Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38312e302f32342d3234203d3e203332303433.roa
File: 3134352e37392e38312e302f32342d3234203d3e203332303433.roa (raw, json)
Hash identifier: BfLrtLGT/4+Np+x/7kGJTXZfn6gTymDTDwP4HHCRZGE=
Subject key identifier: 74:0E:79:A5:50:F7:83:66:69:A3:CA:13:BE:FF:41:57:AD:4E:B7:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3DBA331F109D6D524CD344B93395600A5A12B815
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38312e302f32342d3234203d3e203332303433.roa
Signing time: Wed 10 Jun 2026 11:25:07 +0000
ROA not before: Wed 10 Jun 2026 11:20:07 +0000
ROA not after: Wed 09 Jun 2027 11:25:07 +0000
asID: 32043
IP address blocks: 145.79.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ba:33:1f:10:9d:6d:52:4c:d3:44:b9:33:95:60:0a:5a:12:b8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:07 2026 GMT
Not After : Jun 9 11:25:07 2027 GMT
Subject: CN=740E79A550F7836669A3CA13BEFF4157AD4EB796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:e7:04:d4:7d:3a:da:07:e9:cf:c1:20:1f:
8a:14:31:54:aa:4a:f0:cc:d3:2e:2a:9b:13:35:6a:
89:c6:d6:fa:1e:f0:01:9d:98:40:0f:ed:e0:88:86:
99:f8:01:b6:41:20:ea:35:aa:64:af:cb:80:f0:57:
4c:85:70:8a:f4:ff:2f:4e:ba:df:da:10:d8:fb:06:
57:c8:fe:fc:ef:e5:c5:b7:e1:de:9c:77:83:cb:f2:
3b:1e:33:9a:ff:71:e1:9f:51:bd:48:83:23:e8:b8:
f1:8a:a1:28:10:4a:8e:ac:dc:ce:db:40:77:18:2a:
16:3c:6a:57:25:82:b1:22:4d:97:7b:f2:8f:5c:62:
68:bb:34:67:7c:99:4e:f2:bf:37:ff:fd:a4:2f:b7:
76:60:fc:2e:e7:5e:46:0f:03:52:9f:0b:e9:03:37:
86:2a:05:b0:07:63:63:92:37:93:60:8a:e7:e5:a7:
3f:0b:1b:7e:5b:29:2b:26:39:e3:58:23:1f:cf:4c:
46:74:3f:0f:d1:aa:42:2e:95:84:cd:37:8b:4a:64:
9f:8e:5c:ee:06:bf:73:58:45:be:8d:94:e5:27:1b:
7c:2e:d0:0e:fc:9d:1c:99:bc:08:a7:bd:26:b0:32:
e1:34:4c:27:ad:c8:fb:0b:39:82:dc:4c:e4:85:12:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:79:A5:50:F7:83:66:69:A3:CA:13:BE:FF:41:57:AD:4E:B7:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38312e302f32342d3234203d3e203332303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:28:ef:ef:00:5a:e6:10:81:ab:67:00:62:86:68:fe:f9:1d:
85:bb:ad:74:20:5c:d8:e7:17:c5:b4:65:47:f2:60:57:77:cd:
cd:dd:b6:c4:65:a9:cd:a2:32:a6:1a:42:e2:09:98:ff:bd:16:
2c:da:2d:c4:a0:c1:1a:45:ff:2f:f1:85:55:3b:39:6e:06:04:
c7:39:77:2f:d4:87:8e:2c:1c:d9:fa:83:f1:a6:9a:31:ed:21:
89:d7:b7:5a:b2:3b:9b:c0:a1:82:06:35:26:8f:e4:89:51:42:
8a:8a:d9:04:a1:91:2e:44:3f:0e:1a:bb:da:1a:f4:8f:de:e9:
b3:52:61:8d:3f:c1:fe:91:1d:34:5a:cc:68:fa:3f:85:9d:d1:
1c:48:c4:b7:ad:9b:50:e4:67:11:40:35:c4:9d:d2:4d:0b:f9:
47:16:2d:a1:b0:23:9c:d4:8a:57:e9:dd:56:c3:88:4f:9b:67:
3c:a0:13:6a:88:95:37:eb:04:23:ff:bf:5b:7f:a0:f8:f4:77:
23:88:2d:34:ca:01:6f:7c:62:67:6a:47:17:b9:07:b5:fa:a8:
0e:93:15:46:bd:e1:9d:81:46:df:72:43:f5:ae:4f:90:25:b6:
76:0e:56:32:b4:d3:64:0f:6d:7c:0a:97:b4:d8:e1:9f:3d:1c:
af:83:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:24 2026 by rpki-client