Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa
File: 34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fcYJCphXrlLnkLK1MCJ3Wua7nXCJTJUbyHzDr/1+mew=
Subject key identifier: BA:10:5B:6E:0C:EF:67:CC:10:57:1E:7A:03:49:7F:69:FA:97:04:C3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D97A22ADDBB327B3B80AFAD7BF9B30942F2595F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 30 Oct 2026 20:32:35 +0000
ROA not before: Fri 30 Oct 2026 20:27:35 +0000
ROA not after: Fri 29 Oct 2027 20:32:35 +0000
asID: 136787
IP address blocks: 45.134.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:97:a2:2a:dd:bb:32:7b:3b:80:af:ad:7b:f9:b3:09:42:f2:59:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 20:27:35 2026 GMT
Not After : Oct 29 20:32:35 2027 GMT
Subject: CN=BA105B6E0CEF67CC10571E7A03497F69FA9704C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:97:d7:cb:c2:2a:58:2d:f3:8c:ce:8c:13:
ec:18:aa:e0:bd:f9:af:d2:17:c6:0d:83:8a:59:1e:
5e:8a:06:a7:7d:0e:af:7b:a4:99:83:c8:6d:5b:a4:
b3:ab:a2:39:07:7b:90:8e:57:fc:36:eb:36:c0:97:
f9:52:01:77:97:a2:7f:96:27:81:59:cf:94:7f:7d:
bf:a9:89:88:ea:5a:ba:75:b0:6b:ce:a5:2f:d4:13:
51:43:aa:81:ab:e4:0e:90:fb:98:4a:5c:fe:3e:20:
14:5c:50:5f:49:9d:82:f9:97:71:7c:af:13:79:37:
08:79:c3:a8:6f:f0:e1:be:02:30:06:43:50:38:c8:
d4:5a:49:00:b0:c3:b3:a2:12:4b:ce:eb:24:48:2b:
4b:97:eb:94:f5:00:5d:95:23:cc:6e:f4:dd:31:f5:
db:d7:02:d1:0f:23:92:6b:60:d7:31:f6:6a:af:c8:
95:ed:63:c2:8d:6b:83:7b:1d:d3:33:7c:d6:78:fa:
8b:d4:16:52:41:b4:fb:27:26:74:e2:65:ef:ff:3e:
95:ee:50:b2:f2:35:57:38:49:5b:48:be:02:22:16:
a3:1d:d5:23:6d:c6:6b:d1:d6:67:c7:06:d7:14:c6:
d3:04:a7:51:b0:b8:12:c2:fb:d5:90:5a:64:12:aa:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:5B:6E:0C:EF:67:CC:10:57:1E:7A:03:49:7F:69:FA:97:04:C3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.191.0/24
Signature Algorithm: sha256WithRSAEncryption
03:14:d9:1c:20:dc:10:fd:5f:3f:9d:27:6c:40:b2:ad:a9:e5:
b1:d6:bf:46:00:97:40:6a:67:0b:4a:c6:66:f5:3f:07:05:b2:
bb:86:de:7c:f6:22:cf:32:83:06:83:5f:9d:f5:29:29:5f:f9:
42:5d:e7:4f:4b:2f:03:51:c6:27:5d:d3:68:29:e6:8a:de:7d:
6e:bf:00:2e:73:a0:ef:5d:41:ea:3b:29:3f:1c:bb:14:0f:60:
e3:cd:3d:07:41:ef:28:5f:12:60:db:3a:f4:eb:f4:82:97:0b:
29:ec:db:61:bd:69:e7:98:c0:79:55:83:e3:a9:ee:53:1a:8c:
d3:bc:59:f0:1f:80:b1:fe:5b:ae:e3:e2:b3:c4:84:ef:5a:bf:
62:00:89:2f:d5:a6:bc:bb:ae:56:5a:51:83:06:1c:31:b0:cd:
70:8a:66:d9:18:b1:2b:61:b7:3d:7f:c1:43:d8:16:d8:42:7f:
05:ce:9c:31:19:19:45:22:c5:03:b8:e7:df:c0:6c:3e:b9:d8:
d4:ff:ac:fc:73:57:bc:d0:f6:e2:9d:35:1e:a9:5c:de:76:c4:
9a:93:05:9f:a9:e7:67:5a:bc:05:49:9f:22:cc:34:98:c0:d3:
9f:20:8e:30:e6:f5:aa:3b:65:4a:82:72:60:00:ca:1c:5d:7f:
18:0c:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:42:26 2026 by rpki-client