Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
File: 34352e39352e3136312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: D5JAaXOtUN/DUUXgMa5g0AFXR+0FgyWsr89xXMUt0Ck=
Subject key identifier: 73:4E:96:0D:17:FC:2E:72:E3:52:53:17:12:C2:01:78:A0:70:9C:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1227466B288AF3E9CD96A43D21479DCF655F7B5C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:35 +0000
ROA not before: Fri 30 Oct 2026 20:27:35 +0000
ROA not after: Fri 29 Oct 2027 20:32:35 +0000
asID: 136787
IP address blocks: 45.95.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:27:46:6b:28:8a:f3:e9:cd:96:a4:3d:21:47:9d:cf:65:5f:7b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:35 2026 GMT
Not After : Oct 29 20:32:35 2027 GMT
Subject: CN=734E960D17FC2E72E352531712C20178A0709CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:3e:79:fd:50:27:72:ee:8b:e3:6e:2f:69:
ba:46:0b:ed:70:35:d7:40:fd:f4:cd:d2:b6:6b:5b:
f6:97:72:f7:84:42:0b:5b:65:92:00:88:14:33:ec:
1f:33:76:19:62:e3:9d:a7:22:a0:2e:bd:c5:3d:4d:
83:9f:57:8d:34:6d:3d:ec:f3:07:df:d7:30:28:5f:
25:57:ca:35:50:e3:5e:7b:dd:65:7c:16:64:08:8b:
4e:93:9a:4d:50:77:22:b6:64:8b:24:a3:bd:11:8d:
9f:44:bd:d4:b8:16:9a:9b:e8:42:87:fc:dc:5c:1d:
c5:a5:e6:be:e7:26:86:e3:4a:f8:0a:e1:7d:ea:48:
67:67:bc:54:50:cf:61:3b:ec:91:e4:6a:75:af:35:
7e:24:d6:56:17:be:ee:27:f6:09:07:dd:48:29:cb:
ff:da:2c:45:72:0c:9d:bb:e4:59:1f:33:05:e2:ee:
5c:5b:80:18:3d:10:50:a7:04:f3:da:28:b2:7c:53:
9a:3c:b0:45:54:6e:d0:f9:be:6e:6f:e1:d6:2e:e2:
56:5f:75:3b:83:8e:00:15:99:07:4a:07:23:47:17:
d0:e8:17:d0:66:1b:51:29:23:fc:35:af:00:bd:d9:
2b:c2:61:83:40:be:8c:60:1a:a0:98:3b:e1:27:ca:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:96:0D:17:FC:2E:72:E3:52:53:17:12:C2:01:78:A0:70:9C:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
89:84:fb:20:74:1d:cd:99:2d:15:b2:5e:15:81:ad:1e:16:a1:
78:57:67:38:61:b8:8e:0c:a3:d1:65:6a:da:e5:9f:77:a0:0a:
80:3e:27:34:f4:fb:5e:f3:41:e1:2b:e8:df:93:39:46:05:cd:
ed:a2:50:a8:9b:b6:0a:3b:22:6f:2a:20:75:fc:cb:58:2a:88:
42:a9:22:d0:ce:4e:53:b9:74:e9:58:06:91:9c:40:0a:73:27:
6b:18:4c:1c:03:8f:61:86:a8:48:b5:34:f1:c6:49:f2:8a:43:
f7:b8:bb:67:4d:32:76:08:61:99:c0:9a:b7:4d:60:84:56:92:
14:75:06:55:fd:10:c1:6c:e7:00:da:2a:18:55:59:59:9f:dd:
bc:ac:41:e1:fb:04:4c:03:6b:a0:49:f3:e4:cb:28:88:d2:aa:
4e:2a:51:21:49:ae:f7:0c:02:57:36:c0:91:f9:d3:c4:d1:9e:
06:28:b5:24:b5:c5:f1:fb:88:0f:45:4c:fe:47:bf:8c:55:56:
e6:cc:ee:52:ef:06:8d:3c:d3:6b:0e:8c:d7:82:9c:ae:25:2c:
41:7f:69:55:84:d2:14:84:64:e4:29:1f:6c:6c:95:b1:b9:84:
6c:7f:de:1d:9a:bd:5c:5a:ee:bc:49:09:6e:26:c3:97:78:f6:
3f:5a:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:09:11 2026 by rpki-client