Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e20313939373037.roa
File: 34352e3135322e3138392e302f32342d3234203d3e20313939373037.roa (raw, json)
Hash identifier: 0XDBQixODIzZ+DcZ4pSMo3SQuZpXh03K1MHGJ3TAFAQ=
Subject key identifier: 36:79:88:F3:4C:98:68:9D:E4:48:C9:73:A0:CC:70:6B:CF:86:7D:A9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F40A57CAAEA890A63DB20DE99B42CCF8A617870
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e20313939373037.roa
Signing time: Sun 20 Sep 2026 12:16:38 +0000
ROA not before: Sun 20 Sep 2026 12:11:38 +0000
ROA not after: Sun 19 Sep 2027 12:16:38 +0000
asID: 199707
IP address blocks: 45.152.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:40:a5:7c:aa:ea:89:0a:63:db:20:de:99:b4:2c:cf:8a:61:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 12:11:38 2026 GMT
Not After : Sep 19 12:16:38 2027 GMT
Subject: CN=367988F34C98689DE448C973A0CC706BCF867DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:c1:b7:55:4b:03:9f:52:3a:2f:4e:fe:76:
92:84:8c:d7:16:25:85:b2:2e:36:68:84:cc:cd:8c:
9c:54:54:a8:3a:bf:e4:aa:5e:30:c7:bb:3f:da:70:
2d:c5:31:bf:e0:8b:44:cf:6e:3c:32:b2:6a:c3:ec:
55:d6:c1:61:d7:31:35:bb:f7:5b:b8:88:dd:6b:dd:
ed:da:c6:8f:da:ae:03:f5:bc:08:5a:41:a3:c7:a8:
87:e3:41:d3:2e:80:83:da:37:37:72:f5:70:8d:01:
96:81:06:1e:a3:4a:76:42:d5:35:53:c5:ee:f6:b0:
6e:01:40:bc:e1:66:37:ad:b6:b2:e9:a9:d9:53:6b:
bd:05:8b:f2:5b:fe:d4:67:79:2e:69:58:18:4d:db:
29:48:b3:03:45:f5:77:4c:50:bd:b4:cb:36:96:5d:
4b:33:09:b6:2c:4f:ee:87:dc:8e:54:e7:02:70:f0:
fe:e2:54:ab:0d:29:42:d0:62:51:ce:ff:d9:a2:da:
a7:49:cd:27:d2:57:22:37:ff:a4:ff:36:11:2f:09:
3c:53:0f:2d:6d:28:c2:26:0d:03:70:40:3d:ce:34:
a9:af:99:ac:31:ed:64:ab:c3:76:d9:f7:c7:a5:e6:
80:02:e0:9f:ff:3e:5b:10:1e:30:ff:56:c8:c4:08:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:79:88:F3:4C:98:68:9D:E4:48:C9:73:A0:CC:70:6B:CF:86:7D:A9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e20313939373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.189.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5e:61:8a:7f:73:6f:85:8b:1b:c0:d7:73:97:d0:46:8e:11:
99:22:17:9f:10:7f:70:6e:e0:c4:92:b4:68:a9:13:1f:8f:8c:
73:81:fd:27:99:21:1d:ad:e3:ad:9f:0c:0b:9a:c1:d6:76:23:
f0:fa:76:2f:4d:0d:b9:dd:57:3b:35:3a:d3:bb:7d:03:75:82:
b0:01:ba:6d:64:4a:48:1b:d0:35:f2:95:99:56:87:cb:4d:14:
af:8e:47:9d:5a:ab:c6:cc:58:9f:a9:77:6d:b5:74:a0:37:d4:
0c:72:63:de:56:b0:73:b9:1c:81:85:af:f4:76:91:e0:ed:55:
fd:c7:09:46:43:c1:2d:2b:50:35:9e:d7:17:aa:00:c5:c7:d8:
5f:7a:37:a7:ef:7a:7c:91:35:e4:2a:ba:59:5e:6a:25:23:21:
70:fb:ce:08:dc:56:22:63:49:75:ca:62:76:62:d7:27:42:27:
d2:58:73:71:25:b5:10:a8:d9:db:0a:0d:11:96:4c:e8:d6:c6:
56:04:bb:bb:56:e5:56:db:d7:b2:79:6a:49:98:dd:fc:86:db:
f7:80:c6:79:01:38:17:0b:0c:37:16:4d:83:1d:99:fc:a4:69:
aa:2b:28:15:c4:6e:e9:e9:f3:d0:d1:15:6c:e8:a6:8f:4e:44:
bd:ac:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:02:45 2026 by rpki-client