Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38332e302f32342d3234203d3e20323034313730.roa
File: 34352e31312e38332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: tJ28E/ba5OfUalnhlAVcRGh708UAcQ//YJcItaef22M=
Subject key identifier: 19:83:D3:E1:79:61:C3:7D:03:97:2F:82:81:18:2A:6A:78:84:2D:F3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78C032D08D06E427A32784296B896FF37D729EC6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38332e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 28 Apr 2026 23:23:56 +0000
ROA not before: Tue 28 Apr 2026 23:18:56 +0000
ROA not after: Tue 27 Apr 2027 23:23:56 +0000
asID: 204170
IP address blocks: 45.11.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c0:32:d0:8d:06:e4:27:a3:27:84:29:6b:89:6f:f3:7d:72:9e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 28 23:18:56 2026 GMT
Not After : Apr 27 23:23:56 2027 GMT
Subject: CN=1983D3E17961C37D03972F8281182A6A78842DF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:bf:51:98:1d:78:92:ce:f8:04:81:93:24:
fd:01:30:c8:7d:a0:78:38:52:53:be:a4:c5:f7:a4:
ec:62:07:52:3e:b2:67:49:3f:ae:8f:55:3c:44:c0:
92:f9:4d:97:88:4c:51:d8:30:a1:5b:ae:1c:b3:2d:
d5:4d:67:37:1e:5c:08:3f:d7:85:94:e8:8d:7a:84:
6e:89:8e:df:8d:5a:4a:b6:96:4a:8d:33:53:2b:be:
1f:fc:a6:c1:22:b1:1b:da:c2:46:6d:ff:4e:6f:ad:
d4:6e:0b:28:e1:06:37:e6:ad:d5:16:8c:1a:ea:cc:
5c:e9:de:1f:bf:69:1f:f8:a6:85:bb:1f:63:48:7f:
af:bf:b6:b1:6e:da:b8:0f:08:56:dc:8b:c0:60:73:
2a:14:85:79:c7:0b:2f:53:5c:60:08:2b:a3:37:92:
17:55:9f:28:30:7f:34:db:a0:22:0c:87:ef:26:df:
a6:60:51:8d:41:0b:d7:1c:0c:dc:4f:aa:ba:d5:41:
0c:44:bd:fc:47:4b:61:43:6c:8d:d0:93:93:b1:91:
9f:36:b9:24:20:d9:5a:2a:78:fb:ea:60:ad:df:9a:
f2:25:a1:34:e4:2d:a9:6f:b0:8e:c1:07:1b:e6:04:
a6:94:64:f0:ac:2b:83:32:61:1d:fb:1d:6c:48:7f:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:83:D3:E1:79:61:C3:7D:03:97:2F:82:81:18:2A:6A:78:84:2D:F3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f6:70:4c:5c:9b:39:f1:73:70:30:73:e6:9f:a1:a3:fd:fb:
55:b3:c9:f1:02:a0:84:db:67:46:5b:d9:05:16:5c:6c:aa:5b:
79:51:81:56:b5:3c:05:3d:ad:ec:84:05:4f:10:c9:d5:b6:a2:
82:6d:f7:77:68:b2:c4:9e:a8:3b:ef:d1:eb:ed:f0:0d:1a:d1:
a5:e5:76:6a:15:7e:c3:fe:31:ef:7a:80:60:ce:37:3d:b2:ab:
c8:0a:39:cf:7e:bc:95:77:b1:12:35:56:03:3e:aa:61:df:4a:
b3:57:41:c3:1e:59:83:98:02:8e:a1:17:a6:29:e0:10:14:f7:
29:ad:9e:74:07:de:ec:f5:c7:a2:8b:d4:c9:44:f6:17:dd:6b:
fa:69:6f:60:cd:fa:e5:3e:0e:7e:0f:b0:0d:f4:09:02:15:09:
be:ab:59:58:75:61:88:10:c1:cc:1f:22:b2:14:87:0e:21:ff:
0e:5a:4b:f7:ef:40:49:90:d6:94:85:1d:36:e6:8d:0c:b9:4f:
10:c6:ee:4e:c6:82:60:03:c2:d1:7d:49:ec:97:76:3d:c4:2f:
92:6c:f1:65:8e:9d:c4:c3:3f:43:3f:0e:9f:8e:b7:22:07:f2:
63:17:38:7a:d6:df:6e:a5:50:e3:0a:70:82:bb:32:3b:54:5c:
75:bf:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:48 2026 by rpki-client