Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
File: 34352e38352e3234382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: E5VskPpBLk1b7X7VwsVj8FRXuzqvcgFc3oGkEwJN+sY=
Subject key identifier: 7B:62:99:59:B9:54:DC:C1:31:59:A3:A5:53:D4:06:F5:8C:AA:CC:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 66586AA8FB41EF8B1BD75E83A9789B6CD1679EB3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:26:01 +0000
ROA not before: Wed 01 Jul 2026 15:21:01 +0000
ROA not after: Wed 30 Jun 2027 15:26:01 +0000
asID: 136787
IP address blocks: 45.85.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:58:6a:a8:fb:41:ef:8b:1b:d7:5e:83:a9:78:9b:6c:d1:67:9e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:01 2026 GMT
Not After : Jun 30 15:26:01 2027 GMT
Subject: CN=7B629959B954DCC13159A3A553D406F58CAACC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:bd:62:c7:ed:b3:2e:33:62:27:49:07:15:
71:28:59:6d:0a:f2:54:39:93:b0:1d:8d:08:09:83:
4b:0f:d9:59:69:0b:51:05:4b:26:68:f7:c6:20:25:
5e:e3:bc:f9:22:5f:69:0e:da:6a:d5:63:77:6a:2a:
60:51:08:94:4f:b9:c3:ca:31:ce:23:6f:ce:8f:74:
ce:bb:17:e3:32:14:89:3b:01:22:b7:72:ff:9c:a7:
6c:d6:4a:7d:74:94:4d:35:a6:e9:e5:0e:83:de:f8:
db:c6:95:1f:f8:85:d6:7b:7e:14:ab:1a:b6:70:9e:
67:b1:29:32:a3:86:44:aa:1a:b2:05:23:9f:54:a2:
76:0c:8e:b1:58:ea:ce:2b:71:bc:ef:88:67:c6:4e:
f6:94:3f:b9:6c:a2:36:2e:a8:eb:85:db:a4:b2:4a:
26:49:8c:07:83:4e:43:83:1d:62:79:af:b8:97:98:
36:5d:95:c2:b2:b8:4d:1a:2d:de:b9:8d:cb:c1:ba:
1b:82:a3:97:56:04:6b:ee:e3:66:98:e7:ea:7b:74:
8e:a3:38:05:f7:a8:e2:8c:45:7c:7e:6e:97:d3:dc:
d3:52:e8:2a:76:63:3a:92:23:8b:bf:23:bb:0c:75:
4c:6d:01:f6:90:fe:c5:37:c3:ab:06:1f:b9:2d:ba:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:62:99:59:B9:54:DC:C1:31:59:A3:A5:53:D4:06:F5:8C:AA:CC:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:99:1c:78:fd:ee:fe:81:b9:b2:59:75:70:d0:84:1d:fa:05:
28:66:27:2b:14:0a:a7:c5:b6:e7:dd:41:8f:1b:07:28:54:7f:
f8:fb:53:42:8b:6b:f3:c5:d9:89:eb:70:a7:0a:31:ea:21:5c:
4b:ab:51:ae:12:01:0a:e7:80:22:d0:de:fa:44:f3:f9:ba:dc:
87:09:97:56:57:23:5c:94:fb:db:a4:91:15:3c:a4:80:39:d8:
7b:41:28:3e:73:fe:0c:1a:14:e2:3e:b0:28:c3:c4:36:8b:f6:
73:e2:8b:1f:1b:89:a8:8d:71:22:b0:40:19:6e:42:f5:dc:4b:
2a:44:60:6e:ce:a2:0a:2f:ca:73:e6:3f:df:b4:21:4a:b6:39:
fe:33:25:9a:d8:5e:f2:77:94:e4:84:02:44:fe:4a:8e:26:34:
b9:ce:dd:b4:55:9a:62:60:1a:4e:52:c7:58:9d:ed:c5:13:31:
3b:75:aa:36:c6:1d:95:93:2d:7d:a2:a6:50:63:0e:ca:99:51:
2a:52:21:67:10:13:95:97:fa:67:b9:77:74:52:05:a0:19:5e:
b7:ab:b8:12:64:68:fa:d2:93:19:53:96:62:1f:52:1b:e4:16:
3e:b8:b6:be:15:50:bc:51:cb:95:81:91:99:4b:2d:fd:28:83:
ab:da:40:1e
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZlhqqPtB74sb116DqXibbNFnnrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA3MDExNTIxMDFaFw0yNzA2MzAxNTI2MDFaMDMxMTAvBgNV
BAMTKDdCNjI5OTU5Qjk1NERDQzEzMTU5QTNBNTUzRDQwNkY1OENBQUNDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+71ix+2zLjNiJ0kHFXEoWW0K
8lQ5k7AdjQgJg0sP2VlpC1EFSyZo98YgJV7jvPkiX2kO2mrVY3dqKmBRCJRPucPK
Mc4jb86PdM67F+MyFIk7ASK3cv+cp2zWSn10lE01punlDoPe+NvGlR/4hdZ7fhSr
GrZwnmexKTKjhkSqGrIFI59UonYMjrFY6s4rcbzviGfGTvaUP7lsojYuqOuF26Sy
SiZJjAeDTkODHWJ5r7iXmDZdlcKyuE0aLd65jcvBuhuCo5dWBGvu42aY5+p7dI6j
OAX3qOKMRXx+bpfT3NNS6Cp2YzqSI4u/I7sMdUxtAfaQ/sU3w6sGH7ktugmhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUe2KZWblU3MExWaOlU9QG9YyqzG0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzNTJlMzIzNDM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LVX4MA0GCSqGSIb3DQEBCwUAA4IBAQAtmRx4/e7+gbmyWXVw0IQd+gUoZicrFAqn
xbbn3UGPGwcoVH/4+1NCi2vzxdmJ63CnCjHqIVxLq1GuEgEK54Ai0N76RPP5utyH
CZdWVyNclPvbpJEVPKSAOdh7QSg+c/4MGhTiPrAow8Q2i/Zz4osfG4mojXEisEAZ
bkL13EsqRGBuzqIKL8pz5j/ftCFKtjn+MyWa2F7yd5TkhAJE/kqOJjS5zt20VZpi
YBpOUsdYne3FEzE7dao2xh2Vky19oqZQYw7KmVEqUiFnEBOVl/pnuXd0UgWgGV63
q7gSZGj60pMZU5ZiH1Ib5BY+uLa+FVC8UcuVgZGZSy39KIOr2kAe
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:49 2026 by rpki-client