Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20323132323338.roa
File: 34352e3133342e3138382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: wp6fmRC+cVxB7dGOv3COrZxGkhb7W63bPHESJLx3f0U=
Subject key identifier: F3:9A:A5:18:D5:BD:38:38:4C:22:53:54:CD:23:05:66:00:99:B3:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 54060F163DE357D4E60E9FD983B7394307447BD9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:10 +0000
ROA not before: Tue 22 Sep 2026 13:24:10 +0000
ROA not after: Tue 21 Sep 2027 13:29:10 +0000
asID: 212238
IP address blocks: 45.134.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:06:0f:16:3d:e3:57:d4:e6:0e:9f:d9:83:b7:39:43:07:44:7b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:10 2026 GMT
Not After : Sep 21 13:29:10 2027 GMT
Subject: CN=F39AA518D5BD38384C225354CD2305660099B3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:d1:b3:43:3b:93:3b:39:97:d6:82:6e:02:
eb:74:57:db:25:83:90:e5:b1:7f:60:a7:2a:67:5c:
bc:60:f2:db:b4:b9:fb:05:ca:a1:27:7c:7e:68:c5:
6b:0d:d6:07:e4:a5:be:fe:f2:f1:2c:87:23:b7:0f:
6f:7c:bd:6d:fc:38:9b:cf:a5:7d:5a:4a:82:e8:38:
60:42:51:2a:64:b0:27:78:58:d2:05:16:5a:fb:60:
55:a3:1d:e9:7b:89:65:d5:ff:95:f2:50:e4:0e:b7:
7b:98:50:ed:4c:cf:c5:28:7c:23:2a:d1:31:73:5d:
2e:56:a2:7b:59:67:cb:e5:27:fe:ec:fa:f6:67:47:
6d:65:ac:71:b3:97:e6:83:99:09:3b:a9:15:2c:d6:
b9:03:61:0d:15:fe:08:96:24:5a:07:24:bb:4a:24:
03:d7:85:dd:7d:fc:2f:9e:3d:9c:ab:63:e4:f7:b2:
8f:24:72:59:10:17:77:88:37:76:42:f8:2c:f2:0d:
0f:25:01:d4:1d:1c:f7:86:f2:b2:d2:66:60:d3:3a:
19:68:f1:61:54:b5:a2:b5:52:21:42:f3:79:37:cd:
de:62:49:e9:58:d4:9f:bb:6c:d4:4b:ae:d8:7e:f0:
7a:8a:7b:50:46:4a:7e:38:68:d9:fe:9e:fb:f2:15:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:A5:18:D5:BD:38:38:4C:22:53:54:CD:23:05:66:00:99:B3:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:56:c2:be:94:4b:29:34:79:12:4a:b8:0e:e3:73:8a:81:96:
fb:35:80:99:67:d1:b9:81:0c:f3:8e:bb:a5:dc:e6:a7:bf:df:
20:f4:58:3e:c8:53:c6:cc:89:59:cb:03:d6:e3:87:7f:41:a4:
84:da:0d:22:21:fe:94:dd:97:15:53:1c:82:ab:19:30:34:47:
80:6a:cb:45:4a:00:61:aa:d9:92:6c:50:9e:dd:a4:30:a4:7e:
41:98:14:21:d6:2b:d7:a8:bd:82:1c:a8:af:57:a7:97:dd:68:
bf:f6:2a:e0:49:4f:c0:37:98:9d:d9:bd:03:f8:cc:f2:33:76:
5f:1f:39:67:13:eb:f1:cc:26:b4:a0:8b:0f:b7:98:4c:49:1a:
b1:66:19:11:83:d0:49:85:6a:73:31:83:26:cd:df:e0:1e:d3:
5b:d6:a9:76:b5:47:2d:97:dc:c4:8f:60:03:39:08:6b:ba:d9:
7b:aa:0a:b0:5c:01:76:c9:73:2c:b1:00:df:29:6b:b2:0c:7a:
50:cc:fa:73:6d:e7:1d:98:b3:fa:0d:64:f7:13:eb:56:1c:2f:
3e:10:72:28:31:ee:0d:95:f5:54:8f:4c:47:5a:89:16:6f:4d:
eb:62:b1:d8:3a:e8:ad:5d:cc:12:1e:31:58:df:fa:ad:b3:60:
fe:07:95:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:42:05 2026 by rpki-client