Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37352e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e37352e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: XPDrudfecE9lBXOWX136qfCxsGjvojQuW+XjmkHAnd8=
Subject key identifier: 89:10:A4:CF:20:F3:04:B9:E1:DA:54:FC:6A:69:28:B7:66:CD:2E:40
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C77FB0FF40F69C646DA4A93BDFFA18D84965F46
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37352e302f32342d3234203d3e203332303433.roa
Signing time: Wed 10 Jun 2026 11:25:09 +0000
ROA not before: Wed 10 Jun 2026 11:20:09 +0000
ROA not after: Wed 09 Jun 2027 11:25:09 +0000
asID: 32043
IP address blocks: 145.79.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:77:fb:0f:f4:0f:69:c6:46:da:4a:93:bd:ff:a1:8d:84:96:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:09 2026 GMT
Not After : Jun 9 11:25:09 2027 GMT
Subject: CN=8910A4CF20F304B9E1DA54FC6A6928B766CD2E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:66:8b:b0:c4:d9:6a:27:48:a8:25:8b:fa:
27:08:b0:ab:99:38:eb:fd:cf:aa:67:38:43:48:69:
ab:0d:7f:ab:83:44:5a:ce:13:7f:8d:01:c4:03:ee:
46:79:ab:4e:4e:c4:68:b5:ab:8c:8b:52:3d:06:7d:
5e:1a:75:9c:4b:23:ad:ed:59:3b:99:d6:57:b0:5f:
04:8a:9a:8e:ef:7a:76:c9:9e:1b:59:4d:75:27:04:
f9:ce:ce:be:f8:01:4a:85:80:84:e2:47:5d:d8:1a:
bd:a4:85:c3:71:df:02:e9:8d:1c:9a:61:f5:a0:59:
02:1a:3a:74:61:16:85:3f:c3:97:f8:11:61:09:00:
66:63:ab:10:15:66:df:75:27:85:1b:21:2b:4f:70:
88:57:41:30:47:56:71:3d:bc:cf:77:10:e7:d2:38:
0e:ab:5b:08:32:d4:39:ec:8e:c0:63:62:35:e9:9e:
92:76:52:31:25:91:ac:3b:d9:3b:bd:a5:3a:4f:24:
4b:57:b9:1a:20:33:66:11:53:80:d9:24:49:b8:7f:
62:f2:4a:73:eb:3a:79:d1:5b:b1:02:58:b6:f0:fd:
4e:3a:44:e1:58:9f:ec:77:0e:52:19:ed:8d:1f:12:
d6:4b:2c:59:4b:af:b1:be:ea:15:1d:0a:cc:44:fb:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:10:A4:CF:20:F3:04:B9:E1:DA:54:FC:6A:69:28:B7:66:CD:2E:40
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e37352e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.75.0/24
Signature Algorithm: sha256WithRSAEncryption
70:11:b0:2a:b0:d6:65:d0:f9:48:12:63:7d:41:ca:7d:7b:a7:
e0:ba:ea:cf:39:9d:bb:b0:4d:a1:b9:4e:7c:66:ef:5e:de:2d:
34:cb:c3:6a:95:46:f2:8d:ee:bc:4b:c7:70:61:3c:d4:d2:08:
66:9e:06:91:3b:eb:8b:ac:d9:9e:52:6a:f0:e5:a1:07:8f:92:
df:fd:36:4c:b7:65:fc:d1:82:64:60:aa:89:6d:63:1c:6f:f9:
47:c7:5f:44:c1:15:89:ce:06:a2:64:ab:47:7b:cf:49:32:4b:
3b:6b:b5:5b:02:24:83:96:1a:e9:db:b5:3e:40:6c:2c:b4:ee:
c3:52:90:13:a7:40:36:e4:24:79:6d:db:cb:ca:8e:65:46:0f:
00:6c:99:a0:1d:2d:4a:2c:05:30:b3:7c:56:09:7d:e5:08:41:
c2:3f:ca:00:18:15:6a:76:5c:dc:2b:dd:30:d6:9e:de:7f:44:
76:08:f0:01:73:a0:f4:18:0b:fe:79:93:88:89:3a:d2:82:65:
28:91:a0:99:af:f4:f8:0a:e7:47:d6:6c:66:08:42:68:a9:8e:
b2:3f:97:89:6b:da:f3:0d:b5:67:de:ba:15:24:83:f3:bd:cf:
2a:61:fd:23:59:33:07:9c:4c:81:d6:17:b6:e6:e6:41:00:71:
ba:68:db:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:53 2026 by rpki-client