Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133322e37322e302f32342d3234203d3e203633343733.roa
File: 34352e3133322e37322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: eWCPgfBYziE0MU4IFnEKjPFoSC0LKoXei18FF6PC2bE=
Subject key identifier: 4A:14:AF:61:BA:B5:FB:26:A9:51:14:99:25:99:B7:CE:5A:68:AB:42
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 755506588807F589A631CC9FD1E4A5D7352A1604
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133322e37322e302f32342d3234203d3e203633343733.roa
Signing time: Mon 06 Oct 2025 10:47:49 +0000
ROA not before: Mon 06 Oct 2025 10:42:49 +0000
ROA not after: Mon 05 Oct 2026 10:47:49 +0000
asID: 63473
IP address blocks: 45.132.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:55:06:58:88:07:f5:89:a6:31:cc:9f:d1:e4:a5:d7:35:2a:16:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 6 10:42:49 2025 GMT
Not After : Oct 5 10:47:49 2026 GMT
Subject: CN=4A14AF61BAB5FB26A95114992599B7CE5A68AB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:07:8f:16:ae:64:ba:86:ec:2d:51:1e:c6:
ac:92:91:25:04:2b:4d:47:41:de:aa:91:9c:93:83:
e3:d0:a0:d7:d5:82:9b:47:87:d9:cf:cc:2c:c4:78:
02:68:3e:fd:20:46:dc:03:22:6c:95:75:f9:a2:f6:
10:07:62:5c:2a:a1:77:e6:55:91:8c:9c:44:75:8d:
c0:f1:9a:fa:06:0a:b1:af:9a:07:47:bb:8d:6f:83:
54:e8:a1:6b:7d:0d:2a:5b:ad:31:1a:ea:10:8d:87:
8d:8c:cb:ad:10:41:49:41:f0:73:36:57:40:48:c6:
36:7a:e8:20:00:c1:a4:25:83:66:9c:34:32:cb:9f:
0d:74:21:a9:98:fb:6f:1d:fc:60:87:8f:ba:e6:c1:
c5:c4:54:21:da:ae:0f:11:6c:35:4f:0c:77:bd:00:
dc:8f:b8:55:d4:a8:06:b2:7e:ea:50:c1:f6:78:c6:
67:7a:df:3b:8f:ba:e3:09:47:4a:ce:d5:26:ad:58:
fb:0e:52:c8:e0:6f:6c:bc:23:43:38:c3:75:c4:09:
1a:7b:74:14:49:25:c3:84:6d:1e:7b:2e:3d:4f:93:
9a:cc:70:1f:e9:ef:36:c2:99:b4:12:c7:45:73:02:
df:17:81:0f:c5:63:3b:73:97:7b:85:8c:3c:52:ef:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:AF:61:BA:B5:FB:26:A9:51:14:99:25:99:B7:CE:5A:68:AB:42
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133322e37322e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.72.0/24
Signature Algorithm: sha256WithRSAEncryption
36:89:30:3b:6e:38:18:c4:1c:2e:fc:2a:3e:56:76:23:63:07:
66:2f:e7:95:24:90:4e:eb:44:99:1b:ad:b0:e3:78:15:e0:fa:
ea:7b:80:8d:3b:c8:b7:e9:9a:1b:c1:f6:ff:e3:35:df:b2:46:
c7:17:a7:63:7f:b1:93:59:58:39:22:d9:2f:45:90:c7:d6:3a:
6b:a7:4b:e5:80:ea:76:27:97:90:3d:bc:15:01:5b:fd:8f:2f:
45:bf:37:6b:4e:5c:5c:3b:4b:8b:71:26:11:ce:24:16:db:a0:
24:3c:38:99:1d:28:55:d6:48:ca:d7:8b:31:43:c1:bb:c0:8f:
d5:ac:67:06:33:65:8d:30:1c:3b:71:e5:cb:d0:5d:fe:61:98:
03:b2:c0:19:9d:6b:c6:3b:96:b7:07:b1:8d:f2:e9:07:4d:c1:
ed:a2:b1:67:da:75:df:2a:c3:16:7f:2b:09:6c:51:87:fe:42:
4f:2d:89:c8:24:24:dc:5e:86:48:2d:d0:1a:34:df:fc:86:e0:
85:99:40:4a:66:7e:6b:55:49:d4:4f:d8:7e:ed:ae:d1:65:ac:
47:ab:0d:ee:03:b0:5c:e2:9b:d2:a6:27:0f:32:32:c1:16:59:
b7:ad:84:e4:4f:ea:aa:fa:b0:78:81:14:75:69:f2:0e:5f:22:
d6:08:09:7e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdVUGWIgH9YmmMcyf0eSl1zUqFgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMDYxMDQyNDlaFw0yNjEwMDUxMDQ3NDlaMDMxMTAvBgNV
BAMTKDRBMTRBRjYxQkFCNUZCMjZBOTUxMTQ5OTI1OTlCN0NFNUE2OEFCNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pwePFq5kuobsLVEexqySkSUE
K01HQd6qkZyTg+PQoNfVgptHh9nPzCzEeAJoPv0gRtwDImyVdfmi9hAHYlwqoXfm
VZGMnER1jcDxmvoGCrGvmgdHu41vg1TooWt9DSpbrTEa6hCNh42My60QQUlB8HM2
V0BIxjZ66CAAwaQlg2acNDLLnw10IamY+28d/GCHj7rmwcXEVCHarg8RbDVPDHe9
ANyPuFXUqAayfupQwfZ4xmd63zuPuuMJR0rO1SatWPsOUsjgb2y8I0M4w3XECRp7
dBRJJcOEbR57Lj1Pk5rMcB/p7zbCmbQSx0VzAt8XgQ/FYztzl3uFjDxS751BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUShSvYbq1+yapURSZJZm3zlpoq0IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzMyMmUzNzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM0MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2E
SDANBgkqhkiG9w0BAQsFAAOCAQEANokwO244GMQcLvwqPlZ2I2MHZi/nlSSQTutE
mRutsON4FeD66nuAjTvIt+maG8H2/+M137JGxxenY3+xk1lYOSLZL0WQx9Y6a6dL
5YDqdieXkD28FQFb/Y8vRb83a05cXDtLi3EmEc4kFtugJDw4mR0oVdZIyteLMUPB
u8CP1axnBjNljTAcO3Hly9Bd/mGYA7LAGZ1rxjuWtwexjfLpB03B7aKxZ9p13yrD
Fn8rCWxRh/5CTy2JyCQk3F6GSC3QGjTf/IbghZlASmZ+a1VJ1E/Yfu2u0WWsR6sN
7gOwXOKb0qYnDzIywRZZt62E5E/qqvqweIEUdWnyDl8i1ggJfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:56 2025 by rpki-client