Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39322e302f32342d3234203d3e20333935373933.roa
File: 3134352e37392e39322e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier: e044vKOljqqnKJXynaSXWpRaHZVApz1gM0QL+DjdXII=
Subject key identifier: 30:41:E6:7D:7A:9E:06:89:6A:DA:83:EE:3B:CC:EB:71:F1:35:6A:75
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 653BDF2B7B7901288CEA0E043A34094950F9E165
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39322e302f32342d3234203d3e20333935373933.roa
Signing time: Wed 10 Jun 2026 11:25:05 +0000
ROA not before: Wed 10 Jun 2026 11:20:05 +0000
ROA not after: Wed 09 Jun 2027 11:25:05 +0000
asID: 395793
IP address blocks: 145.79.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3b:df:2b:7b:79:01:28:8c:ea:0e:04:3a:34:09:49:50:f9:e1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 10 11:20:05 2026 GMT
Not After : Jun 9 11:25:05 2027 GMT
Subject: CN=3041E67D7A9E06896ADA83EE3BCCEB71F1356A75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:8b:e8:c6:04:30:b1:1b:6a:66:f8:53:92:
c3:13:bc:f0:51:46:98:2f:97:3b:45:2c:9e:ce:c1:
f2:9d:99:57:9f:73:ee:2e:cb:e1:77:7c:d4:3c:5c:
3d:fc:bf:b1:99:59:d4:99:ed:40:e4:eb:fe:07:bd:
79:5e:9f:cf:b4:a7:02:2b:12:db:3c:71:b1:b3:76:
e7:25:19:09:5f:54:73:3e:56:ff:94:13:23:dd:43:
51:1a:de:5e:0d:22:ce:3a:26:e7:81:b3:5d:b6:68:
3a:d4:c3:59:d4:92:20:d6:00:cc:cc:c5:e4:ad:d8:
ac:77:9f:df:47:9a:5f:6a:ab:f1:67:c0:4d:93:bd:
a9:31:84:36:8f:40:d1:9e:0e:61:06:c1:d6:cf:96:
e9:81:d5:1e:97:e5:3e:0d:9e:19:76:45:11:fe:8e:
c4:ff:76:b6:93:e9:53:99:78:bd:f6:ac:b3:59:ae:
55:84:96:48:ae:dc:20:f1:35:65:a7:44:1b:d3:4b:
29:b4:50:62:71:c6:05:6d:da:e0:04:5c:df:49:1b:
4b:a9:06:fe:7f:c6:0d:be:f0:fc:05:da:19:d8:e5:
43:95:5a:0f:11:6b:e8:bc:5d:d2:c9:85:27:04:76:
fc:bf:8f:b2:04:f6:9f:c3:2e:38:b6:9e:a4:8a:14:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:E6:7D:7A:9E:06:89:6A:DA:83:EE:3B:CC:EB:71:F1:35:6A:75
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e39322e302f32342d3234203d3e20333935373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.92.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e6:bc:88:dc:f2:a0:21:1b:78:8c:b2:7b:77:7b:af:28:f2:
e0:15:b7:15:52:9d:59:85:db:91:06:30:6f:4f:e1:cb:c7:d5:
f6:2e:94:68:92:3e:a3:c2:3e:76:32:8b:5d:40:68:9d:1d:47:
30:cc:61:c7:a5:a9:ef:fa:60:63:f7:35:01:9a:d9:23:62:b9:
a5:0a:53:6e:36:c9:e4:82:97:5a:33:ec:77:28:91:12:82:5c:
7c:9e:74:c6:ca:2e:e9:32:b0:1b:3e:d4:97:d5:ec:ec:8a:3a:
2d:7d:3d:a2:1d:25:a6:b4:5d:39:ac:24:91:fc:c9:2d:46:41:
4b:e5:f1:d4:6c:6a:80:44:38:f3:fe:cc:75:5f:41:25:78:81:
2d:82:81:74:80:80:67:0a:ba:b3:c4:7c:96:e9:97:7c:39:12:
e9:4b:de:66:1a:5f:2f:a0:49:af:33:31:81:27:04:22:e4:70:
1f:bf:f5:56:d4:0d:35:6e:34:92:09:f5:ef:19:ac:cd:4d:17:
fa:e3:bf:48:69:ff:f8:b8:4c:5f:ab:93:54:46:2c:ea:51:4c:
f9:e1:2f:84:aa:73:32:ca:e2:0a:6a:8e:d6:9e:ec:a6:3d:d9:
95:13:ad:7e:d5:a7:2c:ba:01:9e:99:f6:94:d1:48:6e:5e:af:
aa:e4:71:f7
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZTvfK3t5ASiM6g4EOjQJSVD54WUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA2MTAxMTIwMDVaFw0yNzA2MDkxMTI1MDVaMDMxMTAvBgNV
BAMTKDMwNDFFNjdEN0E5RTA2ODk2QURBODNFRTNCQ0NFQjcxRjEzNTZBNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqeIvoxgQwsRtqZvhTksMTvPBR
RpgvlztFLJ7OwfKdmVefc+4uy+F3fNQ8XD38v7GZWdSZ7UDk6/4HvXlen8+0pwIr
Ets8cbGzduclGQlfVHM+Vv+UEyPdQ1Ea3l4NIs46JueBs122aDrUw1nUkiDWAMzM
xeSt2Kx3n99Hml9qq/FnwE2TvakxhDaPQNGeDmEGwdbPlumB1R6X5T4Nnhl2RRH+
jsT/draT6VOZeL32rLNZrlWElkiu3CDxNWWnRBvTSym0UGJxxgVt2uAEXN9JG0up
Bv5/xg2+8PwF2hnY5UOVWg8Ra+i8XdLJhScEdvy/j7IE9p/DLji2nqSKFDE1AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUMEHmfXqeBolq2oPuO8zrcfE1anUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzOTMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kU9cMA0GCSqGSIb3DQEBCwUAA4IBAQBy5ryI3PKgIRt4jLJ7d3uvKPLgFbcVUp1Z
hduRBjBvT+HLx9X2LpRokj6jwj52MotdQGidHUcwzGHHpanv+mBj9zUBmtkjYrml
ClNuNsnkgpdaM+x3KJESglx8nnTGyi7pMrAbPtSX1ezsijotfT2iHSWmtF05rCSR
/MktRkFL5fHUbGqARDjz/sx1X0EleIEtgoF0gIBnCrqzxHyW6Zd8ORLpS95mGl8v
oEmvMzGBJwQi5HAfv/VW1A01bjSSCfXvGazNTRf6479Iaf/4uExfq5NURizqUUz5
4S+EqnMyyuIKao7WnuymPdmVE61+1acsugGemfaU0UhuXq+q5HH3
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:10:57 2026 by rpki-client