Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36362e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e36362e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: mGIcC9f+hOpFPf8C+8wAtRBgtS+9v4tSZKXl4aOO/uI=
Subject key identifier: C3:C9:DC:A1:A3:37:10:FD:A2:3B:49:45:05:00:19:FA:56:EC:04:35
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B3DF3647DD760387B8FE263BDC5D2C02FEB97F3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36362e302f32342d3234203d3e203332303433.roa
Signing time: Wed 10 Jun 2026 11:25:10 +0000
ROA not before: Wed 10 Jun 2026 11:20:10 +0000
ROA not after: Wed 09 Jun 2027 11:25:10 +0000
asID: 32043
IP address blocks: 145.79.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:3d:f3:64:7d:d7:60:38:7b:8f:e2:63:bd:c5:d2:c0:2f:eb:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:10 2026 GMT
Not After : Jun 9 11:25:10 2027 GMT
Subject: CN=C3C9DCA1A33710FDA23B4945050019FA56EC0435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:76:13:49:78:1a:e5:c0:b8:04:ad:6c:05:
7a:0b:0f:24:db:c7:6d:df:2b:22:5d:e7:8f:79:82:
8a:dd:07:6a:0f:8c:4c:95:91:9d:60:b3:6f:1a:f9:
fb:66:b9:46:3c:df:39:5c:fe:93:e8:2f:3d:12:44:
ee:57:d0:d7:95:b3:e7:58:c8:f8:ce:77:4d:1b:29:
40:32:50:c0:a7:3e:a2:33:0f:57:65:44:a4:14:04:
95:35:25:c2:1d:7b:07:0d:ca:56:8d:8b:09:20:9a:
52:96:06:72:f6:c7:a9:c2:93:41:bd:84:4b:0a:42:
96:79:af:3b:ff:19:af:2a:44:b9:92:98:01:ea:05:
1c:6b:9c:6b:0f:64:d3:1e:a5:54:80:ef:a6:94:c6:
d7:62:27:73:b8:6a:32:06:9e:d0:f1:78:b7:c6:54:
11:0c:5c:f9:d9:a1:94:cd:26:2a:f1:c6:fb:96:de:
2f:76:e0:70:a3:43:d4:a4:36:92:93:da:02:e3:50:
47:fa:e4:68:3b:78:50:60:99:08:4e:55:64:39:f7:
b4:61:ee:96:52:d1:68:f7:d2:0b:54:8a:c2:13:0e:
f3:55:70:fb:dc:d4:2e:c5:9b:c4:61:93:26:a2:da:
10:36:30:67:a1:be:3c:bc:20:f6:ab:2e:58:92:79:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C9:DC:A1:A3:37:10:FD:A2:3B:49:45:05:00:19:FA:56:EC:04:35
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36362e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:40:a4:06:d2:3c:4b:b3:86:04:e9:2b:4e:51:e1:85:45:e7:
94:4b:70:b5:1e:7e:d1:43:5d:44:54:e6:8b:b0:a6:04:94:93:
a8:a7:9a:4e:4a:01:70:11:22:91:31:f6:b6:c5:32:8d:2d:93:
e4:ff:3f:5c:6a:3e:ed:5a:88:5f:ec:d7:42:62:80:5e:c2:5a:
d4:3a:a8:f1:69:72:c7:ce:d0:49:2c:04:f7:69:eb:7a:6e:4e:
28:d5:99:56:cb:da:02:ce:d4:80:d5:e6:6b:1c:8c:93:4f:04:
6b:10:43:ab:4b:a3:0a:32:8a:9a:ac:da:a6:6d:6b:36:60:da:
3b:e0:bd:60:9b:46:62:e3:93:cc:c0:ef:dc:04:38:a0:bf:84:
c0:a9:16:c3:25:7b:43:3b:1d:7f:a1:d3:e0:7e:7c:79:cd:c3:
cf:b6:4c:72:1a:a3:f4:e8:f5:7a:87:ab:af:03:6c:df:25:26:
16:bb:a8:a4:bb:4c:0e:21:17:b9:52:f2:08:0a:a5:cc:f2:1a:
f4:08:6e:6a:27:c0:19:3d:2b:7d:07:de:49:78:76:a7:8c:03:
a0:0b:e8:ad:3d:0a:f8:b8:cb:78:18:02:ba:73:0c:9a:9b:40:
ec:53:95:43:d3:5c:c2:d5:eb:fb:2f:a3:7b:ff:d3:09:e3:d4:
34:f4:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:34 2026 by rpki-client