2e:38:
2d:16:8b:41:97:53:f5:52:6b:69:3f:0b:31:dc:07:3f:07:44:
e1:dd:14:23:23:a4:8e:20:27:de:8c:42:6a:35:1c:44:53:ab:
46:94:82:1b:4a:e3:ea:cd:fd:44:2b:6e:52:b6:cc:51:a5:24:
3a:71:3f:6b:5f:02:cb:10:8f:0a:14:15:5d:74:d3:c7:38:45:
d2:27:81:ca:d4:01:c4:8b:eb:d2:68:0b:12:3a:74:d5:1f:c8:
3f:74:09:db:16:81:b1:68:0b:f9:da:ec:6a:0b:a6:f3:5c:c5:
3a:25:d3:c8:26:d3:69:76:12:0c:af:df:e5:c8:6c:b7:f7:1a:
62:29:59:b1:ea:c4:ab:64:14:08:5f:c8:3c:0c:0b:cd:ff:5b:
dd:4c:aa:34:cd:09:d2:09:64:6d:35:0a:25:43:02:4e:46:05:
3a:18:e6:ea:4f:0c:b1:ef:1e:2c:8e:a1:b9:b1:9b:81:cc:21:
dd:2f:88:9e:45:b0:24:c3:40:25:32:e3:2e:64:33:69:d5:b4:
a7:5e:d9:3a:c9:78:cc:7d:d0:f3:05:93:df:a8:bc:c7:04:b8:
b8:e6:d1:8d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUH6kwdmS+bH/orDlUunN5kIQhCDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MzAwOTIyMjFaFw0yNzA3MjkwOTI3MjFaMDMxMTAvBgNV
BAMTKDRDN0IxRDQ4MTFGOUIzOURGMTc3Mjk4Qjg5NDBGMzIxODE2RkVFNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH4n3Y4KjeUuwwSWkUjbeqls6O
UXSGjjMbQURjFr3E09okz9+aVhfr6feDWjReDHC2LgXxD9IS4yVnVOOTy7OHIXja
Xk2dVKsdcwPTfPGLEtiBrKZi/ulPPAmpAXaL5lz/Fw84KT14xlVkiEyvccSHhJQx
NgdTlsy5HYZiJjge/tH6KAZ2rKy2CnsYcevDtquMYttYchnHxEiuPA8FhSo4wLc5
jOx7K5LMQ/JOOgBETTWhifzb6Wq0aHRDkPJLN5x0BdZ8gwxBJzLTL2TtSXsiKJtO
gJ+7fGvOWVW/ncbttO+g6/rF+3K0OpRD8ZjQX6g6bzVMZBzKf2yCZrmIizYzAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUTHsdSBH5s53xdymLiUDzIYFv7nQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM1
MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGRT5Yw
DQYJKoZIhvcNAQELBQADggEBACkHkkfysvzNT8LqGgqXgDGX0SyHpF3eyZnn12C1
KSd1M/ouOC0Wi0GXU/VSa2k/CzHcBz8HROHdFCMjpI4gJ96MQmo1HERTq0aUghtK
4+rN/UQrblK2zFGlJDpxP2tfAssQjwoUFV1008c4RdIngcrUAcSL69JoCxI6dNUf
yD90CdsWgbFoC/na7GoLpvNcxTol08gm02l2Egyv3+XIbLf3GmIpWbHqxKtkFAhf
yDwMC83/W91MqjTNCdIJZG01CiVDAk5GBToY5upPDLHvHiyOobmxm4HMId0viJ5F
sCTDQCUy4y5kM2nVtKde2TrJeMx90PMFk9+ovMcEuLjm0Y0=
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:52:41 2026 by rpki-client