Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139302e302f32342d3234203d3e20323132323338.roa
File: 34352e3133342e3139302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: wF/gGz3CvIuLuKBpzZgF+UXwfWqiOzKCbH5L3qCM2p0=
Subject key identifier: E9:12:78:08:D4:CA:27:4D:C7:28:11:C9:CF:C5:BC:85:C5:86:05:31
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4EB58F483EC9224664BC4FE4D362E085823ED9B9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139302e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 21:27:30 +0000
ROA not before: Thu 30 Jul 2026 21:22:30 +0000
ROA not after: Thu 29 Jul 2027 21:27:30 +0000
asID: 212238
IP address blocks: 45.134.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b5:8f:48:3e:c9:22:46:64:bc:4f:e4:d3:62:e0:85:82:3e:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 21:22:30 2026 GMT
Not After : Jul 29 21:27:30 2027 GMT
Subject: CN=E9127808D4CA274DC72811C9CFC5BC85C5860531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:aa:7a:07:23:1c:8d:ce:c8:fa:d2:be:ae:
18:b9:0d:2d:45:84:ac:6b:6f:04:ec:2b:f4:e6:66:
31:b9:5e:a4:00:f2:2c:24:f3:54:f1:54:06:6b:5f:
6e:bf:fb:47:79:1f:eb:b6:0a:d7:78:ba:24:6b:be:
e1:86:47:fc:70:60:42:d1:a9:7b:11:e9:93:0b:8d:
b9:98:f0:a1:91:97:b0:e9:1c:85:bb:62:52:0a:75:
9f:6e:8b:4a:6a:21:10:45:82:75:de:95:38:bf:4e:
4c:2f:7f:82:0c:78:74:96:48:12:c9:f4:87:e6:95:
49:0d:8e:37:f5:b3:bb:0e:a7:43:68:65:8c:c1:ce:
03:8a:39:09:fa:b0:45:7a:1c:ac:0c:7a:83:b4:c9:
b1:f3:73:1c:d4:4b:19:20:c6:53:4c:68:32:0e:d9:
0c:81:20:95:40:60:b6:7b:f3:f0:ca:99:c9:b9:fe:
38:4e:e2:0a:32:ba:f9:70:3d:1c:36:60:11:84:5e:
2c:89:3c:e5:2e:75:29:8d:66:e9:db:14:2a:07:10:
b5:4e:37:17:bf:da:b3:fb:d6:6c:d4:62:68:0b:b5:
dd:d3:ee:b7:81:0b:cd:b6:d8:ef:ee:2c:24:6e:c0:
65:a2:8f:fa:43:e4:54:4e:fe:b9:8d:67:5d:44:67:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:78:08:D4:CA:27:4D:C7:28:11:C9:CF:C5:BC:85:C5:86:05:31
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.190.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4e:db:d3:4f:99:e7:b9:38:31:99:fc:fe:a8:cb:5b:29:ca:
83:0b:22:2b:45:e3:d9:bc:77:70:08:8a:e7:51:23:d6:a9:c4:
e4:3a:48:ed:79:21:df:26:ee:35:98:76:45:40:04:9e:66:08:
23:ca:08:29:1f:84:fb:e8:9d:b8:0b:f5:36:b3:39:86:52:ab:
06:6d:90:a4:4a:92:4d:d8:1b:bd:f1:53:98:fc:ca:40:70:2d:
2d:2f:88:f8:00:44:20:56:e4:5b:54:57:5a:dc:c9:1f:75:3a:
37:82:e0:1b:f1:85:e8:1a:9e:cd:43:3e:97:de:6d:75:ab:a9:
5e:a6:fa:07:63:56:b5:aa:3f:05:be:47:63:8c:14:14:16:d2:
5c:f1:03:1f:e1:0b:e4:60:fa:f6:d1:8e:8d:a1:2e:d4:3d:b9:
31:d0:f1:45:a0:f6:81:c9:cd:23:cc:cf:5b:b2:ed:77:a6:6b:
89:9f:8e:90:3b:f4:dd:7d:64:fa:7b:fb:31:dc:61:17:bb:20:
4c:e1:0a:88:64:6e:f0:26:ee:e2:bd:12:9e:9e:e9:94:45:7e:
79:e4:89:d9:89:14:9f:da:f1:5b:8c:5e:2c:0e:31:dd:59:1e:
23:2c:fe:0d:f0:49:77:e5:9d:64:3a:71:7e:ae:43:31:ff:9d:
d2:b3:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:40:11 2026 by rpki-client