Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa
File: 34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa (raw, json)
Hash identifier: vkYYQn1mB77KnuuvLe28h/0cloDerqJndWygbiXb2Rc=
Subject key identifier: 2C:7B:92:D5:61:15:C9:1A:5C:8D:1A:DA:BA:B9:6A:28:2A:F1:BE:5F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7B7807EFE9223AC2742B87E7520ACA99DF44B482
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa
Signing time: Thu 04 Jun 2026 16:24:52 +0000
ROA not before: Thu 04 Jun 2026 16:19:52 +0000
ROA not after: Thu 03 Jun 2027 16:24:52 +0000
asID: 198090
IP address blocks: 45.148.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:78:07:ef:e9:22:3a:c2:74:2b:87:e7:52:0a:ca:99:df:44:b4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 4 16:19:52 2026 GMT
Not After : Jun 3 16:24:52 2027 GMT
Subject: CN=2C7B92D56115C91A5C8D1ADABAB96A282AF1BE5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:3b:b8:4d:f1:3c:cb:82:ab:cf:7e:24:52:
48:8a:b0:d4:c1:f4:67:23:f7:2c:bb:29:45:a6:d2:
e6:d5:55:d7:2c:17:2e:2c:3d:55:62:81:a0:a6:c9:
df:79:17:42:03:f7:c6:f5:b6:b6:70:de:b6:fb:7b:
7a:e7:35:1c:51:97:f2:9d:5b:85:4a:7f:a2:a6:3a:
c8:dd:6a:83:b6:9f:91:f9:7b:2a:43:74:8b:c7:d2:
c7:12:f9:95:1d:19:ac:42:2a:1d:8e:00:43:ff:37:
37:34:07:62:fa:be:8a:1f:33:36:5d:5b:64:85:af:
8d:03:34:a5:2f:66:ff:07:b1:11:f9:cc:3f:06:f4:
13:85:6b:c9:80:27:12:17:6d:5e:fc:21:e9:fb:40:
c3:39:c9:64:4d:e4:02:df:ca:72:e4:b2:a1:cf:93:
77:e6:08:0a:7c:7d:ff:ec:d0:07:7f:2f:69:c4:47:
17:19:63:4e:b8:a5:59:00:21:f1:ca:46:1a:e7:62:
79:8f:c6:ec:ae:38:94:1b:ed:ee:80:8e:63:e7:b5:
ab:45:27:ae:c3:01:91:3e:40:d9:2e:ad:42:8c:54:
f0:4c:2e:de:91:e5:9b:02:58:e4:1f:8a:09:91:45:
19:87:27:a7:75:56:b5:79:72:02:2a:01:3b:54:a0:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:92:D5:61:15:C9:1A:5C:8D:1A:DA:BA:B9:6A:28:2A:F1:BE:5F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134382e3139342e302f32342d3234203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.194.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fc:d4:06:79:d9:19:aa:b0:d8:d6:6e:d2:5e:ca:d4:6d:17:
c7:ef:68:0d:f3:41:80:ba:f8:9e:eb:ae:d1:17:93:1d:fb:b8:
eb:0b:db:41:7b:57:15:35:93:42:98:9f:76:7d:cc:27:61:8f:
a1:7a:9e:f2:aa:54:57:89:72:23:34:d5:24:e3:88:71:2d:c0:
d9:87:12:5f:4d:2d:eb:22:d2:cc:e8:81:35:84:cf:3b:51:7c:
70:b4:31:2c:55:be:f8:1d:18:5c:70:ae:59:c2:62:b5:c5:e4:
41:49:25:3c:f7:8b:fa:ff:6e:de:68:52:6a:85:16:f3:f1:33:
28:c8:7a:08:47:61:5a:a9:77:d0:ca:28:66:58:4e:70:53:06:
86:e8:e3:0d:01:d1:74:cb:e5:7b:77:34:4a:3a:cc:2c:71:2e:
b2:e9:18:86:b8:a8:2a:19:73:2c:97:57:04:53:d8:b8:88:40:
b4:1e:3f:77:85:7b:1e:4e:d6:bd:68:60:52:a3:ec:3b:d9:a0:
85:6a:f4:9b:50:24:d6:b9:71:43:b5:2f:17:a0:c7:5e:a8:cf:
56:cc:60:cf:69:de:48:2a:cb:9e:58:d5:41:62:5a:f3:34:c9:
e0:e3:77:76:cb:1f:96:72:e2:a5:ca:a9:45:fb:7a:87:fa:51:
02:4d:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:32:13 2026 by rpki-client