Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133322e37322e302f32342d3234203d3e203633343733.roa
File: 34352e3133322e37322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: voT9r3Rw0ZcngkNRGf9zLo+SWh+t3LqXPZvDV4no7/g=
Subject key identifier: 55:DA:89:7B:54:34:61:D4:4D:25:0C:61:CA:3A:04:22:1A:A3:17:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 783669E71D894EA088050B40BBD52CEC069106A0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133322e37322e302f32342d3234203d3e203633343733.roa
Signing time: Mon 07 Sep 2026 11:28:34 +0000
ROA not before: Mon 07 Sep 2026 11:23:34 +0000
ROA not after: Mon 06 Sep 2027 11:28:34 +0000
asID: 63473
IP address blocks: 45.132.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:36:69:e7:1d:89:4e:a0:88:05:0b:40:bb:d5:2c:ec:06:91:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 7 11:23:34 2026 GMT
Not After : Sep 6 11:28:34 2027 GMT
Subject: CN=55DA897B543461D44D250C61CA3A04221AA317E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:d9:e5:f9:17:d9:e9:ef:f7:2b:46:20:e1:
63:ca:cb:91:c7:29:94:7a:7f:8a:02:71:3a:fb:c0:
16:cc:11:bb:b1:f5:26:de:2f:50:b8:e2:15:bf:b3:
6e:c4:95:09:58:04:b9:f1:d1:a0:fc:92:82:df:06:
37:77:aa:81:87:f8:5f:f1:a0:cf:91:06:f9:c3:2c:
1d:e3:c0:f3:2e:02:f7:3b:7f:02:5e:29:67:41:66:
16:0a:c8:e7:d2:1b:82:77:d4:e6:48:0f:5c:cd:fd:
2f:12:e9:95:21:22:82:fd:79:f8:27:9f:46:4a:91:
1d:f0:04:86:35:23:a6:f2:87:e4:31:16:f0:97:8a:
74:0d:6b:a1:0b:9d:8f:0c:e8:56:90:e0:62:ae:55:
4c:80:ae:1a:7a:c4:a1:a7:c2:b8:0b:0c:30:43:dd:
8e:c3:e6:9d:40:27:c5:5a:30:23:be:cd:c8:4a:db:
9c:53:51:58:3e:d8:5e:68:4c:77:fd:ab:0c:8a:e6:
df:0b:ad:57:d9:cb:48:92:08:54:47:8a:45:4c:95:
a6:be:98:75:2e:92:eb:85:41:8a:92:dc:7b:ab:3e:
1f:6c:25:b5:73:51:c8:e1:e8:70:05:2e:f3:f0:9c:
d8:ef:8b:3c:23:06:6d:5b:89:4d:c4:9d:5a:bb:c3:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:89:7B:54:34:61:D4:4D:25:0C:61:CA:3A:04:22:1A:A3:17:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133322e37322e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.72.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d3:c5:fa:40:fe:83:e3:30:fe:4f:61:3a:ae:e3:68:bb:38:
c4:cb:86:b6:8c:d3:9f:c6:e5:34:b5:56:86:13:a4:b9:3c:53:
37:33:bf:9e:fb:c6:68:12:1f:eb:dc:ef:42:31:af:99:24:d7:
f1:8b:1f:cc:38:2b:03:ef:cc:1b:82:83:ff:d7:43:69:0a:85:
8e:59:18:96:bd:3b:55:17:d4:85:d5:71:57:ef:3a:c0:b2:85:
eb:8f:e7:6e:21:62:50:f5:60:22:a0:3a:04:f1:9f:dd:78:20:
29:70:07:29:30:55:e4:68:12:68:aa:70:2b:21:8b:20:08:73:
b3:42:cc:fd:00:11:97:48:c0:34:29:41:94:6d:5f:da:74:20:
5f:fa:64:2b:16:a8:6c:7a:9f:eb:96:35:51:d3:fb:ad:74:a6:
50:23:40:bc:0d:65:44:73:00:55:31:40:7d:1e:6c:3a:71:e9:
00:46:93:79:34:ae:ce:9b:69:01:28:85:a9:be:1c:8c:e6:76:
df:f8:97:e9:85:d4:fe:91:ab:9e:a9:7f:ba:72:ae:4a:ee:bd:
b3:79:7e:b1:e8:89:f1:00:66:6c:27:a6:df:ad:12:7f:3b:8c:
1c:6c:61:41:d8:04:26:fd:ae:62:0b:ea:92:89:ee:e5:38:ce:
1c:ef:6b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:26 2026 by rpki-client