Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
File: 34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: KP88f7QA4bgiMu6rI4kDcfphJxl5RzFKAUgyw3NA0WE=
Subject key identifier: 52:20:0B:06:90:63:0F:B1:17:A5:AC:59:63:8B:19:6A:1A:50:E4:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A26F9155BCD163AFFD3E09D32149892057A4149
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
Signing time: Thu 04 Jun 2026 16:24:52 +0000
ROA not before: Thu 04 Jun 2026 16:19:52 +0000
ROA not after: Thu 03 Jun 2027 16:24:52 +0000
asID: 201341
IP address blocks: 45.130.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:26:f9:15:5b:cd:16:3a:ff:d3:e0:9d:32:14:98:92:05:7a:41:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 16:19:52 2026 GMT
Not After : Jun 3 16:24:52 2027 GMT
Subject: CN=52200B0690630FB117A5AC59638B196A1A50E4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:cb:13:fb:64:ce:26:7e:e7:10:64:aa:75:
d8:79:ab:58:7f:84:05:7a:78:be:de:81:50:7b:0a:
49:66:f8:ea:cb:0f:1d:a4:87:ee:ea:36:51:41:6d:
d1:7d:83:d9:36:9f:9a:de:52:90:c6:45:aa:c7:03:
e0:13:7b:1f:ab:80:95:62:fb:91:aa:13:98:bb:fa:
fd:a6:68:be:45:e3:0f:26:3c:c0:f0:b4:c4:0d:8b:
e5:7b:29:98:58:4f:fb:ca:3a:32:a8:a5:25:97:5a:
7e:64:32:f5:a5:f9:74:ca:f4:f4:7a:4e:4c:22:05:
5e:35:05:d3:14:a2:29:01:c4:70:1a:6a:09:eb:f9:
55:34:c0:51:da:c3:48:38:89:e1:34:56:3d:72:53:
0d:bd:a3:72:7c:92:b3:fa:bb:92:7f:9e:47:80:db:
c9:88:7e:45:d4:27:68:2b:ee:8a:00:da:af:ed:df:
3c:62:7a:fe:16:ba:70:f1:14:63:a9:89:a0:13:b7:
5d:ee:80:86:f2:41:05:c0:b2:5c:de:47:6f:9b:99:
66:9b:6b:74:0a:f6:99:af:5d:a9:13:99:06:0b:c3:
46:2c:aa:3e:e7:5f:1c:94:bb:3d:d5:ed:d3:94:28:
cf:a1:ee:91:2b:ee:70:56:e4:53:24:d1:f9:bb:25:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:0B:06:90:63:0F:B1:17:A5:AC:59:63:8B:19:6A:1A:50:E4:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
83:da:48:38:24:16:90:4a:12:4e:0f:2d:b1:14:5e:fb:06:23:
aa:39:08:81:8c:c6:12:b9:26:cb:fd:20:ca:5b:23:31:20:12:
d0:b4:54:c8:45:5e:75:32:b0:98:53:7e:a1:bb:aa:1b:77:59:
8c:0a:57:bf:f5:b8:82:fa:15:e8:f4:8e:93:6f:c7:26:c4:99:
9a:47:f6:a5:5d:19:e9:ae:ed:75:03:5b:5d:70:ea:ac:b6:fc:
61:36:cc:8f:a3:ee:a4:01:0b:ee:b3:f6:d0:55:b3:d7:20:f6:
6c:de:d1:b0:e5:27:a8:2e:4f:b0:c2:bb:89:88:cf:92:80:b9:
46:44:f4:30:e4:0c:45:8c:1c:c5:e1:b6:52:58:60:40:82:d9:
2a:b5:3f:d7:79:44:80:c9:ce:31:0f:79:5c:b3:12:55:b5:ab:
8d:19:e4:eb:d2:8f:c7:35:42:33:0a:66:89:52:ce:51:a4:a0:
21:9d:cd:7c:c7:fd:dd:42:ed:22:d4:54:4b:7d:18:7f:3a:ca:
fa:cd:1a:6f:e9:8b:28:05:a0:cd:f5:ae:e4:0f:88:fa:e8:1a:
03:42:c5:02:4e:fa:9e:0f:0b:b4:42:4f:51:e2:32:5c:3c:fd:
11:d0:86:d7:01:22:c2:81:db:d9:6c:ca:21:fa:ea:69:22:83:
65:60:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:53 2026 by rpki-client