Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
File: 34352e31312e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PbP0aKJCJmzk4c4yWoJ+vDaioEqwu8sFe4CCjJhfSQo=
Subject key identifier: 4C:A9:C6:4C:F3:F1:80:19:78:88:3C:C7:BA:1B:37:19:F6:3E:2E:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 774715A0EDE618945B9DC6C21D67D1BF351155F8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 01 Jul 2026 15:25:57 +0000
ROA not before: Wed 01 Jul 2026 15:20:57 +0000
ROA not after: Wed 30 Jun 2027 15:25:57 +0000
asID: 136787
IP address blocks: 45.11.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:47:15:a0:ed:e6:18:94:5b:9d:c6:c2:1d:67:d1:bf:35:11:55:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:57 2026 GMT
Not After : Jun 30 15:25:57 2027 GMT
Subject: CN=4CA9C64CF3F1801978883CC7BA1B3719F63E2EE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:d3:e1:77:70:dc:9d:07:65:6a:02:f7:04:
40:c3:cb:cd:ef:ce:5a:7c:94:03:94:95:93:cd:60:
7f:de:ff:a4:2c:08:e8:52:a2:ad:ce:77:15:5b:2e:
73:a7:4f:f4:97:98:15:75:0b:45:9b:bf:19:21:09:
5a:d8:cf:4e:52:c2:18:b0:b7:dd:f9:dc:49:c2:4e:
54:4f:d7:c9:c3:4d:8a:4d:a1:a0:80:93:de:fa:cb:
ba:ff:20:f5:3e:db:dd:a2:fb:3c:80:80:a6:69:c3:
77:cc:8b:f3:bb:03:c5:c3:43:86:08:32:30:0b:bd:
e5:7f:19:37:3d:ac:7b:16:9a:c4:71:a0:4a:b9:38:
d9:cb:06:bb:57:75:74:e4:7b:be:73:87:38:9f:3c:
c1:c6:fd:30:f9:45:e9:9b:09:b7:c8:82:18:39:29:
79:ae:13:1c:9f:5f:44:e0:3d:75:23:07:5c:a3:8e:
1c:d0:7d:08:a5:4a:c8:2c:cf:ff:2b:84:96:a5:0a:
19:94:59:c3:39:92:2e:83:89:8a:9d:39:93:b9:a0:
e4:dc:4c:f1:4f:76:4c:a6:fb:d1:ae:ac:bb:da:49:
ad:04:fa:c5:27:5d:dd:b4:6e:b6:a4:cb:a9:43:44:
da:fc:ef:d5:b8:02:0c:63:a8:b3:71:65:bd:01:38:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A9:C6:4C:F3:F1:80:19:78:88:3C:C7:BA:1B:37:19:F6:3E:2E:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.82.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6e:0a:9b:3f:27:ae:4d:75:6f:63:cc:bb:fe:fe:55:6c:64:
0e:f0:1b:ae:eb:34:c4:85:18:00:9b:58:00:09:9d:73:7c:c6:
a5:ce:fd:eb:c8:c5:88:25:b3:b9:8d:98:18:35:75:1f:9d:4c:
05:7c:0f:a5:fe:a9:74:eb:ef:f6:d3:cd:d3:99:9c:1b:3d:ec:
d8:7d:09:3f:59:9a:c4:ac:a6:6f:30:31:80:a9:8b:db:40:43:
f6:2f:b3:47:e2:a9:ee:06:5d:6b:0a:dc:dd:52:1c:65:7b:70:
d5:10:8f:bc:bf:3b:95:36:7f:5f:19:81:db:5c:59:60:44:62:
a8:28:ef:06:71:be:45:80:df:7c:ae:30:36:35:b1:e8:27:2c:
72:2c:fe:e7:26:58:48:f4:77:0c:9a:9e:3e:0d:21:db:08:57:
f4:93:4a:01:6c:67:ff:b3:a7:e3:3d:1b:61:dd:13:20:3b:23:
95:47:ad:56:e1:3c:a8:c4:c8:23:c4:d0:36:9f:63:85:bc:df:
2e:82:e3:21:1c:ba:cd:8c:2b:81:c9:8f:e4:64:0e:41:a7:d0:
3d:8f:9f:db:22:8d:44:1a:f4:21:83:b1:af:3f:16:8a:ce:c6:
d7:fd:25:fa:d0:20:20:75:61:6b:c8:90:c9:a4:63:5d:11:dc:
b1:b2:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:54 2026 by rpki-client