Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34382e302f32332d3234203d3e203437353833.roa
File: 3134352e37392e34382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: poBGtbyyMqQHVvoY8ui3AsrY52bNUTAQSeall5wbrR4=
Subject key identifier: E9:25:75:94:BF:B2:DA:D3:80:38:BA:62:23:AF:CC:29:4C:5D:D3:86
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 039ACA972D254270C15E74F646D33E9B3282EFF7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34382e302f32332d3234203d3e203437353833.roa
Signing time: Fri 17 Apr 2026 06:23:44 +0000
ROA not before: Fri 17 Apr 2026 06:18:44 +0000
ROA not after: Fri 16 Apr 2027 06:23:44 +0000
asID: 47583
IP address blocks: 145.79.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9a:ca:97:2d:25:42:70:c1:5e:74:f6:46:d3:3e:9b:32:82:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 17 06:18:44 2026 GMT
Not After : Apr 16 06:23:44 2027 GMT
Subject: CN=E9257594BFB2DAD38038BA6223AFCC294C5DD386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:ce:9b:a9:73:dc:58:00:76:cf:5e:35:93:
07:12:b4:c1:1f:8c:65:14:8f:4a:3c:0e:cc:b3:54:
a1:c7:e1:87:45:9e:4a:3a:1c:61:44:c9:fe:66:da:
51:63:3e:cf:b3:64:59:07:f2:bc:0f:31:0b:27:80:
21:2a:43:fd:e5:e0:4f:46:16:7c:ce:a7:0c:0c:36:
31:5b:60:98:c7:bd:4c:e4:07:63:10:90:12:69:11:
ba:73:c5:92:a3:59:ad:65:29:3e:92:e3:37:3d:e0:
11:97:5a:28:4e:d1:68:9a:e3:9f:a5:34:f5:03:49:
ee:74:ef:85:37:57:1a:fe:6d:0e:94:f0:a2:d9:f7:
b0:13:28:ac:57:d8:ab:89:f6:14:3c:71:3e:f9:37:
98:b2:b5:e2:25:e0:c0:f4:bd:cb:24:c3:c5:5c:2e:
89:9c:a0:60:11:1c:8b:ae:9e:b3:a6:0b:e9:24:60:
9f:43:0d:a3:e6:a0:c0:62:f2:ce:45:ba:e7:09:3b:
39:85:74:33:26:5e:56:2e:fb:bc:d5:af:b5:d7:fc:
d6:1c:85:e0:20:21:fc:a2:06:f6:f1:13:57:2b:27:
34:cf:50:78:4d:d3:63:c5:8e:0e:9e:5f:8d:74:b3:
85:e0:85:88:ab:e1:23:3f:3a:53:01:56:a0:5d:e9:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:25:75:94:BF:B2:DA:D3:80:38:BA:62:23:AF:CC:29:4C:5D:D3:86
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e34382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.48.0/23
Signature Algorithm: sha256WithRSAEncryption
49:4c:1d:07:fa:e7:5f:2c:98:aa:d8:02:74:8a:56:62:53:2e:
97:c0:da:e1:f3:a1:ef:d4:70:0f:b2:99:5b:74:cc:8b:cb:4b:
e4:86:0c:ed:52:18:12:20:52:86:a5:1a:84:fb:3e:bb:a0:d4:
6c:a4:4d:ae:e7:74:d3:7c:4e:a2:8d:6d:bf:24:07:9a:fd:66:
20:53:ac:19:b1:d8:20:22:1d:8c:3b:6d:bd:ab:ff:25:03:53:
f1:6a:e3:ba:82:05:ee:47:c7:97:a1:29:03:2f:85:54:6f:1f:
61:9a:ab:e8:41:27:59:92:4d:19:61:2a:70:47:a9:0e:6b:0f:
b2:c2:44:d1:0e:68:fd:27:3b:0d:7e:4c:df:08:8b:af:d6:a0:
78:72:3c:21:2f:fa:1f:e2:31:e3:f2:b2:d3:3c:66:0c:03:7d:
67:89:64:24:ba:90:0c:03:b5:a7:36:f2:6b:86:64:34:96:0e:
e0:48:d5:b9:17:4f:b2:8a:b1:78:04:f9:45:cc:a1:17:ae:fc:
23:41:03:76:08:a0:3f:1b:f3:1f:ae:32:cc:08:5f:8a:d7:42:
94:fe:4a:38:85:45:c4:b5:09:1b:45:c8:1d:cd:83:68:69:e3:
ad:db:ac:07:0d:b1:06:2a:00:16:2b:b0:9c:f1:f1:d9:2b:a8:
4d:05:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:34 2026 by rpki-client