Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: hh+xfEd63qt6t75AxNT3OGv+66DRHdJ5bkyoemSLs9o=
Subject key identifier: 08:0A:B6:6C:75:EE:B1:23:E7:B7:47:96:B9:7F:E6:72:DB:65:B4:E2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17DBACEAA336CDEB2EE87FAABBA5B93F95DFD1CA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 30 Jul 2025 14:46:59 +0000
ROA not before: Wed 30 Jul 2025 14:41:59 +0000
ROA not after: Wed 29 Jul 2026 14:46:59 +0000
asID: 141039
IP address blocks: 45.88.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:db:ac:ea:a3:36:cd:eb:2e:e8:7f:aa:bb:a5:b9:3f:95:df:d1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:41:59 2025 GMT
Not After : Jul 29 14:46:59 2026 GMT
Subject: CN=080AB66C75EEB123E7B74796B97FE672DB65B4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:e1:d6:25:92:4f:22:de:64:9b:3a:73:7e:
82:db:39:d6:07:fd:e6:36:72:bc:21:81:15:be:bc:
b2:c0:81:52:49:2b:0b:3a:c6:32:6d:06:f6:ed:4b:
ae:bb:29:c0:7f:29:bb:ff:a8:17:e1:ba:b4:09:09:
65:80:db:24:af:11:fe:4d:e3:e7:e5:e8:a4:33:c4:
e1:03:54:db:a5:4e:91:49:ac:35:3c:65:ff:d4:b4:
fe:68:41:eb:3d:99:be:6b:22:16:9e:49:50:65:15:
f3:d3:27:eb:db:61:da:fc:b0:31:b9:ed:32:d2:de:
3b:fe:12:d1:c7:01:c5:eb:bc:fa:d0:d8:28:86:91:
b8:65:a3:9d:7a:5a:64:8b:35:2c:bc:e2:76:d6:b4:
99:ef:cc:dc:7f:fa:55:6c:63:9c:57:e2:52:f8:93:
b2:2a:54:d0:75:31:15:b6:4a:a5:3b:fc:cd:c9:1c:
19:81:c5:aa:2c:5e:b2:42:b5:c7:ae:61:49:46:1f:
8a:af:91:30:c3:ed:6f:58:44:17:a1:fc:55:99:cc:
ca:dd:71:eb:f5:1c:67:cc:68:71:9f:9c:e3:6f:cb:
17:b8:e8:74:11:70:11:7e:d7:97:0f:05:05:f1:e8:
02:d9:6a:e2:60:e4:5d:f0:c0:2f:67:a6:63:87:19:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:B6:6C:75:EE:B1:23:E7:B7:47:96:B9:7F:E6:72:DB:65:B4:E2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.220.0/24
Signature Algorithm: sha256WithRSAEncryption
97:49:c2:a5:92:5a:d7:25:6c:44:05:df:6c:df:5a:e2:1b:d2:
66:25:68:9e:b3:44:96:3e:04:38:3e:dd:f7:32:46:9a:88:4b:
57:3d:c5:ef:b6:cc:db:df:73:fc:ae:81:86:0f:04:50:c6:b3:
12:2b:eb:3a:28:53:bd:7e:f1:09:16:b4:be:b8:a3:97:68:b9:
6b:f0:75:b8:83:1e:4b:4d:52:b4:85:51:71:39:69:14:bc:2c:
55:48:32:16:fc:4c:79:ea:12:45:ca:ac:70:af:91:af:4b:3d:
7f:19:b9:71:e5:31:56:04:51:5d:71:f5:f7:18:eb:6b:a6:8d:
d4:96:c8:c0:ff:41:9f:68:20:dd:a1:c2:41:82:b6:63:bb:d4:
ab:27:13:7a:17:ee:c6:33:3c:9c:04:ac:36:da:9a:c5:16:e4:
21:62:78:0b:4b:68:ef:78:57:5a:c7:e5:44:6d:c1:f9:de:39:
a2:8c:99:d6:da:b6:20:9e:39:75:ff:18:87:39:50:8c:62:74:
07:1c:40:eb:bb:6f:34:8f:cc:b4:8b:50:14:ce:e1:c3:19:b2:
87:ec:7c:d1:4b:a1:6e:a5:38:57:1a:88:92:ba:d0:0b:8f:46:
99:3d:0d:15:c7:7e:f5:09:fa:1b:86:d8:6d:26:77:cc:82:1e:
2b:33:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:04:48 2025 by rpki-client