Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e38332e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: 68wsaJvvt2jFj174SDeIFTSVrdChLaOogzI76Q/iNQM=
Subject key identifier: 81:C2:12:1D:3D:C4:10:47:BA:83:15:57:59:AB:FB:27:CE:5C:C1:BD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 53282463AEFF8BDB256E327D2B4D21E9646021A2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20333935373933.roa
Signing time: Tue 04 Aug 2026 14:27:36 +0000
ROA not before: Tue 04 Aug 2026 14:22:36 +0000
ROA not after: Tue 03 Aug 2027 14:27:36 +0000
asID: 395793
IP address blocks: 145.79.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:28:24:63:ae:ff:8b:db:25:6e:32:7d:2b:4d:21:e9:64:60:21:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 4 14:22:36 2026 GMT
Not After : Aug 3 14:27:36 2027 GMT
Subject: CN=81C2121D3DC41047BA83155759ABFB27CE5CC1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:56:17:3e:70:58:e7:55:10:95:3e:2c:2d:
b1:59:f7:e0:66:e5:b3:1d:19:7f:7d:a3:f5:63:ae:
c9:2f:64:3e:85:6e:b3:c4:10:ac:1e:ad:2d:dc:c1:
33:40:8d:d0:fa:48:72:73:83:3c:65:f8:b4:d2:d6:
83:64:b9:74:1c:ab:f6:d1:83:53:8b:fe:f5:5d:49:
e1:01:9a:ab:bd:cb:e0:a8:7c:4f:40:44:da:1e:15:
02:02:8d:61:d8:78:d2:36:f0:c8:f6:6c:1d:87:c5:
b1:69:90:d1:87:34:c7:58:0a:34:af:cd:3f:87:bf:
61:c0:1d:9f:fe:bb:f8:3b:e9:21:f2:87:01:e1:95:
82:24:1d:da:e4:79:cb:f0:7d:3b:dc:01:21:72:c7:
cd:1c:b5:f8:81:0d:25:ff:24:b6:82:d7:6f:85:39:
ac:fb:ab:07:4d:19:0a:7f:f7:60:7d:37:fd:56:08:
1b:9e:00:09:f8:7f:51:6d:bc:5d:0e:31:99:d0:e3:
81:42:9a:40:1e:01:46:10:6d:0b:2d:ca:82:79:08:
a5:9d:fd:ab:c6:55:07:91:e3:68:5a:4f:1a:48:47:
ea:2f:da:d6:aa:68:b2:4e:ca:5d:1c:65:dc:03:0d:
d4:cd:7e:48:60:2c:24:42:ce:46:43:9b:9c:c3:2c:
20:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:12:1D:3D:C4:10:47:BA:83:15:57:59:AB:FB:27:CE:5C:C1:BD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38332e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.83.0/24
Signature Algorithm: sha256WithRSAEncryption
17:52:9a:68:df:29:bf:f9:e4:23:7a:87:60:fc:3f:84:13:cb:
a8:b5:0d:54:ee:76:09:69:d5:63:09:52:bf:8b:5d:4c:e1:85:
fc:41:f1:b6:27:fa:86:87:b8:31:0c:89:4a:75:d1:19:0a:6a:
db:be:69:f8:de:41:47:37:c8:5d:13:5f:21:1d:55:bb:0e:e8:
cb:43:cd:2a:d0:f4:0d:0a:5d:3a:5e:f6:49:21:ad:ca:52:6e:
7c:99:e6:d3:0d:5c:b0:45:59:5c:5a:41:9b:0a:38:57:db:95:
b8:19:3a:e0:6d:53:cf:78:56:ac:51:a9:9e:04:4c:38:3e:db:
bb:30:46:e7:8a:c1:76:1d:c8:b9:36:4d:de:be:da:98:ae:22:
3c:81:5c:d0:16:51:67:a8:48:6b:30:9c:aa:7a:8e:ab:91:74:
6e:89:4d:d0:3b:52:34:02:65:cf:3a:14:15:33:a5:a2:35:1e:
41:9f:f7:f1:96:db:c1:2b:a9:a1:1c:d6:02:19:62:ed:31:51:
e5:ca:0a:47:6f:8d:c7:ea:07:ee:ab:ed:92:9a:87:72:8f:9b:
a8:8c:a9:a4:40:f0:95:b6:c1:16:bf:1e:ec:c8:b2:e6:71:9b:
e0:ef:56:4b:b1:3a:fc:fb:36:41:86:f3:6e:2c:1f:95:23:d5:
f1:2b:06:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:38:11 2026 by rpki-client