Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38302e302f32342d3234203d3e20313336373837.roa
File: 34352e31312e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eniALH3KnXE05b8WKAgxsrpYFiTKhc9iRTe/ZbnIL3c=
Subject key identifier: D5:B2:9B:46:9A:8F:B5:8C:7F:E8:C7:A4:08:B9:AC:2C:E4:7A:06:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 25F9210D6288620937682BEA84B56B04192C1226
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:26:02 +0000
ROA not before: Wed 01 Jul 2026 15:21:02 +0000
ROA not after: Wed 30 Jun 2027 15:26:02 +0000
asID: 136787
IP address blocks: 45.11.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:f9:21:0d:62:88:62:09:37:68:2b:ea:84:b5:6b:04:19:2c:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:02 2026 GMT
Not After : Jun 30 15:26:02 2027 GMT
Subject: CN=D5B29B469A8FB58C7FE8C7A408B9AC2CE47A06D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:96:66:cd:1c:48:65:67:7f:aa:c5:7e:c3:
b6:ef:0c:f9:d9:79:21:43:79:8f:e0:34:d0:dc:3f:
f2:ae:37:e8:6e:28:2e:c2:74:ea:cd:41:02:84:01:
9b:98:4b:6e:84:0f:a1:5c:77:92:90:e4:98:b8:0e:
51:77:12:63:b0:58:b9:7c:21:69:42:d4:9d:14:27:
2c:3e:48:42:36:08:8b:4c:b2:e3:3f:ad:42:8f:8f:
50:25:0a:d5:f3:31:31:d9:11:11:af:7f:01:e0:f5:
28:f2:cd:99:76:f7:fe:42:bd:88:8b:33:c8:00:4f:
c7:ef:d9:36:45:7e:17:98:67:a9:b9:eb:b7:e1:76:
26:00:ac:a6:49:1f:53:ee:7c:fe:e7:17:97:f3:79:
fb:55:69:8c:8d:63:4d:d5:11:f0:33:34:3d:e5:fd:
01:f6:c7:0e:97:da:41:c6:f9:11:9c:f5:78:3c:64:
98:18:7f:9d:ae:ac:77:6f:bb:bd:98:66:47:f8:d8:
2b:41:60:68:1b:29:60:a6:db:ab:24:cb:dc:67:64:
82:86:cd:26:2d:3d:fa:4b:5a:e3:b4:b8:6b:0e:3b:
e4:1f:4b:57:37:8d:6f:0d:67:37:6f:b0:a4:31:39:
6d:72:b9:fb:51:92:c8:8b:04:28:2c:78:53:84:04:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:9B:46:9A:8F:B5:8C:7F:E8:C7:A4:08:B9:AC:2C:E4:7A:06:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.80.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7e:44:72:00:53:03:8f:64:91:5a:40:70:1d:a2:fb:ba:d4:
03:35:74:12:0e:6b:dd:ef:14:a4:59:70:00:d5:4f:f0:80:a3:
4b:9b:c0:cd:e6:5e:c5:a0:98:5e:69:02:fc:c3:05:3d:f5:0e:
02:55:c0:38:fb:62:92:73:ea:0e:4b:bd:10:db:58:a5:64:71:
c6:72:07:71:b2:bc:31:e2:ac:6e:77:41:74:2f:15:69:bf:79:
ac:a9:35:f0:5d:a6:51:37:40:1d:2f:e5:80:f4:d0:5a:f3:2d:
93:49:86:9e:f5:cd:70:c4:b2:d7:b2:04:e7:52:da:97:e8:6e:
e1:4a:f9:dc:72:91:0a:cf:00:1c:67:43:40:4b:79:ba:7f:68:
b8:4d:66:50:fe:5b:07:a0:6d:13:b6:61:e2:ec:8b:f3:0e:98:
fe:19:95:3d:02:ac:f9:ef:87:98:dd:92:bd:73:4c:59:34:2e:
a7:49:dd:99:e8:24:ee:2c:a1:47:d4:31:2f:7d:78:a1:fe:a8:
0e:c7:80:b5:5f:70:5b:9b:db:49:d3:53:c9:57:2e:b4:86:c9:
72:38:61:e6:05:20:77:fc:8e:c7:e7:7f:6e:56:7b:be:9f:34:
35:ef:e7:5f:71:61:55:ea:5b:68:0f:2d:81:52:5f:c9:88:4f:
9c:26:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:06 2026 by rpki-client