Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139302e302f32342d3234203d3e20313336373837.roa
File: 34352e3133342e3139302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: I12rUBBTq3ZJcqg1AjUYyVKOKASOKvEAEEV91GMJ9dg=
Subject key identifier: 34:2F:F1:AC:8E:DC:26:D5:6D:86:D5:EA:C0:37:F3:81:48:7C:9C:A8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EA76C5969BAC639F4210C5CC09999D8DBFE3A1F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:33 +0000
ROA not before: Fri 30 Oct 2026 20:27:33 +0000
ROA not after: Fri 29 Oct 2027 20:32:33 +0000
asID: 136787
IP address blocks: 45.134.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a7:6c:59:69:ba:c6:39:f4:21:0c:5c:c0:99:99:d8:db:fe:3a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:33 2026 GMT
Not After : Oct 29 20:32:33 2027 GMT
Subject: CN=342FF1AC8EDC26D56D86D5EAC037F381487C9CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:84:86:75:4c:2e:ab:fc:51:48:ea:2e:88:
36:b4:a6:27:e4:10:7b:c8:07:16:67:e1:71:d8:78:
36:66:ae:65:f4:da:e0:41:fa:63:a8:ed:09:8e:86:
1e:64:09:e6:64:d0:40:f0:6e:69:e7:74:28:de:90:
1e:14:d8:8e:d3:e4:bf:58:48:16:e7:b8:85:49:c2:
1f:af:92:b8:c4:a2:d6:7f:46:aa:c9:93:de:4a:7a:
f7:c0:9d:a5:04:40:94:0c:de:9b:e7:5e:66:d2:1a:
0f:35:96:25:c9:a5:80:1b:98:29:1a:c0:fe:b4:ff:
3f:cd:dd:ee:a0:8f:fb:cf:2b:81:f9:39:82:40:1c:
cd:3d:bc:bc:d4:63:63:af:25:42:38:9c:d6:37:ab:
f7:73:3e:b1:53:be:66:1c:f8:fb:ec:86:b1:d2:54:
db:26:7b:af:69:60:71:a3:e7:86:d7:66:04:a5:25:
2c:50:34:f1:d9:af:d5:b0:74:e4:4a:ab:af:03:41:
74:3a:b9:c9:72:e1:11:c6:91:81:30:9a:87:6f:7f:
02:73:61:88:7d:a4:bf:6e:0c:fb:71:47:e9:4a:94:
c3:d3:14:5f:da:b4:0e:9c:4c:c3:ca:af:54:b0:e9:
c4:45:1f:3d:6d:d6:3b:bf:71:ea:68:5b:f0:48:39:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:F1:AC:8E:DC:26:D5:6D:86:D5:EA:C0:37:F3:81:48:7C:9C:A8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0b:be:26:2f:7c:e4:d8:ca:40:10:bf:0b:f8:c0:e6:70:44:
fb:d0:e0:75:75:6e:c5:36:19:b8:92:c1:a8:e1:47:a2:ce:d8:
5d:1f:e7:29:c1:45:be:6d:a3:26:dd:3f:e3:a2:13:81:8a:84:
bb:56:8d:e3:d8:4c:6d:e9:75:90:25:2e:72:d7:60:e5:3f:ff:
6c:bf:8b:b5:08:3d:38:6c:93:18:1b:bb:f3:df:90:00:08:0a:
ff:b4:38:7d:fd:4d:26:8b:47:46:8a:59:95:d1:97:29:04:ad:
7b:82:73:f9:1e:05:27:4f:cf:2d:02:39:f4:f3:8b:af:aa:33:
d6:af:e8:04:06:6e:e1:48:41:b5:f3:bf:54:00:3c:45:d1:4d:
1f:ca:ae:1a:60:a6:a9:58:4e:d9:71:83:a9:e4:57:7e:a5:e4:
f3:5c:f2:9b:5d:e5:6b:aa:34:64:4d:a0:58:6a:88:de:71:18:
4d:9e:9f:df:03:88:21:f0:b2:d6:3a:1f:27:21:cf:eb:b3:d9:
93:3c:31:c8:24:be:b8:34:2a:a7:1b:d3:72:ee:25:31:06:09:
d5:9c:1d:66:3a:0d:4e:02:aa:11:c9:eb:b1:8a:c1:8f:c3:ff:
76:54:8d:61:ce:75:29:5f:1e:a1:77:2f:ae:a2:46:7b:35:f5:
f5:03:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:59:15 2026 by rpki-client