Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e20383334.roa
File: 34352e3135322e3138392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LfQdsBXph2eBVITxNSF4czckCYrKoYPnslVzLLXN/SQ=
Subject key identifier: 53:38:03:55:41:C6:D4:91:CF:B5:91:4D:68:C5:24:4A:0E:0B:09:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1F0271CA90965579C05B7A771660255AF05B1745
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e20383334.roa
Signing time: Tue 15 Sep 2026 12:11:05 +0000
ROA not before: Tue 15 Sep 2026 12:06:05 +0000
ROA not after: Tue 14 Sep 2027 12:11:05 +0000
asID: 834
IP address blocks: 45.152.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:02:71:ca:90:96:55:79:c0:5b:7a:77:16:60:25:5a:f0:5b:17:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 15 12:06:05 2026 GMT
Not After : Sep 14 12:11:05 2027 GMT
Subject: CN=5338035541C6D491CFB5914D68C5244A0E0B0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:77:d4:5e:73:4f:55:54:40:d1:4f:44:ec:
69:9d:69:c9:2d:a1:f3:41:f8:47:54:31:34:80:c7:
a7:ba:16:85:81:61:cf:3b:e7:77:c1:65:64:6c:e1:
a6:fc:42:04:0b:ad:f5:49:9b:65:d0:ce:1c:99:2f:
69:35:d4:37:37:f7:9d:0e:b2:65:6a:3a:d8:b9:19:
1c:ef:3d:a0:f5:1d:9b:90:66:bb:c8:a8:48:97:7a:
fc:f1:7e:17:73:05:13:bf:21:72:4b:b9:99:85:9b:
f7:39:d7:d6:dc:10:d0:b5:3f:14:83:93:51:44:3b:
11:e9:b6:98:5b:6a:dd:2d:59:79:ab:94:ea:a4:b0:
74:a7:7b:04:77:60:b3:21:38:5b:4d:71:ac:6c:f1:
42:b7:d8:fb:3b:f6:ec:93:eb:99:c9:86:e8:f3:c0:
da:80:a0:73:ca:85:35:0c:43:c8:84:49:e6:35:aa:
d1:09:9c:bd:4e:5c:ad:21:f1:f2:27:f9:1a:e0:03:
73:ea:0d:ca:9d:cb:6c:f0:58:39:db:5b:1a:76:0d:
40:ca:c4:ed:df:9c:22:72:37:f4:ee:59:ac:17:c6:
db:ee:7f:f6:e3:f0:bc:ea:03:63:63:01:ea:3f:ce:
f1:da:7f:20:bd:7a:bd:9d:b7:4b:24:61:ac:af:2e:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:38:03:55:41:C6:D4:91:CF:B5:91:4D:68:C5:24:4A:0E:0B:09:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4c:31:bc:bb:02:59:1d:b3:a7:bd:0a:ba:f1:c1:ca:e8:6f:
46:4c:34:12:93:06:90:11:e7:d7:cf:00:d9:b2:2b:95:fc:41:
f9:06:83:6a:51:c8:bc:82:25:56:47:72:a1:7c:27:63:20:3a:
d6:5a:b8:a5:bd:95:59:4c:89:03:57:94:9c:fe:4d:10:a7:2f:
64:26:9a:b4:2e:c1:25:78:ba:af:7c:d6:92:1d:f3:30:21:3e:
b8:0c:df:33:e5:e7:5e:e5:73:5a:ee:3f:8e:78:c4:c8:3e:db:
aa:21:d2:c2:6e:c2:f2:7b:f3:07:6b:1b:e5:e2:ac:ff:e9:e3:
2e:54:9e:06:a2:e8:47:ba:2a:de:c5:40:6f:15:75:17:15:4b:
ff:dc:1b:11:64:1d:10:8c:8e:72:15:8b:fa:76:5f:c4:1b:44:
4e:45:7a:17:d4:48:b7:65:4c:93:cb:1d:4c:01:03:12:8f:cb:
02:1a:bb:5c:a0:68:15:07:15:b3:a5:38:e6:9c:c4:2d:29:bc:
07:44:34:8b:98:8b:06:51:06:a8:3a:ac:c9:58:9b:4a:6a:3f:
84:41:b8:4d:e5:87:9e:96:fe:7a:48:be:c4:71:94:4f:7a:07:
c4:5f:08:4e:6f:3f:63:37:f2:24:08:e2:4f:57:3c:2a:b5:08:
bc:b5:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:48:52 2026 by rpki-client