Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
File: 34352e31342e3231322e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: bhnjlc5MoRriyfjOENsN9PcwXfPiqgxJqAoNxjwYGXE=
Subject key identifier: 1E:F7:C6:1A:D3:02:EF:1E:F0:A2:FD:44:D3:9D:69:64:0F:81:2F:DC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78E4B0BABC700A8C59BE2E13155F683998CCD073
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
Signing time: Wed 04 Mar 2026 13:23:22 +0000
ROA not before: Wed 04 Mar 2026 13:18:22 +0000
ROA not after: Wed 03 Mar 2027 13:23:22 +0000
asID: 201341
IP address blocks: 45.14.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e4:b0:ba:bc:70:0a:8c:59:be:2e:13:15:5f:68:39:98:cc:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 13:18:22 2026 GMT
Not After : Mar 3 13:23:22 2027 GMT
Subject: CN=1EF7C61AD302EF1EF0A2FD44D39D69640F812FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:37:f7:7c:6f:e6:fc:b1:96:df:e2:fb:1d:
c9:b8:cf:b9:50:b6:61:82:46:83:79:6a:a2:fc:55:
0f:9e:bd:e0:66:16:5f:58:3c:f9:14:a8:bc:9e:ff:
21:72:7b:e4:76:44:00:4a:f5:b3:1d:95:2a:41:df:
9e:1d:8e:9e:78:a1:65:88:a3:1c:ba:ac:b6:fb:38:
50:ff:56:cf:e3:d0:25:44:0e:d9:b1:11:73:a7:e2:
de:64:e2:45:d9:45:f0:1c:36:90:d2:d8:7a:d2:41:
2c:0a:f8:e9:89:1d:e3:7c:37:62:5c:c4:97:ad:7c:
8e:05:fe:f2:9a:94:a2:7c:57:00:19:7e:b6:1e:93:
1a:58:4d:d8:e8:e6:a6:e4:b7:90:e0:c6:1f:7a:9f:
11:4a:ad:9a:3e:ba:87:17:0c:bc:12:02:41:24:31:
bd:77:84:6f:91:80:66:4b:11:40:93:1c:cc:1b:d2:
e7:f0:a1:a5:02:2f:26:95:d6:78:81:6f:fb:80:e3:
a6:4d:07:e1:60:66:78:65:5a:e3:a5:86:86:93:75:
3e:c7:58:2c:d8:2d:06:02:18:26:38:6a:36:35:9e:
72:60:f4:f4:85:01:de:7f:e6:30:44:ff:ca:a9:06:
00:0f:16:db:19:23:36:86:81:c8:d7:eb:87:59:e7:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:C6:1A:D3:02:EF:1E:F0:A2:FD:44:D3:9D:69:64:0F:81:2F:DC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.212.0/22
Signature Algorithm: sha256WithRSAEncryption
71:32:4b:35:36:b7:fd:65:7f:5b:5f:24:eb:3a:c3:71:8e:d7:
54:de:96:03:ec:a1:e0:7e:dc:1c:77:c2:20:18:43:1b:48:83:
17:8b:10:b4:b8:82:71:82:fd:14:bb:34:f6:33:f6:f7:dd:f7:
b5:62:73:e8:34:95:99:df:93:8c:55:1a:28:4f:ab:4a:7f:23:
bb:96:a9:3c:20:d0:63:18:9a:df:f1:00:0e:64:10:d4:a0:1a:
44:ad:74:45:9e:02:fd:b9:c1:00:fa:6a:b1:b4:5c:86:32:21:
1e:45:2a:d7:b7:e8:01:ed:42:72:7e:a0:f7:d4:4a:70:3b:63:
82:f4:d6:e8:4b:9c:57:b8:22:06:d7:cd:d5:a3:2f:3c:94:8a:
c3:ad:31:aa:99:34:6a:d5:b5:61:22:f2:d2:46:20:f2:bc:52:
fa:c5:9d:0e:d6:70:aa:44:ca:ef:a8:88:ed:72:32:b7:e6:61:
1d:29:38:57:08:5e:36:0a:fc:8c:dc:a2:da:83:ad:ac:71:19:
08:ea:a3:ac:02:1a:7f:cc:46:4b:f0:05:13:d1:ea:3b:a8:bd:
85:f0:18:27:19:ab:7c:b6:d1:ba:0b:03:f5:e5:c3:28:0c:94:
df:dd:a5:14:6c:5b:e2:f7:12:39:3f:19:31:02:2a:01:64:0d:
20:66:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:58 2026 by rpki-client