Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36382e302f32342d3234203d3e20323134313433.roa
File: 3134352e37392e36382e302f32342d3234203d3e20323134313433.roa (raw, json)
Hash identifier: eBpthYnPuX5DJvgdzS5suhZgWd9quTWfi0w2heorsuc=
Subject key identifier: 60:DC:65:44:F3:74:8A:28:EA:D9:35:3E:37:AA:69:46:3F:20:1B:19
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4026C7A3734C160F9862AB5343F4DAC3FAF08138
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36382e302f32342d3234203d3e20323134313433.roa
Signing time: Thu 04 Jun 2026 20:24:55 +0000
ROA not before: Thu 04 Jun 2026 20:19:55 +0000
ROA not after: Thu 03 Jun 2027 20:24:55 +0000
asID: 214143
IP address blocks: 145.79.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:26:c7:a3:73:4c:16:0f:98:62:ab:53:43:f4:da:c3:fa:f0:81:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 20:19:55 2026 GMT
Not After : Jun 3 20:24:55 2027 GMT
Subject: CN=60DC6544F3748A28EAD9353E37AA69463F201B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:7e:2c:4f:36:b3:ee:f2:80:0f:b3:78:21:
7e:34:50:73:dd:64:60:f9:84:d5:d5:ed:70:99:3b:
c1:d1:3d:d9:4d:51:42:15:42:64:fc:b4:bc:e0:24:
9f:bb:6c:65:27:a6:17:d9:ed:51:34:ab:e9:48:66:
3e:e9:81:34:f9:b2:24:3b:25:c8:b6:0d:fc:95:03:
74:cf:50:49:80:23:33:7a:46:59:4a:aa:98:9e:6a:
e2:87:88:27:3c:34:43:73:21:9e:ac:93:d4:05:20:
0f:d2:ec:be:c7:c8:37:8e:4e:f5:de:74:33:00:4e:
cd:a4:a0:2f:b1:7f:85:c7:ad:42:15:d0:59:e1:58:
c9:3c:f2:f4:dc:54:60:7c:59:7d:bd:2c:46:93:a9:
5c:d2:47:8d:93:84:5d:bd:33:47:2f:d3:17:da:bc:
9b:45:d1:64:19:fa:84:dc:21:08:eb:9c:99:cd:3b:
23:b6:0c:8c:9b:17:42:28:b3:c9:ee:d8:0c:50:a2:
f0:f3:3d:e7:30:6d:01:bf:7d:74:2f:5d:2e:00:9d:
de:c9:b8:e2:fa:2b:7d:b1:43:03:dc:6e:06:2c:c2:
c2:09:91:fa:0a:f8:2f:f8:01:63:6d:28:0d:0a:d2:
5f:37:00:1b:ef:83:5d:68:c0:2a:d3:8d:f2:5f:7c:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:65:44:F3:74:8A:28:EA:D9:35:3E:37:AA:69:46:3F:20:1B:19
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e36382e302f32342d3234203d3e20323134313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.68.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0e:df:94:cf:4b:62:04:89:a3:14:77:45:24:34:f3:fa:ee:
c1:8d:a1:d3:bf:39:ec:16:27:1b:4f:97:83:3d:22:39:fe:f0:
2d:0f:3a:58:93:f8:73:fd:f6:e2:1d:e9:43:d1:ee:31:78:e3:
e9:12:9d:3a:d3:38:da:f2:78:ca:c4:6e:7a:ae:88:7f:43:94:
68:1b:11:0d:40:0c:72:c4:68:ce:b3:cd:6e:4a:8c:9f:95:72:
b7:c7:1b:07:1b:2a:7d:33:fc:ac:2b:4d:d5:65:8f:37:cd:c3:
0d:d4:12:b4:10:10:fa:cf:00:c2:49:fd:2a:e4:e5:f6:f7:42:
d1:8d:6f:a3:e2:61:6f:51:24:62:99:d9:34:31:90:48:e7:a8:
25:42:ac:49:3b:4c:81:36:87:dc:2f:d5:45:36:8d:2d:a2:e6:
be:22:3e:34:71:29:15:d2:10:03:5d:c6:6a:9e:08:78:87:01:
70:aa:c3:36:58:6f:11:b9:de:1e:36:ac:33:d2:a0:db:22:f9:
3e:82:4b:69:8a:26:28:05:d6:99:9a:25:f8:d7:19:b2:03:ce:
b1:c1:ef:96:12:46:c8:28:2f:af:5d:d6:63:66:c1:97:35:49:
23:19:7a:d9:c9:ae:0b:3b:98:0d:ec:12:c4:a4:45:04:19:f1:
2c:15:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:13 2026 by rpki-client