Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20323132323338.roa
File: 34352e3133342e3139312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: EF/wiChmJ0u0qCAtPsr5zX2It+0THNrurwciClnrPh4=
Subject key identifier: B5:5D:37:A9:63:7D:2D:6D:DA:7B:D9:0B:20:A4:F7:69:68:50:C7:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1EF034CC53E668204BA444C38BEEC8DBC26D338E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 09 Oct 2025 09:07:28 +0000
ROA not before: Thu 09 Oct 2025 09:02:28 +0000
ROA not after: Thu 08 Oct 2026 09:07:28 +0000
asID: 212238
IP address blocks: 45.134.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f0:34:cc:53:e6:68:20:4b:a4:44:c3:8b:ee:c8:db:c2:6d:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 09:02:28 2025 GMT
Not After : Oct 8 09:07:28 2026 GMT
Subject: CN=B55D37A9637D2D6DDA7BD90B20A4F7696850C7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:2f:59:7e:bc:65:8f:05:82:02:d4:ec:24:
5b:20:5a:a8:de:d8:fb:52:53:00:aa:83:f3:61:26:
b8:75:9d:b8:96:02:1b:3d:5c:2f:eb:3b:52:62:5f:
8e:f3:b3:1f:44:c5:0c:1b:a1:31:56:38:21:f4:7f:
e0:d5:05:48:db:58:cc:3e:d5:27:a9:e7:41:ca:5f:
fc:3e:fe:d4:f2:39:57:ab:fa:bf:93:b6:37:39:15:
3f:e7:54:09:fa:1d:e1:e2:f0:21:21:f2:9b:30:24:
3a:0e:73:a4:fd:63:3b:40:6d:15:f2:79:27:79:31:
65:8e:8c:07:9a:8a:d4:da:5e:d2:f3:63:49:5f:9f:
4c:40:12:2a:0f:5d:d2:cc:c5:3e:be:72:c1:f5:77:
78:84:ea:52:5d:1c:f3:1b:01:ee:92:4e:d1:d5:44:
0c:94:52:5d:c2:28:8e:bb:02:f8:f6:dc:e7:2a:4a:
1c:68:2b:ea:89:ea:26:a0:7a:21:d2:50:22:74:95:
fb:27:42:72:2e:24:e6:cf:36:36:71:3c:2b:85:89:
02:ff:cc:a5:df:21:6d:09:bc:5d:8b:e0:f9:ca:f4:
39:c0:ee:fb:f0:63:da:85:9d:d4:8b:84:67:a1:a1:
39:99:c8:76:48:cc:07:82:5f:5e:5e:73:65:e9:10:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:37:A9:63:7D:2D:6D:DA:7B:D9:0B:20:A4:F7:69:68:50:C7:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fe:01:db:49:c0:ee:41:c4:27:be:fd:4a:99:eb:21:26:77:
c0:0e:e7:9f:a7:bc:23:7e:4b:a8:72:75:ef:69:ac:f4:7a:37:
32:9f:4e:33:f4:15:85:38:b6:dc:82:68:c1:16:3b:1f:92:d3:
b9:df:f8:69:44:66:db:78:08:f5:17:22:10:e5:b8:e9:51:07:
d1:b9:92:21:94:8a:94:2e:16:dc:23:0e:31:41:1e:9f:59:2a:
c8:50:14:83:3f:87:22:25:46:39:56:25:9d:e2:28:86:2f:c4:
9d:20:7c:43:6a:aa:a0:5d:b1:2a:3a:2c:08:94:71:d3:26:55:
c7:a8:56:5b:20:c4:16:c0:3d:6b:72:97:97:fb:45:75:42:ac:
5e:3d:8e:8c:02:8a:a7:fa:65:bf:61:20:5b:7c:85:c9:75:03:
ae:33:75:2f:f0:f7:ca:86:81:46:53:b3:5c:79:4e:e7:27:e1:
58:b4:38:2a:e3:c3:fd:8f:09:2e:ef:63:c8:a5:1c:54:fb:24:
41:a3:36:8d:d8:1c:24:63:9f:3d:9a:06:0d:52:9b:8c:c5:3a:
7c:a5:79:4a:7e:d1:f6:3f:d5:1d:b7:10:ca:31:8f:1c:bb:3f:
4d:72:e0:9a:92:5c:e7:39:a4:5b:6a:29:75:99:ee:26:bf:37:
f5:ee:22:a9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUHvA0zFPmaCBLpETDi+7I28JtM44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTEwMDkwOTAyMjhaFw0yNjEwMDgwOTA3MjhaMDMxMTAvBgNV
BAMTKEI1NUQzN0E5NjM3RDJENkREQTdCRDkwQjIwQTRGNzY5Njg1MEM3QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMy9ZfrxljwWCAtTsJFsgWqje
2PtSUwCqg/NhJrh1nbiWAhs9XC/rO1JiX47zsx9ExQwboTFWOCH0f+DVBUjbWMw+
1Sep50HKX/w+/tTyOVer+r+Ttjc5FT/nVAn6HeHi8CEh8pswJDoOc6T9YztAbRXy
eSd5MWWOjAeaitTaXtLzY0lfn0xAEioPXdLMxT6+csH1d3iE6lJdHPMbAe6STtHV
RAyUUl3CKI67Avj23OcqShxoK+qJ6iageiHSUCJ0lfsnQnIuJObPNjZxPCuFiQL/
zKXfIW0JvF2L4PnK9DnA7vvwY9qFndSLhGehoTmZyHZIzAeCX15ec2XpEGo5AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUtV03qWN9LW3ae9kLIKT3aWhQx8IwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM0MmUzMTM5
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAthr8wDQYJKoZIhvcNAQELBQADggEBAIr+AdtJwO5BxCe+/UqZ6yEmd8AO55+n
vCN+S6hyde9prPR6NzKfTjP0FYU4ttyCaMEWOx+S07nf+GlEZtt4CPUXIhDluOlR
B9G5kiGUipQuFtwjDjFBHp9ZKshQFIM/hyIlRjlWJZ3iKIYvxJ0gfENqqqBdsSo6
LAiUcdMmVceoVlsgxBbAPWtyl5f7RXVCrF49jowCiqf6Zb9hIFt8hcl1A64zdS/w
98qGgUZTs1x5Tucn4Vi0OCrjw/2PCS7vY8ilHFT7JEGjNo3YHCRjnz2aBg1Sm4zF
OnyleUp+0fY/1R23EMoxjxy7P01y4JqSXOc5pFtqKXWZ7ia/N/XuIqk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:45 2025 by rpki-client