
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
File: 34352e38352e3235312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ThO9ZFFkrLK0WiURr/Y3gVnwyWwnS+BI/az1/K2lU0w=
Subject key identifier: 9C:36:64:0D:55:B7:1E:8C:FA:DA:83:4C:8F:87:49:B2:B9:60:EB:45
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 419DE81969F63935CCAF009DE31199BAC90E994C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 30 Jul 2025 14:46:59 +0000
ROA not before: Wed 30 Jul 2025 14:41:59 +0000
ROA not after: Wed 29 Jul 2026 14:46:59 +0000
asID: 136787
IP address blocks: 45.85.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9d:e8:19:69:f6:39:35:cc:af:00:9d:e3:11:99:ba:c9:0e:99:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:41:59 2025 GMT
Not After : Jul 29 14:46:59 2026 GMT
Subject: CN=9C36640D55B71E8CFADA834C8F8749B2B960EB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:c1:11:00:15:54:01:b6:34:c3:11:fa:b4:
cd:aa:f3:f7:da:dc:2d:01:7c:a9:8c:63:5d:af:e6:
2f:dd:77:3c:57:56:74:72:54:58:35:1f:8e:ae:99:
c0:58:2a:29:20:0f:34:c4:61:55:7b:0f:b0:c5:6b:
c3:75:e6:75:2b:da:a5:10:6b:df:37:3b:b3:b9:87:
a6:9f:85:95:34:c0:74:da:1e:fc:71:b2:e4:67:fd:
e0:f0:14:0b:01:53:43:61:6d:f0:db:77:65:d9:fc:
84:5a:ec:24:fc:34:4c:6a:35:32:44:59:a5:ec:a6:
06:3c:2e:72:f1:d6:1b:0a:21:d7:05:3c:3a:c3:b5:
82:b1:c6:61:f9:ed:e2:44:89:a9:5d:05:be:e5:57:
67:e6:8e:37:fc:aa:91:eb:57:f9:46:93:e5:bf:82:
6e:85:cb:b0:a9:9f:af:4a:93:c2:20:c2:88:23:a4:
6e:be:7c:95:c5:72:6d:be:ea:06:55:84:cc:f5:55:
8c:26:5a:b1:57:1d:44:a7:a4:42:f1:ba:14:36:60:
95:ff:76:65:a0:04:27:d0:7a:0a:f8:12:f8:fb:09:
be:2d:57:c4:92:b0:46:25:0c:28:76:a1:89:6c:1f:
7b:ec:91:02:4a:d2:bb:75:b5:97:25:52:93:cb:3a:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:64:0D:55:B7:1E:8C:FA:DA:83:4C:8F:87:49:B2:B9:60:EB:45
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3235312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ac:76:01:55:7e:e8:a7:0b:25:df:43:cb:ef:a9:76:7c:c5:
90:22:e7:1e:e9:0e:3f:78:0f:47:9d:4b:d3:6a:b0:a1:c7:15:
7d:fb:ba:ae:af:0c:e0:6c:56:3b:c9:49:f0:7f:9a:be:bb:0c:
33:4c:a3:86:4d:92:95:27:d1:9a:3f:4f:fd:59:73:d4:31:d8:
f5:e1:d5:48:59:43:a6:43:c2:68:a0:b2:87:3e:5b:e1:78:59:
86:ed:72:10:83:1b:29:3a:56:d3:0e:b6:71:0e:55:7b:3e:6f:
51:31:2d:85:e6:7f:b7:20:de:db:3a:d9:b3:52:e9:a8:ca:f9:
08:84:23:bc:51:4f:41:93:b6:81:a7:bc:84:37:3f:de:c6:6e:
44:af:0e:a8:11:52:fc:52:88:51:d0:06:2f:a6:66:ec:c9:99:
c4:b0:af:01:5b:18:3c:bf:0c:4b:45:d5:8a:64:ed:22:88:b5:
09:f8:bb:08:ae:f1:d7:aa:54:da:00:0a:fc:8a:28:75:8e:56:
0d:a3:fd:67:e4:48:32:51:00:4f:a0:a9:fc:eb:eb:7d:61:47:
e4:56:dd:ad:46:86:44:c2:cc:58:ca:04:33:af:45:b4:9c:57:
9b:57:98:72:6f:de:16:68:d7:c0:06:83:d1:0a:91:72:fd:47:
2a:ae:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:14 2025 by rpki-client