Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
File: 34352e38302e32382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: x85JBnEsXWZ7AyE75Q0ra8B3WP7yGyS7h2F5BJR+tNc=
Subject key identifier: 2A:1C:B8:A5:D1:10:05:40:DC:DC:48:91:45:B6:07:BA:CB:3B:1E:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D3577A09BC81A156037BFE901C1379E10731F4E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 21 Sep 2025 14:47:38 +0000
ROA not before: Sun 21 Sep 2025 14:42:38 +0000
ROA not after: Sun 20 Sep 2026 14:47:38 +0000
asID: 136787
IP address blocks: 45.80.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:35:77:a0:9b:c8:1a:15:60:37:bf:e9:01:c1:37:9e:10:73:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 21 14:42:38 2025 GMT
Not After : Sep 20 14:47:38 2026 GMT
Subject: CN=2A1CB8A5D1100540DCDC489145B607BACB3B1EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:8c:44:4e:14:d5:a9:a8:02:93:53:bc:59:
d7:f0:22:97:7c:41:80:2a:ea:04:c7:23:fc:87:da:
28:02:89:3e:21:e6:db:52:55:d3:8f:b6:37:ab:d7:
ad:c7:0f:59:53:55:eb:6f:31:64:13:b6:5c:cb:5b:
e7:19:68:52:d7:a7:d7:f1:34:a9:9a:e3:f3:a7:63:
46:ab:15:6a:d4:1c:b7:02:62:69:d6:a3:c2:a7:e7:
a4:bb:3c:62:bd:a3:b0:ad:4c:02:ec:90:58:a0:db:
2d:d7:40:d9:27:62:cb:e8:bd:c3:62:95:8a:ac:71:
02:af:19:ab:0e:0f:ff:52:79:93:c2:00:2f:0c:45:
13:5f:06:70:66:17:68:62:b7:f4:c4:a3:8e:65:ec:
1b:a3:34:44:f7:22:16:d2:58:1c:c0:1c:db:27:1c:
e6:09:02:16:93:47:b0:d0:86:34:f5:95:d2:93:76:
6c:da:29:ba:33:bd:73:a9:0e:ba:89:c1:2e:bb:1b:
68:7d:5c:35:9c:a1:c7:ac:87:c2:c4:01:af:80:cb:
6a:75:94:4e:34:73:7a:7b:a1:46:a8:ca:23:75:b3:
ca:96:38:0f:46:31:70:3e:cf:23:6c:70:c4:7b:d3:
f9:b5:72:6d:4e:b5:aa:43:2d:ea:fb:6a:8c:b1:b1:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:B8:A5:D1:10:05:40:DC:DC:48:91:45:B6:07:BA:CB:3B:1E:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cc:ef:9c:44:0e:7b:4d:e6:bd:d7:24:38:a2:19:59:4a:51:
41:a1:d3:43:43:55:3d:09:b2:ef:8f:5f:b8:15:68:52:bc:0b:
61:1a:a1:95:6a:b9:a0:2c:a9:fc:08:df:29:f3:a1:3f:e7:64:
3e:a0:b0:f7:20:36:c7:c3:08:83:09:ac:bc:b2:34:71:fe:eb:
28:e4:20:74:cf:7a:7a:b8:a2:48:66:de:d3:9c:f0:53:80:fc:
23:ae:32:07:c7:5f:f7:0f:ec:06:61:c7:16:f7:1b:7e:4d:0f:
26:d4:32:e6:39:3d:41:e5:df:b6:9c:b1:c3:c3:32:89:2f:11:
2f:f4:15:d6:7c:1c:7f:1a:81:fb:90:9d:52:65:d2:ed:37:d2:
cf:ca:75:00:6a:45:5e:0b:72:9d:50:51:14:37:6f:67:9b:b3:
14:b7:34:59:dd:7b:17:9a:fb:ff:e9:2c:9b:86:f9:23:63:05:
49:da:c3:e2:6d:f9:d6:12:e8:80:7b:07:95:f9:68:5c:7e:89:
01:d2:f1:60:ff:98:66:fd:cb:6c:26:8e:62:f8:15:0e:96:4f:
e8:34:fa:4c:ec:15:ed:13:f4:42:b8:da:4d:80:b9:a0:05:ad:
bb:bf:7a:67:58:75:d8:62:73:72:27:fa:75:3f:6f:24:a7:52:
b3:6d:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:16 2025 by rpki-client