Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
File: 34352e3133372e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: FVJv25W7C3TYLH490Dd/MMzfks5mswR+KZcJeev9Lnc=
Subject key identifier: D1:76:90:1F:CF:A6:5C:A6:D7:39:4F:2C:C5:CA:16:37:A2:94:DD:69
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 090E98AC6DB4298E972B02E22B55F9886D3C48E6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:39 +0000
ROA not before: Fri 30 Oct 2026 20:27:39 +0000
ROA not after: Fri 29 Oct 2027 20:32:39 +0000
asID: 136787
IP address blocks: 45.137.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 23:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0e:98:ac:6d:b4:29:8e:97:2b:02:e2:2b:55:f9:88:6d:3c:48:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:39 2026 GMT
Not After : Oct 29 20:32:39 2027 GMT
Subject: CN=D176901FCFA65CA6D7394F2CC5CA1637A294DD69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:78:d2:56:97:20:10:9a:eb:90:1b:89:49:
e4:25:86:02:11:bf:46:7d:79:44:c2:c9:81:dd:5c:
8c:e0:c5:50:f0:1a:1a:05:b2:d3:c5:b5:ac:84:39:
c5:83:64:08:8d:af:19:25:92:87:83:1b:ae:95:96:
8f:f0:41:8f:0f:df:ea:4e:0a:09:72:48:09:d9:70:
4f:ea:76:7c:cf:b1:0a:d6:34:b5:13:2c:32:6f:be:
01:95:dd:7e:44:66:0b:a0:60:b1:e5:0d:fc:a7:2f:
40:97:04:00:b7:82:d0:81:4f:d1:79:90:02:91:7b:
95:4a:41:e4:a5:b8:40:ef:a6:f6:73:27:e0:13:bf:
7b:8c:ba:52:bf:ec:ef:21:4a:0d:1d:d3:b9:51:63:
d9:c9:61:4f:10:46:83:53:66:ce:98:a5:5a:af:f9:
4a:1c:7b:55:18:bb:ba:37:e2:da:8c:9f:da:af:d9:
60:bd:e5:5a:5e:84:5f:7b:b9:a3:6c:26:a9:87:15:
87:af:bc:e2:9e:b5:84:6d:76:41:6a:46:44:c4:a0:
54:1c:35:64:8b:8a:78:57:22:f8:61:91:0b:3b:b1:
bd:a8:1c:ef:36:32:65:d3:83:dc:f3:7c:c7:8a:bd:
8d:6b:69:46:63:cc:54:31:bb:c0:a2:f0:36:c2:21:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:76:90:1F:CF:A6:5C:A6:D7:39:4F:2C:C5:CA:16:37:A2:94:DD:69
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bc:83:fc:5b:7b:62:75:1b:11:33:c9:e1:18:2f:33:3c:6d:
e3:bd:ce:95:41:66:dc:ed:e5:c6:14:29:b7:6f:44:fb:1b:40:
ce:8a:07:55:f4:c8:da:f1:b4:fb:91:11:27:a0:fa:7f:b4:b8:
92:33:54:0b:7d:a2:1d:91:83:60:32:66:05:01:c8:68:de:84:
15:9e:0e:ab:2f:8f:c1:54:a3:ba:72:4e:9a:d8:f7:92:d2:90:
67:18:3a:c1:8f:c6:4a:69:1e:01:60:dd:25:95:5f:92:f4:68:
6b:0f:be:e1:af:6a:53:de:be:08:5a:e5:68:d5:62:e2:cc:e1:
3d:38:8f:4a:cc:57:6f:a1:fe:6b:77:89:4d:92:42:b8:66:e2:
00:45:1f:fd:ac:a5:f1:52:38:8b:d4:b1:d3:17:f6:30:d8:6d:
f6:25:b9:8e:9c:5b:ce:f8:28:2f:7d:26:db:7b:53:34:d1:e8:
a3:55:3a:cc:63:75:94:82:65:72:fc:eb:c1:46:a7:dc:d1:aa:
ea:c5:6a:dd:3c:3a:9c:4d:cb:69:dd:13:25:6c:81:23:0c:d8:
b7:e7:33:dd:bc:32:0f:d0:b7:03:63:66:42:d9:49:91:3b:e3:
94:24:c9:f2:45:14:e4:99:57:53:23:a7:fa:79:14:e7:43:dc:
98:18:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:52:15 2026 by rpki-client