Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e2032393134.roa
File: 3134352e37392e38342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: BJM9EcKcmY3R7CKNm3TOlKbaV5kASh6WDlHu49EdF2g=
Subject key identifier: 2B:96:36:58:59:B9:EC:8A:40:36:2B:86:0D:75:47:6F:64:D4:2E:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E11E77D464A7038AAD60C7D03DB4511EC3FFE91
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e2032393134.roa
Signing time: Tue 15 Sep 2026 07:28:56 +0000
ROA not before: Tue 15 Sep 2026 07:23:56 +0000
ROA not after: Tue 14 Sep 2027 07:28:56 +0000
asID: 2914
IP address blocks: 145.79.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:11:e7:7d:46:4a:70:38:aa:d6:0c:7d:03:db:45:11:ec:3f:fe:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 15 07:23:56 2026 GMT
Not After : Sep 14 07:28:56 2027 GMT
Subject: CN=2B96365859B9EC8A40362B860D75476F64D42EC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:ae:ec:aa:b0:1b:7c:e7:8e:c4:aa:2c:f4:
7d:a2:62:65:9f:93:f1:e6:5f:f8:bd:9d:e4:32:0f:
d1:9b:a4:97:02:fa:b8:26:02:5d:87:8a:1a:26:26:
b4:dc:d1:6b:59:55:25:71:af:e9:b3:ea:cb:74:05:
bf:ee:67:17:03:a7:b9:d3:25:5a:e8:64:a3:d6:8f:
0c:d0:33:14:7c:84:0b:8d:a6:5c:67:92:03:5c:73:
74:45:81:36:1b:e3:24:eb:38:0b:24:d3:3c:1c:e9:
7f:0e:ec:72:63:34:a4:ee:88:67:07:21:a4:19:f7:
ed:e7:20:f1:0f:40:bb:be:63:d1:77:bd:0f:3c:6b:
73:0d:ab:5e:e6:cf:3b:34:be:ab:c9:69:ab:c3:cf:
6d:de:83:ec:68:29:7c:86:12:c7:b9:33:df:3a:61:
cf:17:34:b9:07:97:91:38:84:6d:29:18:b8:5d:80:
c6:31:d1:25:b1:1b:08:0f:e5:0d:db:3c:c4:fb:55:
86:a8:a5:d7:33:2a:d3:d7:ce:6a:24:78:c9:df:c2:
1b:d9:c2:d4:24:d5:1e:ec:1d:14:81:f5:14:ff:87:
46:88:b1:7f:78:ca:1f:d6:a8:5b:21:e9:6b:49:43:
f5:14:d4:60:7c:ca:93:9a:5f:e9:ba:7b:a4:fb:29:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:36:58:59:B9:EC:8A:40:36:2B:86:0D:75:47:6F:64:D4:2E:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.84.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4e:7e:7a:53:5f:96:84:2e:16:26:81:2d:1e:2b:83:5b:15:
ee:96:0c:07:78:f1:9e:d8:66:a5:7d:f3:31:6d:06:27:fd:29:
9a:18:71:3f:78:30:d3:e4:34:5b:26:2d:87:5d:6d:5d:c4:3b:
4a:ca:e8:f1:9e:60:9d:c5:d3:fc:60:2e:b0:f1:8f:0b:14:f8:
88:23:e7:10:be:45:ad:5b:0d:85:ca:68:39:ba:0d:5f:2c:5a:
6e:52:19:4b:6c:2b:59:89:54:40:b8:f5:de:96:a8:87:98:bc:
a8:12:fc:a9:46:17:2f:fd:c9:30:fb:a6:2d:83:03:45:f5:b1:
78:56:a5:3c:13:3c:0a:44:34:56:13:19:8e:23:9c:24:32:61:
2d:8f:1f:d9:f1:42:4f:82:ef:f1:00:81:ea:3a:fc:81:8a:47:
a9:bb:16:46:38:4a:2a:5f:88:84:4a:90:6a:60:5a:63:9f:46:
71:a0:49:82:9f:b0:11:3e:61:c4:42:ad:d3:d2:46:5f:42:e5:
a4:3a:55:6f:30:d0:bc:94:3b:f3:f0:42:a0:51:96:51:9e:1e:
86:0d:8c:7f:99:52:be:64:ae:0a:7a:02:8f:a7:fd:c7:9e:93:
68:68:e1:88:e4:13:5b:f6:6e:9b:1c:ff:f0:a3:a7:83:a0:40:
57:f0:a6:c1
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUDhHnfUZKcDiq1gx9A9tFEew//pEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MTUwNzIzNTZaFw0yNzA5MTQwNzI4NTZaMDMxMTAvBgNV
BAMTKDJCOTYzNjU4NTlCOUVDOEE0MDM2MkI4NjBENzU0NzZGNjRENDJFQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKK7sqrAbfOeOxKos9H2iYmWf
k/HmX/i9neQyD9GbpJcC+rgmAl2HihomJrTc0WtZVSVxr+mz6st0Bb/uZxcDp7nT
JVroZKPWjwzQMxR8hAuNplxnkgNcc3RFgTYb4yTrOAsk0zwc6X8O7HJjNKTuiGcH
IaQZ9+3nIPEPQLu+Y9F3vQ88a3MNq17mzzs0vqvJaavDz23eg+xoKXyGEse5M986
Yc8XNLkHl5E4hG0pGLhdgMYx0SWxGwgP5Q3bPMT7VYaopdczKtPXzmokeMnfwhvZ
wtQk1R7sHRSB9RT/h0aIsX94yh/WqFsh6WtJQ/UU1GB8ypOaX+m6e6T7KRaDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUK5Y2WFm57IpANiuGDXVHb2TULsYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT1Qw
DQYJKoZIhvcNAQELBQADggEBAIBOfnpTX5aELhYmgS0eK4NbFe6WDAd48Z7YZqV9
8zFtBif9KZoYcT94MNPkNFsmLYddbV3EO0rK6PGeYJ3F0/xgLrDxjwsU+Igj5xC+
Ra1bDYXKaDm6DV8sWm5SGUtsK1mJVEC49d6WqIeYvKgS/KlGFy/9yTD7pi2DA0X1
sXhWpTwTPApENFYTGY4jnCQyYS2PH9nxQk+C7/EAgeo6/IGKR6m7FkY4SipfiIRK
kGpgWmOfRnGgSYKfsBE+YcRCrdPSRl9C5aQ6VW8w0LyUO/PwQqBRllGeHoYNjH+Z
Ur5krgp6Ao+n/ceek2ho4YjkE1v2bpsc//Cjp4OgQFfwpsE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:42:59 2026 by rpki-client