Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35362e302f32332d3234203d3e20323034313730.roa
File: 34352e39342e35362e302f32332d3234203d3e20323034313730.roa (raw, json)
Hash identifier: BLg6pPkI0rQToqcSqNl61CMvLAnIwumatPHh2Nglvk8=
Subject key identifier: 2B:9C:4D:9C:FD:A2:91:D8:E3:25:53:17:40:74:D6:EB:25:50:49:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55C7E63BEF4B690BB3EB883D03E1CEB92842D7E4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35362e302f32332d3234203d3e20323034313730.roa
Signing time: Tue 28 Apr 2026 23:23:56 +0000
ROA not before: Tue 28 Apr 2026 23:18:56 +0000
ROA not after: Tue 27 Apr 2027 23:23:56 +0000
asID: 204170
IP address blocks: 45.94.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c7:e6:3b:ef:4b:69:0b:b3:eb:88:3d:03:e1:ce:b9:28:42:d7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 28 23:18:56 2026 GMT
Not After : Apr 27 23:23:56 2027 GMT
Subject: CN=2B9C4D9CFDA291D8E32553174074D6EB25504943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:21:e2:2e:39:83:e9:3b:c8:0c:3a:c7:9f:
e1:13:a9:47:b2:99:14:db:17:3d:d3:dd:38:e5:1e:
10:e5:a0:29:d9:be:1e:c8:6e:94:25:55:42:73:34:
2a:39:f0:e7:93:9e:8e:24:1a:93:fa:62:fa:88:b3:
ae:3a:ba:1e:3a:1f:a0:a2:aa:47:ba:8f:28:bf:4b:
ca:64:3b:1a:c7:79:15:7f:6d:3c:f8:4c:d9:dd:ec:
5f:c4:4a:e1:c6:8e:64:93:dd:07:42:5c:73:87:81:
2f:ca:01:9e:33:51:5c:a1:85:79:54:b8:ff:0a:07:
c7:3a:16:61:50:e0:94:0a:b8:a4:d5:8b:4b:72:f3:
4d:53:16:c7:71:e6:bb:25:44:e4:72:cb:8e:79:3a:
2d:04:28:b1:5c:cc:76:79:e9:1b:d8:f3:02:c5:1f:
d5:ae:08:3b:dd:87:b4:45:22:cb:4b:0f:b1:d2:91:
ea:47:d7:04:a1:92:2f:a9:74:1e:00:66:82:55:76:
cb:82:ae:4e:6a:15:d1:67:1e:ca:44:8d:83:6f:30:
f4:c7:db:43:7d:58:3a:74:56:25:7a:7a:c0:9f:42:
53:91:0b:03:14:01:39:27:e0:d9:94:f6:b6:66:9a:
b0:e2:45:6b:7b:91:59:6b:d0:a6:e2:79:ec:de:84:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:4D:9C:FD:A2:91:D8:E3:25:53:17:40:74:D6:EB:25:50:49:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35362e302f32332d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.56.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:94:b1:25:a1:84:92:27:a5:18:9d:55:c4:75:b3:9f:c0:2d:
fa:0e:b9:cb:6c:d6:16:2b:b7:bb:7a:cb:24:98:66:90:3f:77:
47:4e:34:93:6d:0e:99:b2:9f:c6:d9:6c:f1:72:ff:a2:e5:01:
b6:8f:77:f2:cb:1e:c0:f9:92:3c:13:b6:24:d2:f9:97:47:ad:
67:1b:9b:08:e4:7a:0e:b8:b4:c6:b9:2d:dd:62:c1:f8:81:c0:
ce:ee:aa:a6:f1:b3:29:20:a0:e0:c1:cc:a0:4a:84:8f:b6:0e:
86:77:1b:13:cf:0a:e0:d2:28:4f:fd:05:e0:95:89:94:f6:a7:
95:61:bb:32:23:46:17:ce:9e:77:9f:e0:c3:dc:0d:73:8c:a2:
6f:c0:eb:6d:d0:4d:0a:3f:4d:be:e7:5f:8e:b8:b1:85:43:58:
27:32:96:c3:45:23:04:82:e2:55:df:1e:9f:d0:89:94:95:10:
5b:b7:18:7a:63:8a:6f:40:e2:67:dd:26:c8:88:00:52:e5:51:
d3:37:0d:81:aa:fa:13:14:67:6f:cf:4a:8e:53:8a:50:dc:65:
9b:25:50:c2:10:96:3d:0e:94:3f:37:04:c7:ca:2d:69:f4:53:
6f:f0:37:1b:19:88:9c:2b:03:92:41:7d:cf:73:b4:3a:98:30:
46:04:aa:f8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVcfmO+9LaQuz64g9A+HOuShC1+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA0MjgyMzE4NTZaFw0yNzA0MjcyMzIzNTZaMDMxMTAvBgNV
BAMTKDJCOUM0RDlDRkRBMjkxRDhFMzI1NTMxNzQwNzRENkVCMjU1MDQ5NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2yHiLjmD6TvIDDrHn+ETqUey
mRTbFz3T3TjlHhDloCnZvh7IbpQlVUJzNCo58OeTno4kGpP6YvqIs646uh46H6Ci
qke6jyi/S8pkOxrHeRV/bTz4TNnd7F/ESuHGjmST3QdCXHOHgS/KAZ4zUVyhhXlU
uP8KB8c6FmFQ4JQKuKTVi0ty801TFsdx5rslRORyy455Oi0EKLFczHZ56RvY8wLF
H9WuCDvdh7RFIstLD7HSkepH1wShki+pdB4AZoJVdsuCrk5qFdFnHspEjYNvMPTH
20N9WDp0ViV6esCfQlORCwMUATkn4NmU9rZmmrDiRWt7kVlr0KbieezehJXDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUK5xNnP2ikdjjJVMXQHTW6yVQSUMwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzNDJlMzUzNjJl
MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1e
ODANBgkqhkiG9w0BAQsFAAOCAQEAf5SxJaGEkielGJ1VxHWzn8At+g65y2zWFiu3
u3rLJJhmkD93R040k20OmbKfxtls8XL/ouUBto938ssewPmSPBO2JNL5l0etZxub
COR6Dri0xrkt3WLB+IHAzu6qpvGzKSCg4MHMoEqEj7YOhncbE88K4NIoT/0F4JWJ
lPanlWG7MiNGF86ed5/gw9wNc4yib8DrbdBNCj9NvudfjrixhUNYJzKWw0UjBILi
Vd8en9CJlJUQW7cYemOKb0DiZ90myIgAUuVR0zcNgar6ExRnb89KjlOKUNxlmyVQ
whCWPQ6UPzcEx8otafRTb/A3GxmInCsDkkF9z3O0OpgwRgSq+A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:01 2026 by rpki-client