Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
File: 34352e31342e3139352e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: nKy+/P1MPZWVQQyl9Ay3BK2T+KLGdN476vmpRc7fT/o=
Subject key identifier: A3:79:24:74:8F:C7:3D:0D:EE:24:3B:CE:78:CA:A2:A9:1B:1F:A1:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C7BE47EB6E7E038B3DFE4E86DF15233FF70FEE4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 01 Jul 2026 15:26:03 +0000
ROA not before: Wed 01 Jul 2026 15:21:03 +0000
ROA not after: Wed 30 Jun 2027 15:26:03 +0000
asID: 141039
IP address blocks: 45.14.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7b:e4:7e:b6:e7:e0:38:b3:df:e4:e8:6d:f1:52:33:ff:70:fe:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:03 2026 GMT
Not After : Jun 30 15:26:03 2027 GMT
Subject: CN=A37924748FC73D0DEE243BCE78CAA2A91B1FA153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:ef:51:7a:ca:01:ea:2d:51:32:38:55:97:
38:c8:dc:0f:a2:c6:f9:f9:82:a4:fe:3a:30:a0:5f:
f1:db:70:c6:e3:e7:3a:47:60:18:fc:ed:3f:c0:b9:
96:0d:64:98:00:a4:ad:3d:64:74:88:3d:6a:cb:f2:
a7:7c:9b:c2:b8:49:41:97:20:7a:bf:a1:82:5b:13:
f0:3a:1f:1c:c8:37:3d:0d:a6:6d:8d:2f:b3:73:8f:
48:85:40:2c:c2:c3:d5:23:20:61:55:6d:20:ce:04:
b0:2e:77:b7:46:f1:41:1f:c7:40:64:97:2c:e7:72:
2a:b2:64:b8:a1:f4:d2:f8:f4:42:4e:d4:b3:64:51:
1f:d2:6a:62:b5:8e:1c:ed:17:51:f9:66:c4:3d:d5:
d1:7d:d7:6f:b9:91:96:27:72:3e:cd:0f:f8:86:e4:
69:c7:9b:6e:3e:9f:74:d7:eb:f7:ec:be:2e:2f:9a:
6c:ef:a7:9d:f5:4d:76:91:7e:5d:ed:3a:0e:69:74:
5c:e1:62:41:d8:b8:13:a9:23:ec:79:28:e6:46:9e:
fa:f8:64:98:64:b4:6f:13:b0:33:a9:87:16:91:af:
91:88:c3:b9:c5:fc:12:f8:d6:c4:86:f8:a8:98:18:
b0:45:cc:12:2f:c2:11:a3:ba:72:12:fb:fe:7c:e7:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:79:24:74:8F:C7:3D:0D:EE:24:3B:CE:78:CA:A2:A9:1B:1F:A1:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:da:2a:2c:48:f7:23:0b:18:3d:19:b3:47:87:92:9a:f9:9c:
11:1e:67:9c:77:03:8f:be:87:96:43:43:d1:6d:15:8d:95:dd:
36:c7:a2:36:12:f1:77:07:a4:6c:05:b6:a0:dd:61:22:9a:be:
9d:13:ec:7f:74:b2:cb:73:18:f4:e1:df:69:69:03:d2:00:4c:
e6:46:34:aa:9f:20:e0:68:fd:78:b8:02:dd:67:aa:c7:32:57:
a3:04:73:1b:47:e1:e5:fd:86:7d:7a:64:15:a8:02:44:5d:84:
9c:3d:26:47:a1:ea:49:a6:39:f7:37:6e:8a:47:aa:31:a4:71:
07:04:3d:95:41:c8:f4:da:b9:36:c0:b7:53:3c:89:7e:65:2f:
07:4d:3f:d6:17:81:ad:ca:68:fd:d0:ed:12:6e:b7:46:fe:a4:
70:09:9f:53:dc:f8:92:24:ae:d1:89:cd:6c:ce:78:bf:16:7e:
fe:a7:ba:e2:e3:cf:55:f9:13:b9:c9:81:eb:b3:69:35:17:5a:
1f:4a:32:26:32:f3:c5:8d:9b:f9:2b:e1:0a:aa:54:cc:60:69:
66:4a:d1:6e:04:20:9a:c7:3e:d3:ba:a8:a6:d6:73:35:af:f7:
c8:73:79:82:e4:f9:4b:db:7f:c8:ad:0d:cd:37:ad:94:0b:1c:
e3:65:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:57 2026 by rpki-client