Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
File: 34352e38352e3235312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xBZ6Ct5U6sRah8bpZUPPuwRilQZXExdpmnjm9T+hiu8=
Subject key identifier: 2A:06:33:3C:87:CE:CB:43:C6:AB:68:10:5C:45:BA:5F:C2:F5:B7:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 609C5F95CB4F99D085950B67BC00D6A27AE411A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:25:55 +0000
ROA not before: Wed 01 Jul 2026 15:20:55 +0000
ROA not after: Wed 30 Jun 2027 15:25:55 +0000
asID: 136787
IP address blocks: 45.85.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9c:5f:95:cb:4f:99:d0:85:95:0b:67:bc:00:d6:a2:7a:e4:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:55 2026 GMT
Not After : Jun 30 15:25:55 2027 GMT
Subject: CN=2A06333C87CECB43C6AB68105C45BA5FC2F5B74F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:26:92:45:62:ed:bb:08:02:34:53:56:50:
66:bb:a6:79:09:7f:47:29:f4:14:b3:b8:d7:b3:e3:
21:1a:aa:c2:1c:c1:4b:5b:c3:cd:61:f4:ad:81:5a:
37:5a:80:3d:d2:d3:da:df:f1:34:cc:dd:77:af:a7:
5d:91:7b:5e:87:57:c2:15:93:12:4e:34:66:1e:e9:
03:93:c4:19:ea:8b:d2:b0:87:d2:53:24:e6:e5:02:
89:ed:92:d9:0e:93:21:8f:cf:31:ed:aa:1c:99:25:
a8:85:28:84:91:b0:b8:45:ee:9b:9b:63:de:30:c9:
3c:35:a5:35:13:b8:8d:74:6a:ff:42:fe:e0:82:dd:
23:bc:8b:ab:b9:57:2e:bd:b9:7f:61:b0:23:84:1d:
e8:ac:c2:61:70:01:38:8a:63:74:23:d2:fb:79:5b:
c5:37:ba:89:63:26:ed:7e:90:d0:da:44:f2:a5:2f:
77:9d:4b:f6:64:07:53:13:3d:49:4c:43:aa:33:4b:
7b:26:1e:4b:8c:6f:f4:49:ff:92:a5:a9:0a:d6:76:
5e:d4:cf:1f:ae:c7:61:ba:b0:6e:e7:21:82:ea:5a:
27:a2:31:0f:6b:7b:6c:20:72:c7:74:e2:76:86:7f:
fc:a3:37:fb:97:95:02:f1:eb:2e:75:ba:da:f3:1a:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:06:33:3C:87:CE:CB:43:C6:AB:68:10:5C:45:BA:5F:C2:F5:B7:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:00:fc:06:c0:72:a0:44:79:c5:67:e0:a0:d7:08:71:95:b7:
b4:43:d6:3e:d0:65:18:88:2b:59:3d:69:63:36:fc:16:ca:54:
ef:ba:9f:63:28:b6:de:5c:fe:c5:89:22:26:32:54:11:eb:7d:
48:57:26:d1:36:10:ce:eb:2e:f5:5e:56:87:c2:26:19:ea:da:
a2:34:8a:af:d3:43:11:66:33:d0:cf:4b:b0:3e:59:1b:78:46:
46:c7:4a:97:f0:93:07:97:e5:d9:f9:23:d9:f4:4f:95:2d:19:
5d:ad:b4:df:bb:4f:1b:e7:4c:dd:2a:d7:51:dc:dd:2b:d8:a9:
8e:9b:23:21:5e:22:a8:b5:b4:e7:35:d8:4a:95:62:98:d9:3d:
9f:26:88:17:4c:f6:6d:fe:10:78:4a:c6:87:8f:e6:41:e9:7e:
aa:dc:3a:51:9d:6f:a8:fe:41:0b:82:10:fc:bf:f2:5e:c8:e7:
81:1b:fe:3a:3d:07:e5:4b:1b:9b:94:1f:1a:e3:f8:99:65:6b:
1f:d9:f8:74:51:96:ad:01:81:29:f2:fd:68:ba:e0:2b:e1:85:
20:25:1e:57:b7:a8:ef:e3:8a:b5:22:5b:ca:a2:c0:c0:19:fa:
b7:4c:b7:d3:72:12:76:9e:c3:e4:36:33:f8:de:93:70:f0:05:
44:1e:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:34 2026 by rpki-client