Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e20343031373833.roa
File: 3134352e37392e38342e302f32342d3234203d3e20343031373833.roa (raw, json)
Hash identifier: k3J1JxMCcNj3NS2pCup+K1w5JaDkFKDtt9nmm/eTtRQ=
Subject key identifier: 74:F1:11:78:99:56:6D:23:18:8E:E3:BA:79:AF:A7:35:53:60:1E:C1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1AFE21D8E68875D64C39CC26827DCB940DF7FEA1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e20343031373833.roa
Signing time: Thu 04 Jun 2026 20:24:58 +0000
ROA not before: Thu 04 Jun 2026 20:19:58 +0000
ROA not after: Thu 03 Jun 2027 20:24:58 +0000
asID: 401783
IP address blocks: 145.79.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fe:21:d8:e6:88:75:d6:4c:39:cc:26:82:7d:cb:94:0d:f7:fe:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 20:19:58 2026 GMT
Not After : Jun 3 20:24:58 2027 GMT
Subject: CN=74F1117899566D23188EE3BA79AFA73553601EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:65:80:10:be:b5:15:14:9d:df:32:61:66:
46:a4:60:81:74:b1:d0:17:31:79:d3:31:28:c2:4d:
33:bd:e0:5a:e7:aa:5c:fe:90:23:ee:2d:08:dd:11:
a8:7f:b1:09:94:61:ee:c6:b3:b1:15:3f:85:77:95:
36:37:88:42:b1:e8:c0:43:f1:e4:9a:8a:f1:70:0e:
00:c3:75:85:19:ce:ec:62:c5:5d:74:dc:fc:b8:72:
d8:2b:37:e3:f0:96:59:53:14:49:60:71:cb:2c:a1:
19:a9:20:19:39:a0:df:89:d5:c9:b5:30:a4:55:02:
a6:26:5a:72:10:4a:98:a8:e2:5d:11:42:b9:f5:ce:
ef:cd:71:22:8b:09:cb:db:9c:d0:f0:b9:bf:42:70:
88:d0:00:30:2a:bf:a7:06:d5:dc:11:70:1d:4b:cd:
17:83:3f:e9:b5:c4:ce:3d:be:ef:b9:49:e6:0e:8c:
5f:2a:df:36:50:bc:c7:ba:14:6b:28:68:8e:f4:b1:
3a:27:40:14:e1:f2:30:97:7d:c9:bc:c5:92:77:6a:
3b:f5:8a:11:4e:f3:00:e1:c8:4d:79:14:88:97:37:
5a:18:82:a1:50:c7:a4:d8:23:bc:18:2a:68:aa:c0:
70:69:a3:67:d1:10:14:aa:7a:6f:d7:03:fb:d9:70:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:11:78:99:56:6D:23:18:8E:E3:BA:79:AF:A7:35:53:60:1E:C1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e38342e302f32342d3234203d3e20343031373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b9:24:bb:84:81:d8:f9:ce:3c:da:3c:eb:08:eb:a3:77:85:
8a:97:7f:8a:a9:6a:07:22:8a:ac:38:5e:8d:64:c9:79:d2:01:
0f:37:f6:42:48:ff:c6:8b:76:e3:17:cf:84:f4:30:b1:99:f7:
25:67:43:f7:53:3a:5b:11:8b:5d:5a:db:12:b5:0b:c7:63:e2:
69:b6:9d:2e:55:5d:ba:3e:cb:91:e4:0d:30:18:f5:fa:05:7f:
a4:07:90:4a:bb:7c:f7:91:1d:c8:bc:c5:6c:7b:24:96:33:8b:
2b:13:fe:35:eb:d7:5b:41:82:ca:f6:f2:49:66:89:93:c2:8f:
44:34:b7:83:ea:7f:89:e4:d2:7b:80:da:1c:1a:35:08:70:2d:
3c:fc:55:03:86:e7:b1:6f:d4:49:81:f7:af:01:97:31:9b:ec:
d0:6b:c7:77:45:97:ba:f4:0c:84:a0:68:e2:4e:59:98:97:f4:
9c:dc:67:7e:71:c2:b0:aa:e2:06:ee:08:3a:07:f5:42:1c:9a:
b4:99:41:8c:c3:17:b0:e4:58:83:81:fa:a2:5e:13:d4:d5:09:
82:2b:3b:35:d6:d0:05:2d:16:56:9b:c6:ba:32:72:01:b2:48:
ef:9c:ae:1a:ca:6f:11:79:48:93:bf:1f:07:fb:46:83:45:bd:
76:ed:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:54:50 2026 by rpki-client