Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
File: 34352e39342e36342e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: 322j326SoXdMDGf8ZUoCmoRTvkVPQ+CrMP4AFJldCdU=
Subject key identifier: B1:0A:21:24:71:D6:4E:16:8C:FD:F6:24:7B:63:23:E3:BD:91:25:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 55B83380336052596CF8351D00DD4A773A69FCEC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
Signing time: Thu 03 Jul 2025 15:46:47 +0000
ROA not before: Thu 03 Jul 2025 15:41:47 +0000
ROA not after: Thu 02 Jul 2026 15:46:47 +0000
asID: 201341
IP address blocks: 45.94.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b8:33:80:33:60:52:59:6c:f8:35:1d:00:dd:4a:77:3a:69:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 3 15:41:47 2025 GMT
Not After : Jul 2 15:46:47 2026 GMT
Subject: CN=B10A212471D64E168CFDF6247B6323E3BD9125CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:8c:5c:2a:8c:5b:a7:f4:b7:08:fc:90:35:
6b:f3:f1:35:15:95:1d:60:ff:0a:b0:49:1c:e8:b1:
d4:fb:23:53:42:fe:b2:8a:93:79:bd:31:09:77:03:
46:c1:98:c3:75:e3:94:62:03:2b:dd:89:35:25:49:
56:e5:a1:83:28:e7:ec:e0:74:b8:41:4f:92:0b:b3:
60:d1:77:90:44:27:89:df:0e:ca:4f:9a:c9:c6:f5:
a9:08:5c:a4:f0:62:46:60:38:7f:9a:d2:9e:81:2a:
a4:69:48:c4:c2:9d:7c:5c:9c:4b:ed:05:9f:67:d5:
22:41:4b:56:63:15:20:2b:ac:fb:90:9c:84:4e:19:
2f:4e:3d:b8:4d:d4:4f:8c:30:b9:74:90:78:e0:70:
0a:81:c5:13:cc:43:d6:01:6e:5f:68:08:cc:69:15:
cf:f7:e4:97:1d:02:15:b4:5b:eb:72:16:54:36:4a:
cc:dc:8a:a5:75:71:f2:4b:70:f4:56:92:be:0f:a9:
27:c6:ce:af:14:3b:9d:05:26:50:ea:9f:de:09:58:
9f:04:aa:06:c8:bb:75:45:34:53:70:09:89:82:be:
3a:69:31:ce:53:3e:5e:5e:3a:ad:09:1e:da:7e:15:
56:55:09:51:18:e9:1d:5c:06:36:ba:d8:76:ed:6d:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:21:24:71:D6:4E:16:8C:FD:F6:24:7B:63:23:E3:BD:91:25:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:2b:aa:ef:cf:d9:d4:83:eb:e1:c9:c1:7f:c6:78:b4:a5:f4:
ef:11:88:7a:ac:20:69:ec:09:85:47:e6:ab:59:e5:2f:ef:3e:
9a:0c:49:a6:47:72:e0:6a:76:f9:e2:9b:ad:da:cd:26:21:b5:
d2:8d:5c:af:14:a4:2f:d4:ee:9c:e1:08:cc:53:0a:96:37:e5:
bf:5c:3a:6d:83:56:c1:00:69:fd:06:7d:ad:e1:df:d6:f2:92:
45:e8:ff:60:06:37:0a:d5:50:a6:da:cb:dc:18:7d:af:fd:24:
fb:f7:f8:92:3b:46:b0:b7:10:3c:1e:d7:69:99:1c:72:cd:5d:
e8:8a:2d:22:0c:5c:f3:1c:71:a2:8d:a1:b9:dd:26:42:82:69:
97:c8:02:88:85:d1:a3:ea:b4:b8:d1:68:9f:3b:ca:92:8c:81:
db:fe:dd:4f:eb:6f:5e:fc:d4:03:8c:8d:47:a7:e1:76:c6:37:
24:57:97:82:3d:b4:08:13:2a:24:98:48:e3:13:e6:dd:cd:d5:
ed:ec:19:09:b7:4f:13:7e:41:8c:38:a4:45:b3:3b:10:68:66:
d7:82:e5:07:a9:23:23:6c:cd:da:12:09:f9:58:3d:df:8a:47:
14:33:a1:e1:ea:2c:41:03:9f:a7:47:62:43:dc:4e:e9:f2:b4:
6f:51:6e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:14:07 2025 by rpki-client