Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
File: 34352e38342e33392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +XGJQ4HJyc9pOTPB5hliPzITBCSdzfWNWUKFWCmCxqs=
Subject key identifier: 1F:5A:15:86:B8:61:A5:FD:08:46:0A:94:F4:0A:7E:80:21:B3:F1:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 08C050863206BD9A0D728CFF70823F87BF172500
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 02 Oct 2025 14:47:47 +0000
ROA not before: Thu 02 Oct 2025 14:42:47 +0000
ROA not after: Thu 01 Oct 2026 14:47:47 +0000
asID: 136787
IP address blocks: 45.84.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c0:50:86:32:06:bd:9a:0d:72:8c:ff:70:82:3f:87:bf:17:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 2 14:42:47 2025 GMT
Not After : Oct 1 14:47:47 2026 GMT
Subject: CN=1F5A1586B861A5FD08460A94F40A7E8021B3F15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:d6:97:4c:60:b0:a9:47:91:0a:f0:0c:67:
22:5e:a4:1a:48:d9:e3:18:51:51:12:51:0d:7b:4c:
68:e8:42:3c:f9:cb:95:8c:73:70:56:1e:3a:c0:3a:
17:8b:f5:1d:09:ac:00:08:5b:e3:e0:3e:5d:c2:83:
a9:5d:8a:90:36:d9:eb:0a:46:82:b6:26:da:8d:75:
37:48:86:99:40:cd:55:36:3c:a5:a2:48:05:cc:5b:
a6:a6:09:dc:7d:b7:08:08:6b:0d:c6:31:3c:42:2f:
88:7a:e6:c3:90:8b:56:e9:c0:66:5d:4f:3a:75:6e:
54:a9:37:f2:1c:df:e6:6a:69:88:c5:c4:bc:66:b9:
68:3a:f8:ab:2a:d3:ea:41:db:a9:dc:11:96:f6:c0:
be:08:b9:67:dd:d4:67:39:33:65:27:b1:93:d5:55:
25:bc:2b:9b:79:b6:44:59:a8:ec:ab:7f:67:95:73:
d6:76:98:28:93:81:e6:9e:e9:76:60:1a:dd:8a:c9:
9d:ef:9a:ef:55:d4:a0:85:9e:ad:48:42:02:ef:65:
8f:73:12:06:e6:cb:8e:18:94:f1:ff:a7:44:cd:9d:
e0:bc:85:e4:a9:b7:cb:62:b4:4b:19:50:97:f5:1f:
71:a0:e4:f9:e1:0f:0b:ee:53:f2:c6:a7:de:e0:9f:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5A:15:86:B8:61:A5:FD:08:46:0A:94:F4:0A:7E:80:21:B3:F1:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.39.0/24
Signature Algorithm: sha256WithRSAEncryption
26:18:51:69:21:98:0c:74:7f:8c:d4:9b:b7:f1:a8:0c:48:8e:
99:e6:e9:16:92:25:18:e6:da:45:92:89:61:58:54:33:75:c5:
5a:f9:11:8e:78:14:3c:21:7e:35:22:f2:a3:e3:fc:17:0d:0b:
4a:b6:2e:a2:9c:76:8b:37:37:3a:53:11:eb:90:7c:54:3b:d6:
d7:ee:1b:27:08:cb:5c:9b:af:4b:cc:da:a9:78:3b:58:a0:28:
da:87:e6:2a:db:ef:a2:35:0b:95:19:97:19:58:c8:8b:a0:14:
bb:5a:98:4d:03:bc:89:aa:c0:ec:90:f4:c4:15:6e:3d:83:79:
14:4d:0a:fe:9e:1f:74:77:ed:13:fc:61:7c:d6:27:fa:4b:a9:
f2:0e:f6:cc:26:91:63:02:2c:8d:67:57:bb:5f:4d:44:0d:ac:
ce:9a:36:64:cb:7c:01:54:0f:2d:ed:03:b1:73:f8:57:ec:cb:
72:66:1c:61:06:da:4f:d0:8b:8a:57:b0:d6:58:c6:29:9d:14:
0d:a8:96:35:45:e5:44:ef:a6:e2:bf:ce:83:cd:a7:66:ef:a3:
cf:75:c4:79:90:e5:d3:48:96:e3:ed:9e:32:2a:9a:ed:4e:7c:
a5:13:f0:30:8f:32:56:99:f1:c4:df:3c:b2:a8:bc:39:8e:9f:
2a:ff:c1:f9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUCMBQhjIGvZoNcoz/cII/h78XJQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMDIxNDQyNDdaFw0yNjEwMDExNDQ3NDdaMDMxMTAvBgNV
BAMTKDFGNUExNTg2Qjg2MUE1RkQwODQ2MEE5NEY0MEE3RTgwMjFCM0YxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYNaXTGCwqUeRCvAMZyJepBpI
2eMYUVESUQ17TGjoQjz5y5WMc3BWHjrAOheL9R0JrAAIW+PgPl3Cg6ldipA22esK
RoK2JtqNdTdIhplAzVU2PKWiSAXMW6amCdx9twgIaw3GMTxCL4h65sOQi1bpwGZd
Tzp1blSpN/Ic3+ZqaYjFxLxmuWg6+Ksq0+pB26ncEZb2wL4IuWfd1Gc5M2UnsZPV
VSW8K5t5tkRZqOyrf2eVc9Z2mCiTgeae6XZgGt2KyZ3vmu9V1KCFnq1IQgLvZY9z
Egbmy44YlPH/p0TNneC8heSpt8titEsZUJf1H3Gg5PnhDwvuU/LGp97gnx+lAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUH1oVhrhhpf0IRgqU9Ap+gCGz8V8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzNDJlMzMzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1U
JzANBgkqhkiG9w0BAQsFAAOCAQEAJhhRaSGYDHR/jNSbt/GoDEiOmebpFpIlGOba
RZKJYVhUM3XFWvkRjngUPCF+NSLyo+P8Fw0LSrYuopx2izc3OlMR65B8VDvW1+4b
JwjLXJuvS8zaqXg7WKAo2ofmKtvvojULlRmXGVjIi6AUu1qYTQO8iarA7JD0xBVu
PYN5FE0K/p4fdHftE/xhfNYn+kup8g72zCaRYwIsjWdXu19NRA2szpo2ZMt8AVQP
Le0DsXP4V+zLcmYcYQbaT9CLilew1ljGKZ0UDaiWNUXlRO+m4r/Og82nZu+jz3XE
eZDl00iW4+2eMiqa7U58pRPwMI8yVpnxxN88sqi8OY6fKv/B+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:09 2025 by rpki-client