Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
File: 34352e31312e38312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: jsm92lq6dk71VHzkj9fXkIbY6ANxiTrKz/Yvmjo/Crg=
Subject key identifier: 5E:C8:CE:35:EA:CA:DA:A9:27:FE:7B:57:47:4A:1C:70:4A:E0:31:E2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7C883568130A97CF95A752B11215EE8A9194058F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 30 Jul 2025 14:47:01 +0000
ROA not before: Wed 30 Jul 2025 14:42:01 +0000
ROA not after: Wed 29 Jul 2026 14:47:01 +0000
asID: 136787
IP address blocks: 45.11.81.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:88:35:68:13:0a:97:cf:95:a7:52:b1:12:15:ee:8a:91:94:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:42:01 2025 GMT
Not After : Jul 29 14:47:01 2026 GMT
Subject: CN=5EC8CE35EACADAA927FE7B57474A1C704AE031E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:0e:07:bc:70:3f:d8:5f:0d:4f:de:fa:69:
8b:b2:95:60:38:55:73:81:8e:f6:86:38:91:2d:09:
58:a7:9a:f6:54:5e:cc:c8:f0:b2:49:86:1d:bd:77:
c8:c9:60:2d:de:b4:b7:71:54:3a:32:d9:16:6a:2f:
19:f1:45:f3:ee:d7:b9:11:c6:43:33:72:6e:af:51:
58:c1:93:f6:46:bb:3f:8d:11:05:11:6a:9d:b3:27:
9a:d2:d4:99:46:13:01:59:b2:ff:b1:a2:bd:e6:f4:
d4:79:b7:e7:76:b0:3a:61:93:af:fd:79:82:12:93:
b3:18:15:4e:dd:30:1b:2d:76:cb:4a:0c:5f:84:9e:
8d:09:a4:ef:4e:d6:d1:29:b8:a2:9c:81:e3:bb:88:
09:c3:cb:d9:fe:fa:d5:73:61:c3:cd:af:6c:56:cb:
70:a3:57:0d:92:9d:cc:d4:1b:b5:f0:98:51:2b:f3:
e3:22:6d:94:8d:d3:a2:4e:f8:60:8a:26:77:b0:96:
0b:42:23:c0:ec:3e:20:7b:26:ce:a7:90:c3:b6:51:
02:2e:28:2d:93:e2:f1:fe:7b:7c:80:f6:51:3b:b9:
06:64:3b:d7:e4:8c:81:36:09:08:23:67:2f:f5:54:
36:d4:86:44:b4:56:82:48:4b:5a:b8:ad:1c:2e:4f:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C8:CE:35:EA:CA:DA:A9:27:FE:7B:57:47:4A:1C:70:4A:E0:31:E2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:24:f0:bf:e0:12:ca:d3:1b:7b:3c:e6:0b:9f:2c:04:46:88:
fd:ac:8b:84:85:1c:d4:5e:74:ac:d2:48:8a:cf:e5:e9:f9:b8:
a1:9e:8b:fd:66:64:d5:8c:73:e3:66:71:d0:07:e5:ea:e8:86:
55:aa:fd:8c:43:68:06:21:37:88:c0:ff:e9:41:2e:e1:ce:27:
79:f7:e4:3f:5d:bc:05:42:e7:02:a4:dc:e4:19:9b:3e:c3:31:
90:98:06:8c:5e:e2:81:e0:a3:27:ff:28:16:ce:a6:b4:02:5b:
eb:e3:45:2e:f7:15:f8:1e:58:56:23:b7:cf:9c:8d:7f:40:d9:
18:ae:3b:e6:24:84:24:db:d2:cc:23:ee:2d:fe:17:b5:8b:9b:
1b:05:ea:47:be:1e:a6:c9:7f:5a:f4:6e:ac:ca:11:dc:19:06:
ab:80:d5:e7:69:7e:d8:22:04:89:23:20:86:5c:b3:72:33:d1:
68:1d:4c:dd:23:e3:9c:49:9a:87:2b:d6:2c:df:19:e0:96:e9:
a5:45:3f:ef:68:f7:3e:a6:73:c6:0d:18:8c:24:f9:f2:c5:e2:
8d:3d:66:de:07:90:73:ff:ca:3c:f8:5a:9c:95:fd:7f:5f:74:
2c:84:6d:ef:3a:0f:09:d2:b6:b6:4b:93:5e:db:c6:14:0b:6c:
9a:0a:97:64
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfIg1aBMKl8+Vp1KxEhXuipGUBY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MzAxNDQyMDFaFw0yNjA3MjkxNDQ3MDFaMDMxMTAvBgNV
BAMTKDVFQzhDRTM1RUFDQURBQTkyN0ZFN0I1NzQ3NEExQzcwNEFFMDMxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEg4HvHA/2F8NT976aYuylWA4
VXOBjvaGOJEtCVinmvZUXszI8LJJhh29d8jJYC3etLdxVDoy2RZqLxnxRfPu17kR
xkMzcm6vUVjBk/ZGuz+NEQURap2zJ5rS1JlGEwFZsv+xor3m9NR5t+d2sDphk6/9
eYISk7MYFU7dMBstdstKDF+Eno0JpO9O1tEpuKKcgeO7iAnDy9n++tVzYcPNr2xW
y3CjVw2SnczUG7XwmFEr8+MibZSN06JO+GCKJnewlgtCI8DsPiB7Js6nkMO2UQIu
KC2T4vH+e3yA9lE7uQZkO9fkjIE2CQgjZy/1VDbUhkS0VoJIS1q4rRwuTzAnAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXsjONerK2qkn/ntXR0occErgMeIwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMTJlMzgzMTJl
MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0L
UTANBgkqhkiG9w0BAQsFAAOCAQEAGiTwv+ASytMbezzmC58sBEaI/ayLhIUc1F50
rNJIis/l6fm4oZ6L/WZk1Yxz42Zx0Afl6uiGVar9jENoBiE3iMD/6UEu4c4neffk
P128BULnAqTc5BmbPsMxkJgGjF7igeCjJ/8oFs6mtAJb6+NFLvcV+B5YViO3z5yN
f0DZGK475iSEJNvSzCPuLf4XtYubGwXqR74epsl/WvRurMoR3BkGq4DV52l+2CIE
iSMghlyzcjPRaB1M3SPjnEmahyvWLN8Z4JbppUU/72j3PqZzxg0YjCT58sXijT1m
3geQc//KPPhanJX9f190LIRt7zoPCdK2tkuTXtvGFAtsmgqXZA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:12 2025 by rpki-client