Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
File: 34352e39342e3136302e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: kBuDxJ55YMCtfNV24cAMBSUI8cUaWrokgcWe4PWlAkY=
Subject key identifier: B9:CE:D3:8E:00:36:EE:F0:F4:1C:85:42:9B:3C:F0:D6:0C:04:AD:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CCFD02EA5B51294D07E355BE503B9AEBAE0EEB3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
Signing time: Wed 04 Mar 2026 13:23:23 +0000
ROA not before: Wed 04 Mar 2026 13:18:23 +0000
ROA not after: Wed 03 Mar 2027 13:23:23 +0000
asID: 201341
IP address blocks: 45.94.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:cf:d0:2e:a5:b5:12:94:d0:7e:35:5b:e5:03:b9:ae:ba:e0:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 13:18:23 2026 GMT
Not After : Mar 3 13:23:23 2027 GMT
Subject: CN=B9CED38E0036EEF0F41C85429B3CF0D60C04ADB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:11:7c:89:eb:92:ea:93:ac:1a:77:76:f3:
d8:a4:34:06:8a:5d:78:4f:31:f6:f9:ff:58:18:50:
39:a6:b6:f4:01:94:00:b9:e9:9f:ae:65:0a:d5:2f:
8e:0c:4b:7a:5b:9c:ba:58:14:a1:ad:26:30:5d:f2:
b0:2a:12:39:c7:a5:fd:09:45:0d:3a:c5:46:dc:75:
cf:5d:b8:16:0b:22:88:88:84:92:0d:22:3a:4c:9f:
a7:24:bc:e5:6d:22:9e:55:78:83:fc:14:f1:c6:df:
17:f2:16:32:3e:8c:ad:2e:df:95:76:c4:86:69:4e:
be:57:b8:13:6f:99:1b:48:53:a8:a0:93:db:63:d1:
2b:6b:67:bc:19:00:b7:3d:9d:4c:01:48:17:4c:53:
5d:0f:0d:f6:7f:fd:aa:65:48:2a:34:e9:47:88:99:
0e:b8:7e:bc:39:c1:d7:ed:48:d7:63:f1:15:b1:52:
7d:f3:52:2d:08:00:11:c1:10:75:5a:c9:56:b9:61:
8b:de:ea:0f:5c:c7:c5:87:fd:26:1c:94:68:fc:9a:
a3:19:45:e8:1a:7e:dc:e7:a0:60:58:58:e1:e3:ca:
b7:0e:90:83:1f:c4:0f:c2:e1:41:3d:6f:4e:4d:c9:
ff:1d:c7:dc:81:b7:6f:92:4d:a4:33:32:53:9c:c7:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:D3:8E:00:36:EE:F0:F4:1C:85:42:9B:3C:F0:D6:0C:04:AD:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:44:67:8e:93:b0:d3:d9:aa:1a:ec:b9:ee:7e:50:57:ff:4d:
09:e1:83:86:17:1a:ee:21:70:33:8b:18:25:02:fe:3e:66:d4:
f6:f2:c1:11:00:31:07:16:21:72:1b:19:c5:70:c3:f3:fe:a8:
c5:de:f4:ac:21:5f:79:cc:c3:e3:ae:c5:f9:bd:7d:89:5c:27:
ee:ba:28:ed:b8:57:75:05:ea:cd:03:32:9e:75:aa:5c:4c:ed:
02:a9:fc:08:51:e6:06:cd:02:fa:cc:dd:05:65:c2:19:0d:09:
53:d0:32:f2:84:42:f2:fa:c0:93:18:1e:1e:55:7b:da:84:d5:
95:f8:57:4d:ba:c4:b3:03:05:b8:53:9f:47:fd:73:7a:98:df:
5b:65:cd:0d:81:aa:21:a3:15:42:7f:ff:49:c1:31:da:af:ee:
11:1d:ca:46:b7:f5:ee:a8:bf:b8:16:38:c9:46:15:43:8a:df:
fd:b7:7f:a3:79:b9:b9:d4:4d:e5:5c:e9:e0:58:7c:0b:a1:77:
8f:3b:e5:1a:e2:3a:21:53:af:0c:7a:2b:30:4b:eb:34:6a:83:
fb:03:b4:94:61:bc:0f:01:ae:7d:90:66:14:a5:ba:9d:e4:d5:
f4:13:1b:7e:1b:2b:f0:30:64:7f:3d:cd:91:70:4c:ea:ca:52:
13:d1:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:18 2026 by rpki-client