Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37362e302f32342d3234203d3e20323132323338.roa
File: 34352e3133372e37362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Bq9XrA1odkaHTgJeywdhPoZ4nqc1CxgoA6EYaXkHGoU=
Subject key identifier: CB:47:0F:0C:56:3F:36:6D:04:64:B9:7B:70:64:33:17:03:BE:B8:02
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6803F6D2C98EBC765644461794A57A7A0024B8FA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37362e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 30 Jun 2025 21:30:34 +0000
ROA not before: Mon 30 Jun 2025 21:25:34 +0000
ROA not after: Mon 29 Jun 2026 21:30:34 +0000
asID: 212238
IP address blocks: 45.137.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:03:f6:d2:c9:8e:bc:76:56:44:46:17:94:a5:7a:7a:00:24:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 30 21:25:34 2025 GMT
Not After : Jun 29 21:30:34 2026 GMT
Subject: CN=CB470F0C563F366D0464B97B7064331703BEB802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:99:b1:84:b5:34:92:b0:a9:da:d0:5e:19:3d:
d7:d0:9e:e9:cd:da:91:20:1c:92:2a:44:b0:be:46:
c6:a3:15:dd:a2:43:40:18:19:0f:13:f2:5f:d9:2c:
04:f9:db:e2:b4:d9:00:7e:ac:b6:8a:a1:70:04:54:
a4:85:12:aa:28:df:8b:0d:6f:94:3a:e5:fb:f9:9a:
41:ba:63:ca:ba:c4:61:13:de:6f:ff:df:b1:f1:a2:
bf:df:29:87:69:43:16:ea:75:5a:c0:d4:b1:8c:ed:
23:74:53:54:a1:6f:7d:78:48:cc:22:d6:28:67:af:
1e:23:30:5b:8d:83:0a:87:cf:77:db:5d:89:0a:13:
80:c1:8f:ee:4a:e2:b9:3a:92:fa:44:e8:b9:06:81:
cb:4c:bf:98:5d:b9:0f:d9:6c:a4:ef:58:53:68:78:
c9:56:f7:ed:61:af:39:2b:8f:df:af:c2:b0:63:f1:
5c:ce:2c:60:87:90:54:ff:f3:ec:ac:1e:27:32:77:
72:7c:be:9b:27:4e:ea:50:91:91:f4:0c:6b:e5:62:
5f:69:7e:0e:05:8d:70:61:b1:c5:4a:8c:fb:72:26:
fe:20:e4:8e:ab:17:bf:d4:80:12:5e:48:fb:0e:81:
34:15:84:59:a7:2c:86:8a:10:78:a5:02:22:fa:af:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:0F:0C:56:3F:36:6D:04:64:B9:7B:70:64:33:17:03:BE:B8:02
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.76.0/24
Signature Algorithm: sha256WithRSAEncryption
88:94:2f:e5:76:75:08:e9:bd:6e:67:85:c0:9a:4b:9c:aa:35:
60:26:98:b8:9f:00:d8:41:ef:86:ea:a9:8f:8a:47:32:a7:3e:
c1:47:b5:52:2f:2e:2f:0e:1f:fa:db:28:a8:45:53:d8:fd:5e:
70:6a:a9:90:b3:b3:bf:eb:c9:76:b7:5b:1f:8a:ea:69:f2:c1:
2f:d6:82:c5:a1:c2:55:1a:cf:16:47:ea:9a:69:b5:76:a1:81:
5f:df:13:fd:26:49:ec:0e:bf:13:7c:62:4e:4d:ef:0f:c7:ee:
07:c7:17:85:9d:6f:16:b5:16:cc:60:15:83:bf:bf:0e:5c:cf:
64:d3:40:d6:c7:a3:c9:ec:d5:8b:b4:cf:e7:ed:36:96:32:8f:
b6:cc:02:11:90:82:ad:16:a8:8e:e0:0f:75:60:67:e0:24:25:
31:b1:e9:90:66:14:67:79:52:4c:c1:7e:2a:ef:75:b4:81:7b:
a0:2c:04:67:ee:e1:b7:50:a8:64:64:09:da:c7:6c:02:4f:d7:
30:56:88:c3:dd:d4:57:ce:b1:75:3e:fd:29:88:bb:ec:d2:92:
5a:b0:59:41:a5:9d:00:43:2c:e6:fe:05:81:90:c0:0b:03:00:
f5:d0:51:c0:88:01:85:2f:84:3a:81:cf:ea:c6:87:3d:17:61:
69:12:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:12 2025 by rpki-client