Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
File: 34352e31302e3231322e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 5EO36acJbg/53sFCokLmtM2q64rOYD2T+Ke+G2iCF64=
Subject key identifier: 80:4B:DA:A3:06:34:BD:9A:F9:B2:A9:01:5D:65:1B:CF:FC:83:22:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77C17AD216B075BAC543BACA0F7E65E5E8DE6455
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
Signing time: Wed 04 Mar 2026 13:23:22 +0000
ROA not before: Wed 04 Mar 2026 13:18:22 +0000
ROA not after: Wed 03 Mar 2027 13:23:22 +0000
asID: 201341
IP address blocks: 45.10.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c1:7a:d2:16:b0:75:ba:c5:43:ba:ca:0f:7e:65:e5:e8:de:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 13:18:22 2026 GMT
Not After : Mar 3 13:23:22 2027 GMT
Subject: CN=804BDAA30634BD9AF9B2A9015D651BCFFC8322B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:37:be:d1:3b:0b:32:72:70:93:90:d0:39:
9f:39:64:fb:a5:08:a4:66:e1:64:6c:d1:2c:e7:a2:
bf:50:ae:66:eb:b7:1f:d4:9f:5b:ee:b3:10:11:33:
08:93:b5:61:57:7b:fd:94:33:8d:c6:fc:7f:29:6a:
30:8a:d1:19:20:da:1c:5d:6e:6e:b8:62:65:ca:ca:
a9:37:c8:b1:27:93:97:95:87:5e:2c:e5:45:c1:a7:
4e:aa:e4:f6:5d:5d:c2:f1:a9:2e:c8:65:9e:31:1f:
9d:47:4c:14:d9:5f:52:87:00:a2:75:18:b5:c6:7b:
6f:df:8d:af:19:ef:77:a1:89:62:02:99:b9:7b:83:
50:a7:5b:11:ef:23:6e:dc:d9:91:1c:c5:84:8e:d0:
6d:b6:a3:8d:88:ed:d0:1a:fd:d6:66:2c:f5:0e:a5:
84:ce:28:34:e8:9c:6e:b6:24:f2:6f:e4:9b:bf:4a:
09:f8:cb:de:cb:55:cf:e9:86:b0:f5:ed:f9:1e:bd:
15:08:12:ef:72:1a:06:61:c6:44:b3:39:46:77:fc:
36:4c:9c:9a:14:25:f4:72:3a:4d:26:71:bf:06:ce:
ed:b5:ab:a3:25:1d:d6:af:2c:b2:27:90:ee:d2:ba:
ab:69:14:be:3b:99:11:3e:d5:6b:2e:4e:85:92:d8:
a8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:DA:A3:06:34:BD:9A:F9:B2:A9:01:5D:65:1B:CF:FC:83:22:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:5b:97:4e:75:64:ae:93:30:a5:03:59:68:fc:ac:cf:df:6d:
4f:05:52:e7:4a:a4:f9:d4:b4:be:a6:3f:2d:3c:42:12:c4:15:
15:64:09:23:ba:d6:a4:29:36:fc:95:53:04:af:c0:4c:3a:19:
0f:1c:17:aa:9c:af:11:07:1a:9c:fb:ee:ea:8a:75:87:9b:09:
46:b3:20:bb:20:6b:13:f6:02:1a:6c:48:63:32:fd:80:34:22:
06:65:cc:8c:38:ee:59:fc:cc:aa:fe:aa:6b:bd:11:48:40:45:
8c:67:34:20:fa:62:d7:78:8b:df:e3:64:30:bb:b2:a3:59:99:
44:9a:85:67:cf:7a:dd:1d:5a:cd:f4:12:af:6d:ea:28:f3:6d:
18:51:3f:65:5c:02:36:ba:19:f0:ea:8c:c1:17:85:6b:92:34:
99:b3:bb:89:6c:a9:21:85:ac:f3:af:a1:a8:ed:dd:5d:90:99:
51:7c:22:f6:0b:0a:f9:bc:3e:99:8b:a4:ea:ae:32:d3:7a:ee:
b8:dc:96:b4:56:59:f1:31:b0:1c:0e:38:c1:fb:04:cd:cc:0a:
19:2f:51:fd:4e:32:ee:e3:93:3a:9f:b8:4f:7d:0b:94:14:88:
a8:8b:34:7a:bd:3d:d6:93:8b:c5:3e:b7:cc:d0:4d:47:0d:70:
ad:06:72:87
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUd8F60hawdbrFQ7rKD35l5ejeZFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMDQxMzE4MjJaFw0yNzAzMDMxMzIzMjJaMDMxMTAvBgNV
BAMTKDgwNEJEQUEzMDYzNEJEOUFGOUIyQTkwMTVENjUxQkNGRkM4MzIyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXje+0TsLMnJwk5DQOZ85ZPul
CKRm4WRs0Sznor9Qrmbrtx/Un1vusxARMwiTtWFXe/2UM43G/H8pajCK0Rkg2hxd
bm64YmXKyqk3yLEnk5eVh14s5UXBp06q5PZdXcLxqS7IZZ4xH51HTBTZX1KHAKJ1
GLXGe2/fja8Z73ehiWICmbl7g1CnWxHvI27c2ZEcxYSO0G22o42I7dAa/dZmLPUO
pYTOKDTonG62JPJv5Ju/Sgn4y97LVc/phrD17fkevRUIEu9yGgZhxkSzOUZ3/DZM
nJoUJfRyOk0mcb8Gzu21q6MlHdavLLInkO7SuqtpFL47mRE+1WsuToWS2KhHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUgEvaowY0vZr5sqkBXWUbz/yDIrEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMDJlMzIzMTMy
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LQrUMA0GCSqGSIb3DQEBCwUAA4IBAQA+W5dOdWSukzClA1lo/KzP321PBVLnSqT5
1LS+pj8tPEISxBUVZAkjutakKTb8lVMEr8BMOhkPHBeqnK8RBxqc++7qinWHmwlG
syC7IGsT9gIabEhjMv2ANCIGZcyMOO5Z/Myq/qprvRFIQEWMZzQg+mLXeIvf42Qw
u7KjWZlEmoVnz3rdHVrN9BKvbeoo820YUT9lXAI2uhnw6ozBF4VrkjSZs7uJbKkh
hazzr6Go7d1dkJlRfCL2Cwr5vD6Zi6TqrjLTeu643Ja0VlnxMbAcDjjB+wTNzAoZ
L1H9TjLu45M6n7hPfQuUFIioizR6vT3Wk4vFPrfM0E1HDXCtBnKH
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:46 2026 by rpki-client