Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
File: 34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 3k0wXqiZnoleuFioyfx0XhVIJZ079kxumPyjLU1AI/A=
Subject key identifier: 0E:B4:DB:38:70:36:AE:8F:D3:A9:84:E6:B5:45:30:5E:6D:A1:4D:05
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7882D8CC54677F3180503F90A6BAB244A48F2EEA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 13 Sep 2025 12:47:36 +0000
ROA not before: Sat 13 Sep 2025 12:42:36 +0000
ROA not after: Sat 12 Sep 2026 12:47:36 +0000
asID: 136787
IP address blocks: 46.183.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:82:d8:cc:54:67:7f:31:80:50:3f:90:a6:ba:b2:44:a4:8f:2e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 13 12:42:36 2025 GMT
Not After : Sep 12 12:47:36 2026 GMT
Subject: CN=0EB4DB387036AE8FD3A984E6B545305E6DA14D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:cd:25:88:a0:35:21:47:99:71:69:c7:b1:
98:b1:63:6b:54:22:7d:24:61:61:de:5e:e8:8d:e1:
b0:2b:aa:82:1f:1c:ef:c6:f5:65:f2:54:d3:65:69:
e8:cb:4d:91:48:6f:aa:9b:42:7f:cc:6e:c3:e3:cb:
c6:88:57:18:de:83:a2:b1:5d:71:fb:3e:9c:41:73:
e4:77:95:de:57:b9:85:63:58:d7:df:93:b9:68:6a:
22:e3:95:30:bb:2a:d3:1e:c0:81:a0:da:4e:20:81:
51:50:99:d0:90:89:2a:e6:64:22:07:7e:36:bf:8e:
7a:93:b3:f5:0e:8e:e0:97:b4:23:9f:9e:29:4f:5d:
6b:a2:08:8a:1b:94:f5:59:98:98:45:ab:08:d3:47:
7e:1f:b2:f5:19:51:0a:c3:14:03:46:00:00:9f:65:
58:c4:fb:4c:10:01:47:ca:d2:69:36:ee:21:d8:80:
79:3f:7f:de:57:e7:d9:d8:51:0f:e1:b0:5e:9e:8b:
09:45:7f:4b:7e:36:ab:61:f5:f3:f8:95:37:9a:49:
17:e4:c6:bf:94:88:85:18:44:df:30:8b:2c:5c:cb:
98:f3:3d:1d:08:21:74:c1:64:8a:67:80:03:75:6d:
88:97:04:1f:a3:d1:b5:e7:3c:e4:ac:7c:6a:fa:03:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:DB:38:70:36:AE:8F:D3:A9:84:E6:B5:45:30:5E:6D:A1:4D:05
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34362e3138332e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.109.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b2:52:23:34:d1:d9:e2:01:b2:30:47:3a:8c:7d:4c:1e:11:
ac:a5:77:01:59:b7:ed:1b:a0:20:04:48:05:58:f9:dc:ce:cd:
c6:a9:7f:c6:fa:24:b0:01:94:0e:6b:85:8e:66:e0:02:26:d0:
20:9d:49:11:6a:34:0c:51:fa:33:c4:40:8a:bd:c7:ea:a9:fa:
0f:bc:50:c8:76:f7:3b:fe:0e:f7:bf:29:e2:e8:50:61:fd:5d:
8f:d5:c6:cc:5d:ef:6f:fc:27:4f:9b:92:4b:fc:78:dc:ed:9a:
86:98:0e:93:eb:6a:f1:ab:3a:a5:69:a4:9b:ff:11:0a:6e:36:
56:7f:46:93:20:af:4e:7f:73:bc:ae:76:c1:3e:a5:a2:b0:94:
1f:08:34:59:60:8e:37:f6:a8:31:48:e2:9c:a8:cc:52:32:c3:
bc:f0:d6:e7:8f:17:a2:9b:f4:ea:59:5e:dd:a0:a8:24:84:04:
a0:88:65:c4:22:3d:f0:cb:95:f1:d9:5b:fb:0d:f5:a4:7a:96:
3c:0b:aa:91:02:19:34:69:cc:31:08:a9:25:70:f4:2c:a0:39:
c2:e8:9e:c9:4f:db:f3:10:4b:36:d4:f3:37:c0:f0:7b:0c:9c:
e2:f0:4a:7c:fc:a3:cb:bb:17:fb:99:07:57:4e:d7:f7:ae:45:
15:ee:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:31 2025 by rpki-client