Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31382e302f32332d3234203d3e203437353833.roa
File: 3134352e37392e31382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: R6GVl0o2yt18mzVYOIqGVOPEQdx2ATycIRbo0U93nwo=
Subject key identifier: 59:69:8A:14:D3:F3:25:A1:DE:96:FA:B8:59:1C:03:07:62:E8:4A:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76C2F006FDA0167E0554038584DD41FAC8957FB9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31382e302f32332d3234203d3e203437353833.roa
Signing time: Fri 17 Apr 2026 06:23:44 +0000
ROA not before: Fri 17 Apr 2026 06:18:44 +0000
ROA not after: Fri 16 Apr 2027 06:23:44 +0000
asID: 47583
IP address blocks: 145.79.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:c2:f0:06:fd:a0:16:7e:05:54:03:85:84:dd:41:fa:c8:95:7f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 06:18:44 2026 GMT
Not After : Apr 16 06:23:44 2027 GMT
Subject: CN=59698A14D3F325A1DE96FAB8591C030762E84AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:30:24:98:f0:04:24:d7:20:96:55:2d:b9:
a8:48:d4:82:46:ac:74:7c:47:60:57:c7:3a:8e:e3:
54:49:ef:74:92:b2:fb:74:a2:10:11:6b:0b:e4:5c:
4a:48:e8:bb:d9:31:bc:40:6d:50:a0:44:6a:0c:ea:
95:ae:44:85:df:99:0c:18:19:ee:a2:27:b2:40:ba:
ef:61:fb:b6:f5:7a:ae:9e:96:27:c8:2d:d6:51:f0:
7e:d1:41:b6:e4:34:cf:98:4b:24:89:b0:92:06:a4:
79:4e:a9:fc:7e:b8:77:80:a7:fc:07:7a:a5:47:c8:
83:63:53:cb:84:e6:7e:bf:2c:f0:40:06:e9:cc:b9:
59:f1:bd:16:73:e3:ba:c5:f6:fa:f7:f4:a8:8d:66:
36:c2:d8:0b:79:44:98:67:5a:15:d7:31:90:0d:88:
f7:1f:b9:50:2c:25:f3:87:ec:ed:c3:7a:8b:54:dd:
bb:29:12:ea:2b:2a:76:b0:34:6a:d6:bf:12:57:ae:
08:6d:7d:a5:20:7e:79:dd:5e:79:a3:5e:06:9a:18:
ff:67:f9:5c:ba:0e:fc:fc:d0:6a:22:9d:4d:e8:cc:
0d:c0:e9:c3:d2:d4:b5:be:22:7c:88:aa:93:0c:9e:
ba:ee:15:53:40:16:0f:18:e9:a4:b6:f2:6c:11:18:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:8A:14:D3:F3:25:A1:DE:96:FA:B8:59:1C:03:07:62:E8:4A:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.18.0/23
Signature Algorithm: sha256WithRSAEncryption
77:c8:4e:67:2a:6b:01:88:7d:ff:bd:35:87:9c:86:8c:be:bf:
d5:83:ad:02:1e:74:d8:ab:1d:80:0b:89:7e:d5:a5:b8:44:df:
8e:21:9c:fd:8d:4e:20:79:68:42:77:d6:b2:83:cf:55:00:ac:
fa:28:51:a1:d2:f5:52:08:67:1e:9b:ae:d5:25:93:dc:90:70:
b6:55:79:15:94:c1:61:cf:14:f8:a2:79:b5:c3:30:b8:b0:8f:
72:69:7c:23:4f:29:81:14:1f:4a:67:11:e1:24:79:ae:bf:cb:
ba:b8:72:76:7e:75:7e:cf:07:8d:68:69:7e:66:45:dd:1c:71:
f2:ff:94:d6:09:ec:86:88:a1:6f:32:7a:b0:1b:62:f8:17:41:
68:76:7a:12:1c:b7:49:08:80:0c:64:d8:a3:6d:b1:d1:4d:42:
3a:db:d2:db:2c:07:48:ef:6e:f0:c0:54:ce:08:20:86:33:c1:
bf:a0:4a:0d:7a:20:26:df:f8:bb:5d:b9:dc:ff:c1:a9:15:7a:
25:7a:fd:63:83:74:b3:a5:1d:5f:65:3f:fb:0b:1b:da:3c:02:
11:68:77:ae:5d:cf:4b:5a:37:1b:fc:2e:33:33:6c:b7:79:85:
9e:2e:9f:c3:6c:d3:73:5f:11:69:da:77:7b:84:c0:0c:97:c9:
85:1b:ea:0f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdsLwBv2gFn4FVAOFhN1B+siVf7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MTcwNjE4NDRaFw0yNzA0MTYwNjIzNDRaMDMxMTAvBgNV
BAMTKDU5Njk4QTE0RDNGMzI1QTFERTk2RkFCODU5MUMwMzA3NjJFODRBQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPzAkmPAEJNcgllUtuahI1IJG
rHR8R2BXxzqO41RJ73SSsvt0ohARawvkXEpI6LvZMbxAbVCgRGoM6pWuRIXfmQwY
Ge6iJ7JAuu9h+7b1eq6elifILdZR8H7RQbbkNM+YSySJsJIGpHlOqfx+uHeAp/wH
eqVHyINjU8uE5n6/LPBABunMuVnxvRZz47rF9vr39KiNZjbC2At5RJhnWhXXMZAN
iPcfuVAsJfOH7O3DeotU3bspEuorKnawNGrWvxJXrghtfaUgfnndXnmjXgaaGP9n
+Vy6Dvz80GoinU3ozA3A6cPS1LW+InyIqpMMnrruFVNAFg8Y6aS28mwRGBIHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUWWmKFNPzJaHelvq4WRwDB2LoSsIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM4
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZFP
EjANBgkqhkiG9w0BAQsFAAOCAQEAd8hOZyprAYh9/701h5yGjL6/1YOtAh502Ksd
gAuJftWluETfjiGc/Y1OIHloQnfWsoPPVQCs+ihRodL1UghnHpuu1SWT3JBwtlV5
FZTBYc8U+KJ5tcMwuLCPcml8I08pgRQfSmcR4SR5rr/Lurhydn51fs8HjWhpfmZF
3Rxx8v+U1gnshoihbzJ6sBti+BdBaHZ6Ehy3SQiADGTYo22x0U1COtvS2ywHSO9u
8MBUzggghjPBv6BKDXogJt/4u1253P/BqRV6JXr9Y4N0s6UdX2U/+wsb2jwCEWh3
rl3PS1o3G/wuMzNst3mFni6fw2zTc18Radp3e4TADJfJhRvqDw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:51 2026 by rpki-client