Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136382e302f32342d3234203d3e20343031383631.roa
File: 3134352e37392e3136382e302f32342d3234203d3e20343031383631.roa (raw, json)
Hash identifier: 2t8yf6fI6tIg/Chx5rW5F/0px0WqOpL2E+eQGUBh/No=
Subject key identifier: 8C:81:92:9E:C5:7C:EB:D4:24:3E:80:F3:1A:9B:0E:1F:50:6F:CA:75
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6EF6D864A0D2EF1D96FE6B4902254B787D9C656E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136382e302f32342d3234203d3e20343031383631.roa
Signing time: Fri 10 Apr 2026 10:52:51 +0000
ROA not before: Fri 10 Apr 2026 10:47:51 +0000
ROA not after: Fri 09 Apr 2027 10:52:51 +0000
asID: 401861
IP address blocks: 145.79.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f6:d8:64:a0:d2:ef:1d:96:fe:6b:49:02:25:4b:78:7d:9c:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:47:51 2026 GMT
Not After : Apr 9 10:52:51 2027 GMT
Subject: CN=8C81929EC57CEBD4243E80F31A9B0E1F506FCA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:f4:c5:ff:6e:15:97:0f:2c:dd:7d:2d:1d:
2b:30:65:5f:5e:09:04:c6:36:94:a4:21:51:b1:5d:
22:4f:38:f1:16:c9:98:bc:33:64:c4:50:32:0a:f6:
38:a0:a9:49:6f:77:04:ab:3c:ca:93:77:3a:f9:3e:
d5:02:2f:d8:f6:d0:e8:9c:45:3b:1d:62:64:a9:cb:
df:02:78:90:49:e5:2e:5e:e3:49:1a:c8:76:c5:4e:
82:0c:e7:23:5f:92:18:8c:a5:d5:1b:56:dc:4b:75:
d9:72:95:59:47:94:80:7a:9d:ee:1e:2f:57:74:8c:
70:ac:a5:1b:0e:fb:e1:e7:63:13:a5:1a:c4:d0:f1:
8c:d9:09:a7:3e:98:0c:f7:37:0b:3e:52:69:d4:05:
9d:2c:ae:7f:94:48:a1:7e:87:7f:8b:8e:98:ed:76:
5e:43:1a:55:7d:23:ed:28:e9:d1:78:a1:79:67:a9:
17:c3:a2:47:e6:da:66:49:a9:f9:b1:7a:fe:e0:ba:
8d:8d:b8:60:89:39:6e:55:01:e4:85:d3:b1:b3:d9:
17:a8:28:bd:23:38:61:a0:18:cf:7b:02:19:6f:23:
a1:e3:8d:c5:b0:1b:1a:73:4b:cb:aa:ca:f9:ea:c5:
50:cf:38:d1:5e:01:87:bb:23:7b:74:28:f8:c5:3f:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:92:9E:C5:7C:EB:D4:24:3E:80:F3:1A:9B:0E:1F:50:6F:CA:75
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3136382e302f32342d3234203d3e20343031383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.168.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e8:0a:24:b3:38:37:58:1b:2b:43:f0:0c:1b:38:aa:f8:89:
01:b6:62:97:47:33:a0:b0:2d:f5:d0:53:41:f2:ae:25:0e:2c:
a6:c0:87:18:a3:8d:e1:49:97:c4:5d:27:8f:5d:86:3a:a4:65:
87:49:a7:c6:3d:20:f7:90:db:12:f5:c8:36:fd:a6:fc:5b:81:
c4:7e:02:a6:1a:d6:20:95:1d:97:94:db:d4:83:01:d6:c8:70:
1b:c5:05:aa:41:bb:3f:0b:6e:d8:a9:29:4b:1f:43:15:c9:5b:
f8:34:50:0e:e9:8c:75:6c:3d:67:0b:3c:2c:cd:de:93:6f:ca:
9a:b4:d6:d1:5b:e8:26:2e:f4:19:cb:16:31:0c:66:61:5a:ec:
c0:a5:ce:1f:a1:13:9a:ab:88:98:92:38:28:e7:a6:7d:8a:5f:
0f:4d:c3:76:d1:fb:fa:60:06:88:8e:05:dd:89:8d:4d:96:01:
da:10:dc:76:2d:bc:f7:57:11:4a:ca:00:87:2c:48:30:8f:a9:
ea:d2:53:cf:2c:7f:7b:8f:35:e4:51:a6:ed:a4:7c:96:0c:55:
69:07:04:62:b2:06:d0:86:e4:4a:e4:25:cf:d1:59:00:aa:ca:
10:13:f2:5d:1b:18:f1:d6:b3:a5:9d:1a:0d:a8:03:23:9f:94:
7c:81:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:52 2026 by rpki-client