Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
File: 34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xJnsaaAhjTI1vuBjAbXCDg4RaP16G95FQ3t83hOXLZw=
Subject key identifier: 76:5D:3C:C1:67:A2:7B:F8:8B:73:B1:03:73:CC:87:DF:B3:35:70:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2680A46F32175D2EAB9433D811204DC3CBD83BD1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:31 +0000
ROA not before: Fri 30 Oct 2026 20:27:31 +0000
ROA not after: Fri 29 Oct 2027 20:32:31 +0000
asID: 136787
IP address blocks: 45.134.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:80:a4:6f:32:17:5d:2e:ab:94:33:d8:11:20:4d:c3:cb:d8:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:31 2026 GMT
Not After : Oct 29 20:32:31 2027 GMT
Subject: CN=765D3CC167A27BF88B73B10373CC87DFB3357069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:82:ae:16:18:9a:3a:84:0c:ae:ce:e3:0f:
c6:2f:05:c7:bb:d6:fc:b1:61:3c:c7:48:f4:4a:e7:
27:17:58:7f:68:5b:0b:9f:50:14:b8:d0:f4:8d:c2:
dd:b9:94:67:47:d8:a1:26:fe:fd:91:71:b6:d6:99:
89:f9:d7:83:8b:b5:5b:7a:ed:48:1b:d8:14:c8:86:
e7:d8:51:c6:15:70:a7:22:e8:af:58:37:7d:52:02:
db:f4:62:4e:93:97:16:86:c0:bf:55:71:d4:3e:a2:
46:37:44:0c:dd:00:0a:f7:3b:d8:27:22:0a:aa:17:
90:c7:21:14:a7:14:3f:ec:dc:25:d0:dd:f5:54:b6:
5b:d5:74:15:a2:4b:a8:37:d6:52:15:e8:1c:92:dd:
ea:43:02:7c:df:bd:86:db:e2:19:71:dd:9a:b1:5e:
10:b8:83:08:b6:d9:18:ec:fc:28:9b:c7:50:8a:01:
e5:3e:fa:6e:8e:99:a8:d5:33:98:f8:79:42:f7:ac:
a2:7c:fe:e0:a0:7b:21:9d:1a:50:af:04:82:9a:c2:
91:64:00:d8:7e:ce:f9:9c:0f:ab:3c:91:33:b1:9f:
b7:d3:98:c7:74:cf:29:ee:5c:c6:02:fd:c2:d4:c0:
65:ed:86:ed:28:e4:80:52:eb:b7:2c:06:32:84:43:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5D:3C:C1:67:A2:7B:F8:8B:73:B1:03:73:CC:87:DF:B3:35:70:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1a:66:ab:a3:4c:0e:79:e5:4f:5f:68:c5:9a:54:88:2d:9d:
c6:d9:42:46:58:04:dc:1d:48:6e:e5:cb:35:4f:3a:96:e5:34:
e9:c5:50:25:48:bf:8e:3a:e2:ac:c8:a0:5e:50:ef:c1:2b:25:
a2:e0:81:9a:c6:73:8d:9c:d4:78:29:0e:f4:0b:95:17:55:48:
ac:de:6b:e5:d6:2d:49:8a:2b:24:c1:b7:ca:93:07:c1:04:08:
ed:1d:a5:de:85:93:da:bc:09:26:b3:8d:49:44:ed:93:02:25:
75:c3:95:13:24:05:04:e4:97:5d:f5:83:7d:a0:cc:62:b7:b1:
94:94:17:5a:5b:54:1b:d4:f2:a3:0a:cd:59:7b:6c:9a:00:54:
fe:b4:7e:80:84:b8:46:ee:5e:1d:03:22:2e:6c:e3:1a:46:82:
71:05:a7:9f:ba:3b:44:25:af:3a:cf:fc:bc:2c:7a:a2:e2:52:
06:f4:aa:c3:e3:f1:bd:5d:1e:8a:c9:a1:00:8a:0b:76:fb:50:
f3:a0:1a:b0:44:7f:70:eb:fd:0e:56:68:be:7b:a4:79:31:14:
b0:f2:0f:0b:7c:7f:d5:49:d8:e2:40:64:24:63:2e:ee:e0:3a:
d8:50:d6:07:ff:59:88:48:04:1f:0d:3c:e8:89:cf:29:3c:9e:
36:97:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:12:32 2026 by rpki-client