Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
File: 34352e38302e33312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Cyd5JW1hL3fR6wZv9ciFDb8Mc+5ZbXCcBo6vEof6JQM=
Subject key identifier: 84:6F:49:9E:B5:E3:92:21:6D:51:6F:DC:B7:64:F5:A3:CC:FF:F3:99
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6ED05ECFBD19747D4AA275EFC8B09812C3A3090A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
Signing time: Wed 12 Aug 2026 13:27:51 +0000
ROA not before: Wed 12 Aug 2026 13:22:51 +0000
ROA not after: Wed 11 Aug 2027 13:27:51 +0000
asID: 51167
IP address blocks: 45.80.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d0:5e:cf:bd:19:74:7d:4a:a2:75:ef:c8:b0:98:12:c3:a3:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 13:22:51 2026 GMT
Not After : Aug 11 13:27:51 2027 GMT
Subject: CN=846F499EB5E392216D516FDCB764F5A3CCFFF399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:ac:62:2f:19:69:96:4b:a4:ad:00:45:c2:
99:17:b3:5f:e2:ba:b6:51:07:18:2f:f0:25:0f:2e:
f7:ab:e4:25:08:48:cc:e2:d8:ce:7c:a5:2e:69:26:
d2:81:66:36:61:53:d8:de:ff:08:a9:1f:ee:6c:c4:
45:02:4e:45:f3:34:1b:68:20:da:8d:75:9d:fd:b3:
d8:b5:08:a9:2e:bc:1b:19:c3:dc:f5:6c:55:9c:ff:
cd:52:88:cd:16:a5:f2:13:53:13:ab:ef:23:f9:24:
8b:bd:7b:f9:67:fe:9c:bd:21:7c:ff:c4:38:01:3e:
e9:a7:2a:f1:5c:7f:6b:ae:62:e3:b5:0f:f3:80:28:
5b:3d:2e:c6:58:fc:83:58:b1:ee:ad:90:5f:52:c4:
b0:0a:29:fa:04:cd:e0:9d:fd:4f:96:3c:44:40:70:
b2:a9:b0:7a:1a:80:bb:c4:aa:a7:49:50:aa:0d:b7:
7a:97:9c:2e:92:fe:b0:24:7c:47:11:18:af:ec:31:
03:2c:8f:d1:7c:ec:c2:7f:8f:01:31:65:93:e6:13:
78:ec:14:e7:74:59:99:74:b6:64:91:a2:99:75:72:
b5:88:8e:27:c6:6f:c6:8a:31:1f:65:e2:ad:b0:9b:
7a:98:96:3b:e3:85:22:bf:77:33:f6:f8:37:e9:61:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:49:9E:B5:E3:92:21:6D:51:6F:DC:B7:64:F5:A3:CC:FF:F3:99
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:26:7d:92:40:47:46:ad:5f:3c:be:c2:14:62:35:65:c5:e6:
49:cb:25:0e:9d:46:fc:ea:ec:cc:65:dc:d8:f7:05:04:cb:f9:
32:ef:bc:69:ee:ce:32:d4:c2:58:02:70:45:ec:43:45:d7:4f:
b7:57:fc:3a:cf:77:33:f7:e1:fd:96:73:a3:18:c7:d3:5c:67:
ed:35:b5:25:d3:53:b0:5c:fd:c0:4f:73:bf:24:04:93:c0:cc:
fb:a4:00:12:a5:07:0d:29:fa:ba:87:0d:8d:2f:51:52:b8:41:
c5:50:7d:25:f5:5b:ad:7e:67:d0:c3:2c:64:38:b6:4c:b9:28:
e9:ee:fd:90:f5:97:d3:06:64:7a:74:f0:4e:fc:03:a4:9d:11:
29:f3:d1:f6:da:1c:38:fd:6f:8e:67:6f:b3:a7:3a:c1:9c:f0:
3b:4b:ee:28:30:c0:27:be:0e:e0:33:56:4b:63:7f:21:89:c8:
c2:a6:db:2c:38:71:bf:44:0d:ff:f9:9c:1a:55:04:1d:cd:af:
5c:78:07:e1:14:c8:6e:01:19:8e:54:c1:67:5d:ca:e1:82:9a:
a4:85:f2:55:a7:86:8f:ed:d2:e0:26:91:a2:da:af:79:3e:94:
98:66:2b:34:5e:7c:aa:b0:b7:a6:10:fc:99:4f:f9:6a:aa:80:
d2:73:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:51:32 2026 by rpki-client