Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20323132323338.roa
File: 34352e39352e3136312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: p1hF0PAYEihJICL/XFhwe0XVFAAno0g30n9uaTLv0bY=
Subject key identifier: 17:81:F9:67:C7:83:67:E3:57:1A:6F:27:73:14:88:4C:90:AC:24:8A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 34493E2899DA5545FB7F2B7AE14F416CBBFE8F8F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 22 Sep 2026 13:29:09 +0000
ROA not before: Tue 22 Sep 2026 13:24:09 +0000
ROA not after: Tue 21 Sep 2027 13:29:09 +0000
asID: 212238
IP address blocks: 45.95.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:49:3e:28:99:da:55:45:fb:7f:2b:7a:e1:4f:41:6c:bb:fe:8f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 22 13:24:09 2026 GMT
Not After : Sep 21 13:29:09 2027 GMT
Subject: CN=1781F967C78367E3571A6F277314884C90AC248A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:18:66:ba:bd:85:20:4e:82:39:58:a3:1f:5a:
eb:c9:73:09:5e:05:76:77:a7:95:69:47:a2:18:db:
ee:34:44:0d:25:c9:f3:cd:3e:ed:ab:55:ba:15:b6:
09:76:47:15:89:11:28:f6:47:ab:58:20:b4:b4:ac:
4a:5d:44:c0:e0:85:0a:e1:d8:dc:57:45:fa:50:6d:
0d:02:5a:7a:ad:d1:0e:8f:e8:ca:7e:f3:3c:63:b0:
e8:04:b5:8d:d4:f2:74:13:38:b7:fa:1f:92:f8:6d:
fb:eb:35:5a:e7:1c:f6:e9:dc:36:80:1d:53:30:c6:
1a:3e:1f:62:a1:8f:81:83:df:34:d9:3a:25:fb:c3:
8d:7c:59:79:e3:f5:83:08:9a:9b:d9:56:f8:71:42:
ff:8c:9a:d9:52:ba:f0:ad:b7:95:11:b2:d8:a7:4e:
ec:86:e2:a5:09:17:08:75:92:4f:31:0a:1d:47:66:
08:ba:f5:a1:3d:bd:53:d9:19:87:6a:a4:9a:a6:95:
84:75:9e:ff:08:1f:1a:85:18:dc:c9:ca:f6:8b:84:
19:d5:37:6a:e5:4d:29:fd:0e:a9:cb:86:2f:70:b8:
f8:41:2d:71:92:48:12:7c:4a:5c:aa:10:c2:04:02:
6e:8a:65:02:c5:42:c8:48:57:f0:e9:e6:ae:e0:7f:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:81:F9:67:C7:83:67:E3:57:1A:6F:27:73:14:88:4C:90:AC:24:8A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
41:64:63:4f:27:3c:eb:30:51:f8:14:11:8c:8c:f7:0f:de:d7:
78:69:38:36:19:1a:7a:ea:5f:a5:6e:9e:bf:64:00:82:e7:04:
ca:af:a3:31:35:74:04:d5:a9:af:55:51:f3:4a:dc:04:55:c5:
d8:04:42:ca:0a:2c:11:67:7a:e4:07:17:74:ae:f3:7c:26:12:
f5:3d:8a:81:e8:e1:e9:09:86:25:6f:d3:8a:89:1f:17:a7:82:
51:92:b5:42:00:81:c7:2c:2b:7b:af:bc:45:55:42:bb:5b:e0:
20:37:66:25:cf:3e:db:13:96:83:16:11:6e:93:f1:d2:4f:12:
15:60:4d:00:37:24:53:05:71:4a:30:91:5a:1d:c6:a1:a6:ca:
e3:f0:02:38:6f:81:67:0c:3f:06:e8:7b:be:a2:5b:c9:e6:26:
bc:a2:c2:af:ce:44:08:98:fe:b3:a1:37:26:15:53:ac:87:f6:
4e:8a:2a:88:78:0d:cb:4b:e0:8f:eb:c6:12:85:f3:15:c4:06:
5e:8b:0f:c2:55:4b:08:8d:2c:06:6f:22:a5:d6:ae:89:eb:ee:
c3:20:3d:a8:e9:83:f7:4e:25:6a:38:7f:70:5b:68:00:61:8d:
4a:af:27:a6:a7:31:74:ad:ba:83:2c:3b:31:70:13:7e:f9:3e:
9a:6b:70:31
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNEk+KJnaVUX7fyt64U9BbLv+j48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MjIxMzI0MDlaFw0yNzA5MjExMzI5MDlaMDMxMTAvBgNV
BAMTKDE3ODFGOTY3Qzc4MzY3RTM1NzFBNkYyNzczMTQ4ODRDOTBBQzI0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsGGa6vYUgToI5WKMfWuvJcwle
BXZ3p5VpR6IY2+40RA0lyfPNPu2rVboVtgl2RxWJESj2R6tYILS0rEpdRMDghQrh
2NxXRfpQbQ0CWnqt0Q6P6Mp+8zxjsOgEtY3U8nQTOLf6H5L4bfvrNVrnHPbp3DaA
HVMwxho+H2Khj4GD3zTZOiX7w418WXnj9YMImpvZVvhxQv+MmtlSuvCtt5URstin
TuyG4qUJFwh1kk8xCh1HZgi69aE9vVPZGYdqpJqmlYR1nv8IHxqFGNzJyvaLhBnV
N2rlTSn9DqnLhi9wuPhBLXGSSBJ8SlyqEMIEAm6KZQLFQshIV/Dp5q7gfxMhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUF4H5Z8eDZ+NXGm8ncxSITJCsJIowHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzNTJlMzEzNjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LV+hMA0GCSqGSIb3DQEBCwUAA4IBAQBBZGNPJzzrMFH4FBGMjPcP3td4aTg2GRp6
6l+lbp6/ZACC5wTKr6MxNXQE1amvVVHzStwEVcXYBELKCiwRZ3rkBxd0rvN8JhL1
PYqB6OHpCYYlb9OKiR8Xp4JRkrVCAIHHLCt7r7xFVUK7W+AgN2Ylzz7bE5aDFhFu
k/HSTxIVYE0ANyRTBXFKMJFaHcahpsrj8AI4b4FnDD8G6Hu+olvJ5ia8osKvzkQI
mP6zoTcmFVOsh/ZOiiqIeA3LS+CP68YShfMVxAZeiw/CVUsIjSwGbyKl1q6J6+7D
ID2o6YP3TiVqOH9wW2gAYY1KryempzF0rbqDLDsxcBN++T6aa3Ax
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:50:59 2026 by rpki-client