Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
File: 34352e31312e38312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 5SNpL1Zrfwjd+0dzaNEX9ecexy27Zr9N+8r0hFJ+5g8=
Subject key identifier: 74:43:9F:04:D9:63:0E:E8:1B:67:11:D1:2F:0A:EC:57:F5:34:56:6D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C5CC51DBFCC47486EC0139CB16C55889C3E5201
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:26:02 +0000
ROA not before: Wed 01 Jul 2026 15:21:02 +0000
ROA not after: Wed 30 Jun 2027 15:26:02 +0000
asID: 136787
IP address blocks: 45.11.81.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5c:c5:1d:bf:cc:47:48:6e:c0:13:9c:b1:6c:55:88:9c:3e:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:02 2026 GMT
Not After : Jun 30 15:26:02 2027 GMT
Subject: CN=74439F04D9630EE81B6711D12F0AEC57F534566D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:50:fc:48:c2:49:0b:cd:ba:29:9d:97:6c:
88:8d:ba:b0:c5:de:d7:2f:40:03:77:d4:a3:80:2a:
63:a1:5d:df:01:83:9b:46:52:3a:b3:4a:60:66:7b:
4a:fd:37:42:83:b0:43:d1:ee:8b:56:ef:2a:5b:7b:
e6:08:d3:34:f7:4f:9e:1f:2a:15:4a:03:9d:d9:8d:
f7:12:b5:50:62:a0:15:80:9e:df:9d:dc:4b:41:d7:
22:e5:6d:0a:71:39:79:34:c7:d3:7b:8a:2e:60:5e:
8c:da:9b:75:fd:16:55:6c:ab:dc:a7:67:84:f7:7b:
9d:66:a1:ce:00:ba:5b:2a:3c:4a:c8:5c:fc:8a:bc:
91:20:06:e3:30:07:db:63:00:b3:1c:99:d0:dd:24:
e9:0f:bc:d4:cb:e4:48:bd:06:c3:1c:66:22:c6:7b:
da:00:03:37:98:20:c8:97:40:59:94:26:6d:41:ba:
e6:46:86:a7:48:5e:7e:00:8d:9b:7b:96:f0:25:c1:
c5:12:6f:4c:e9:27:32:79:6e:b1:04:ff:73:0f:20:
13:b4:8a:dd:fe:b5:66:74:22:9f:57:2f:b5:37:12:
61:a6:57:81:d0:d2:92:f0:74:14:52:c0:47:1c:c8:
60:ce:33:8c:7d:1e:ef:11:e5:9a:a9:32:c0:a3:d7:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:43:9F:04:D9:63:0E:E8:1B:67:11:D1:2F:0A:EC:57:F5:34:56:6D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38312e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.81.0/24
Signature Algorithm: sha256WithRSAEncryption
90:95:dc:d4:4f:6e:37:32:a9:a0:76:f1:7b:c2:f2:e1:18:ec:
0b:5d:93:b9:c1:a7:ef:b1:b9:2c:54:9e:c9:88:0a:2b:a5:c9:
16:56:dc:8a:e2:aa:fa:4d:f9:fc:5f:83:9a:a4:15:c9:76:48:
e2:82:a1:33:f2:44:64:d7:20:14:ca:37:b3:cc:e4:03:0c:1e:
6a:e2:a9:fa:d4:40:e3:6b:db:59:6f:62:6f:23:91:a0:60:4f:
1f:62:75:86:87:f8:7a:8e:5d:6b:e3:d4:53:39:f9:b0:3c:59:
79:82:c2:8d:5f:82:2d:0a:a2:1b:e0:d9:2a:46:27:fb:24:d0:
e9:b9:71:1f:4f:f3:fa:b0:b3:97:7c:ee:a0:5e:de:0a:af:3b:
11:03:34:94:c7:66:25:b6:d9:4d:1e:fd:5e:c9:af:1b:d8:93:
f0:bd:c3:40:de:83:57:7a:25:b3:4a:eb:0d:7c:1c:cc:31:de:
2a:a5:86:59:30:51:ea:56:ce:ed:7a:e9:c7:21:7c:fa:1a:be:
7d:79:cb:45:b3:7b:12:19:0f:85:63:dc:67:09:b3:5f:99:47:
a0:4d:91:b5:68:50:31:64:72:d3:27:00:79:a9:02:c5:8d:cd:
02:ba:3a:76:5b:79:2e:29:c7:29:08:1a:d3:6f:ac:f7:8f:f9:
e9:ee:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:41 2026 by rpki-client