Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
File: 34352e39332e35322e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: E/h9Twd6SeetoFffZaKzT+DATC5vWlRxf5yQl4pOUAc=
Subject key identifier: F8:B8:DD:27:64:D6:15:69:81:21:E7:41:4C:01:DC:7C:46:9A:1C:BF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 078A2723CA87D6F0B58147633218A8701AFC228B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
Signing time: Wed 30 Jul 2025 14:47:01 +0000
ROA not before: Wed 30 Jul 2025 14:42:01 +0000
ROA not after: Wed 29 Jul 2026 14:47:01 +0000
asID: 203061
IP address blocks: 45.93.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:8a:27:23:ca:87:d6:f0:b5:81:47:63:32:18:a8:70:1a:fc:22:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 14:42:01 2025 GMT
Not After : Jul 29 14:47:01 2026 GMT
Subject: CN=F8B8DD2764D615698121E7414C01DC7C469A1CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:6e:dc:e0:23:76:ac:d5:2d:c8:15:62:b3:
17:42:c7:92:8b:16:8d:47:d3:92:43:f3:90:c2:47:
5d:35:44:14:15:8c:b2:83:81:25:ee:43:ab:b0:9e:
a3:06:37:18:94:c5:2a:3a:20:f7:95:b6:6f:21:b2:
5d:c6:04:35:df:f6:59:b2:d1:6d:12:e0:8a:f4:54:
be:b8:ff:cb:ec:b7:8b:73:62:7d:bc:38:ea:bc:60:
45:06:ff:00:3e:62:25:7f:78:92:0e:dd:c7:5a:30:
03:30:18:b0:67:ec:f5:63:2d:32:ea:3b:37:fa:f8:
a4:cd:8a:03:12:9c:02:d2:2e:59:1a:99:74:c6:12:
25:b3:98:80:46:d4:40:2c:60:b2:45:86:4d:d2:f5:
2c:c7:7b:21:5d:79:9a:7a:a4:ca:15:b5:f2:aa:f1:
74:51:34:58:80:07:0c:04:b1:61:44:71:83:4a:17:
2f:5a:d9:98:c9:79:29:37:4a:70:02:a4:74:35:c2:
fb:7b:9e:78:98:85:57:ce:a6:55:a0:8d:d8:32:fe:
75:02:88:a2:b4:1a:2d:77:a5:5c:58:ed:0b:5b:69:
b9:17:da:65:4d:c6:21:80:a3:7c:34:9a:d6:66:d9:
c5:6a:d8:34:73:84:b0:83:a1:96:2b:be:c5:35:2f:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:DD:27:64:D6:15:69:81:21:E7:41:4C:01:DC:7C:46:9A:1C:BF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e35322e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:7f:b1:4e:a7:fa:5b:68:55:b1:14:37:eb:d0:1b:0f:6f:c6:
0d:90:58:49:0d:81:54:f3:fe:9a:79:30:0f:10:f6:3d:59:21:
5e:d8:01:e9:68:ca:60:6e:1f:25:14:30:a7:1e:37:12:a0:cb:
85:42:d3:b5:b7:98:87:e8:94:e3:8e:c5:f6:eb:c1:1c:da:d9:
65:9a:a0:6a:82:89:3a:29:8b:10:6f:3a:d6:c7:63:d9:9a:14:
c5:4b:35:88:64:1a:5a:b7:6d:7b:a5:24:d4:30:f2:14:e7:ed:
0b:b1:37:12:eb:71:5c:d1:71:a9:5e:79:44:33:ef:2b:13:18:
f4:5c:44:fb:86:e9:f1:9c:89:97:ee:ea:f8:f5:8b:e3:98:a9:
ca:07:32:0c:d4:26:dc:71:b6:45:ab:e5:40:5a:4a:d9:ba:f3:
f8:ea:78:df:49:54:ab:e9:4c:4d:d7:e7:6f:b4:8d:64:33:e6:
45:7a:26:21:67:29:b3:41:d4:2e:29:72:b0:d9:94:c4:92:40:
c2:9b:12:08:2b:fa:0d:10:a8:67:2f:c8:b2:15:05:8b:b6:83:
4d:c8:13:14:28:32:0f:b5:77:c6:50:9a:20:51:17:c5:81:e9:
36:c5:01:44:5f:66:82:9a:30:9d:63:41:2b:0e:9a:45:51:6b:
19:64:94:58
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUB4onI8qH1vC1gUdjMhiocBr8IoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA3MzAxNDQyMDFaFw0yNjA3MjkxNDQ3MDFaMDMxMTAvBgNV
BAMTKEY4QjhERDI3NjRENjE1Njk4MTIxRTc0MTRDMDFEQzdDNDY5QTFDQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPOm7c4CN2rNUtyBVisxdCx5KL
Fo1H05JD85DCR101RBQVjLKDgSXuQ6uwnqMGNxiUxSo6IPeVtm8hsl3GBDXf9lmy
0W0S4Ir0VL64/8vst4tzYn28OOq8YEUG/wA+YiV/eJIO3cdaMAMwGLBn7PVjLTLq
Ozf6+KTNigMSnALSLlkamXTGEiWzmIBG1EAsYLJFhk3S9SzHeyFdeZp6pMoVtfKq
8XRRNFiABwwEsWFEcYNKFy9a2ZjJeSk3SnACpHQ1wvt7nniYhVfOplWgjdgy/nUC
iKK0Gi13pVxY7QtbabkX2mVNxiGAo3w0mtZm2cVq2DRzhLCDoZYrvsU1Lwo/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+LjdJ2TWFWmBIedBTAHcfEaaHL8wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzMzJlMzUzMjJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1d
NDANBgkqhkiG9w0BAQsFAAOCAQEAb3+xTqf6W2hVsRQ369AbD2/GDZBYSQ2BVPP+
mnkwDxD2PVkhXtgB6WjKYG4fJRQwpx43EqDLhULTtbeYh+iU447F9uvBHNrZZZqg
aoKJOimLEG861sdj2ZoUxUs1iGQaWrdte6Uk1DDyFOftC7E3EutxXNFxqV55RDPv
KxMY9FxE+4bp8ZyJl+7q+PWL45ipygcyDNQm3HG2RavlQFpK2brz+Op430lUq+lM
Tdfnb7SNZDPmRXomIWcps0HULilysNmUxJJAwpsSCCv6DRCoZy/IshUFi7aDTcgT
FCgyD7V3xlCaIFEXxYHpNsUBRF9mgpownWNBKw6aRVFrGWSUWA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:59 2025 by rpki-client