Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39302e302f32342d3234203d3e20343031373833.roa
File: 3134352e37392e39302e302f32342d3234203d3e20343031373833.roa (raw, json)
Hash identifier: rMX/Qny/KZIrzYmoLvo3PRFbPo5RStQMVJtLdudwDUM=
Subject key identifier: D3:19:1D:C9:D8:58:4F:08:EF:93:C3:9A:1C:F9:C6:F3:F4:C4:B7:23
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4CDFF26AFC6AC44245ED894F689DE320D4A21BD6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39302e302f32342d3234203d3e20343031373833.roa
Signing time: Thu 04 Jun 2026 20:24:58 +0000
ROA not before: Thu 04 Jun 2026 20:19:58 +0000
ROA not after: Thu 03 Jun 2027 20:24:58 +0000
asID: 401783
IP address blocks: 145.79.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:df:f2:6a:fc:6a:c4:42:45:ed:89:4f:68:9d:e3:20:d4:a2:1b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 20:19:58 2026 GMT
Not After : Jun 3 20:24:58 2027 GMT
Subject: CN=D3191DC9D8584F08EF93C39A1CF9C6F3F4C4B723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:c6:85:bb:a5:4e:ef:ce:f2:34:27:0a:19:
c1:c6:16:d9:cc:8f:8a:18:63:1f:45:08:db:a8:f2:
37:b5:1a:8d:d6:a4:d3:1c:7a:4f:58:34:cb:5d:c5:
8b:9f:85:bb:a2:15:15:0a:94:56:e5:cf:48:c2:f1:
7a:8c:6b:41:71:84:61:d8:0d:6c:82:a3:e1:04:a5:
75:06:42:02:a8:59:23:df:19:3a:cf:2c:6e:fb:bc:
ce:59:9a:fc:8d:0a:80:db:f9:9b:08:b0:ff:86:c5:
25:86:cd:d7:b6:7d:76:09:01:2f:71:3f:25:e2:a5:
60:01:da:aa:08:f4:30:e7:7d:c6:d1:af:f3:f3:f0:
15:e7:47:44:5c:c6:55:65:b9:30:0e:db:c1:f6:bc:
ae:bc:a7:18:14:06:7b:2a:dc:3b:43:85:24:46:21:
a6:8f:55:99:00:57:b6:a4:14:d5:dc:82:56:2b:11:
c7:96:d5:8b:b0:37:e8:83:83:d3:97:6e:d3:ba:39:
67:96:bb:ad:5b:07:f2:9b:ef:e9:39:4a:ae:f5:ac:
a9:36:85:f2:20:84:cb:e2:bb:ac:58:8d:61:2d:2f:
7a:31:34:4c:65:67:84:4a:f1:fb:99:f7:56:5b:5c:
21:03:4f:ec:5e:62:44:02:b5:e8:0f:27:72:64:16:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:1D:C9:D8:58:4F:08:EF:93:C3:9A:1C:F9:C6:F3:F4:C4:B7:23
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39302e302f32342d3234203d3e20343031373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.90.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1d:a5:2c:68:70:c6:1e:e2:59:90:40:f8:a6:50:75:20:d1:
5d:12:03:50:40:5e:8a:ea:98:80:c8:bf:6f:e4:58:5b:30:f0:
92:8e:01:ee:5c:5b:d5:0c:b1:74:ec:d5:b5:74:f6:2d:7d:48:
39:b7:67:4e:88:a6:52:db:76:41:07:34:56:ee:f0:02:1c:81:
e8:c8:da:df:f0:57:6a:03:5c:5f:70:2a:e2:5b:9c:bb:1a:fc:
73:5e:bf:87:2e:ec:d3:15:49:6a:39:e0:17:f1:36:20:82:42:
c7:a7:2b:1d:85:e4:3a:71:f3:41:df:e1:18:cb:03:60:74:ac:
6a:a7:ec:36:b8:9d:19:43:f8:54:74:1d:7f:38:16:b7:09:84:
56:f3:a1:c7:68:ad:84:1d:13:a5:05:ea:61:eb:3e:7e:3e:29:
ec:64:6c:37:04:0b:91:cb:0d:ac:53:9e:17:e5:15:d6:0e:4c:
58:89:b9:44:a1:0a:de:9d:be:91:af:39:b1:15:0a:97:2d:e8:
e5:58:e6:d9:53:ac:65:bb:41:c6:a3:ce:d8:1f:50:63:de:19:
8b:96:d3:7e:75:a2:27:d8:e2:c4:e0:14:ea:b1:1e:19:42:14:
a8:26:b1:ec:02:cb:b6:0c:75:88:14:ee:9f:c7:42:cf:0a:12:
05:49:cc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:03 2026 by rpki-client