Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2037303239.roa
File: 3134352e37392e3233322e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier: LChRI8B7UTU8cPPEanxdWAYdNWAGOPEJyQqrijD+OQ4=
Subject key identifier: 13:C8:08:6C:11:45:4B:A7:4E:F1:83:B2:B3:A3:69:CF:50:53:DB:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C6DBD945C3CD7886A9789645667A354E5CCF0B0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2037303239.roa
Signing time: Thu 09 Apr 2026 09:03:35 +0000
ROA not before: Thu 09 Apr 2026 08:58:35 +0000
ROA not after: Thu 08 Apr 2027 09:03:35 +0000
asID: 7029
IP address blocks: 145.79.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6d:bd:94:5c:3c:d7:88:6a:97:89:64:56:67:a3:54:e5:cc:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 9 08:58:35 2026 GMT
Not After : Apr 8 09:03:35 2027 GMT
Subject: CN=13C8086C11454BA74EF183B2B3A369CF5053DBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:be:5c:13:58:53:4e:0c:bd:ca:a3:4c:62:
73:db:11:8f:05:8b:b0:54:aa:81:0e:e2:41:d3:dd:
ed:46:c2:52:0c:26:7c:f6:7b:44:c4:07:06:db:16:
aa:02:af:7e:ba:9c:98:06:c3:23:aa:35:8f:63:b9:
ce:51:21:95:4e:68:52:41:e4:e6:07:8b:75:d6:64:
0f:f4:07:9a:b6:dc:c3:25:c0:57:fe:e8:08:76:a6:
87:1e:b6:89:1a:f3:c0:d1:cf:73:44:32:57:d7:e0:
7e:70:7d:6a:c3:6b:72:31:a8:26:f0:56:a7:d2:ca:
af:c7:a9:18:f8:03:07:87:e1:d0:b5:a4:99:a7:81:
6e:f3:2a:e3:c5:f9:db:c8:45:c1:4b:78:f2:db:60:
d5:54:8f:10:94:20:df:ef:2d:2a:3f:16:be:7c:88:
13:40:52:20:59:7c:42:cf:bf:de:05:33:3f:cd:16:
06:bc:c5:fb:c6:cb:f3:55:b9:4f:f2:0f:45:e5:af:
3f:d8:b3:10:16:df:25:a3:a1:39:18:eb:92:9a:17:
f4:a3:53:7d:3e:87:5f:31:0d:73:8a:a2:75:92:53:
2d:cc:74:e9:57:ad:eb:f9:b4:63:1b:31:45:76:ed:
28:c9:fe:79:44:26:7c:6d:99:24:9f:74:38:9b:28:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:08:6C:11:45:4B:A7:4E:F1:83:B2:B3:A3:69:CF:50:53:DB:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3233322e302f32312d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.232.0/21
Signature Algorithm: sha256WithRSAEncryption
82:e9:8f:c0:d8:c2:0f:7e:59:31:f4:25:dc:86:8e:b1:37:73:
00:a2:ea:9d:fc:9a:8c:e9:f4:e3:97:dd:6f:60:38:95:85:26:
2b:1f:ca:fb:32:34:48:95:76:8e:e7:e7:9b:19:64:3d:50:9b:
59:7c:b2:d2:8e:1d:d9:20:58:f3:6a:a2:d2:d9:4b:c1:f8:18:
07:9b:45:ab:d9:53:b8:bf:69:41:6f:b6:5d:46:01:34:6a:87:
50:55:6c:0f:9c:ee:40:22:85:4d:ca:73:4d:80:79:58:63:5f:
72:9c:95:a6:52:2e:6a:12:94:53:0e:19:e9:8d:d2:13:9a:72:
41:ef:6f:fc:83:62:2a:10:28:ee:d4:b3:2b:a4:34:b5:90:f6:
59:37:70:27:aa:28:bf:1b:db:0c:2f:fe:f1:9c:95:25:24:31:
20:72:8b:b4:f8:e7:9a:22:d3:60:a0:43:59:fa:79:d7:3a:55:
02:5a:a3:84:37:c3:83:49:22:8f:5f:d2:5d:a1:e0:cd:b0:4a:
b3:24:dc:69:6f:8f:1c:06:00:e7:bf:dc:f6:5f:2a:6e:40:12:
07:07:f4:b1:96:9a:ad:5e:b7:98:71:68:90:94:a8:f8:c0:0b:
80:ea:1b:78:0e:be:0c:12:57:b5:74:83:68:1c:aa:94:d8:22:
ce:e2:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:02 2026 by rpki-client