Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37362e302f32342d3234203d3e20323132323338.roa
File: 34352e3133372e37362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: oZMJsHgbdaWtL4jeZL0WVWW3uuXapJNMRDI9HfVZdKQ=
Subject key identifier: 89:D3:60:E3:C7:56:01:47:16:29:61:BF:BC:62:65:A9:46:E3:6E:2A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 74BD52E94E4A6C7E33406D7E6149405ACBF3350B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37362e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 01 Jun 2026 22:24:46 +0000
ROA not before: Mon 01 Jun 2026 22:19:46 +0000
ROA not after: Mon 31 May 2027 22:24:46 +0000
asID: 212238
IP address blocks: 45.137.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:bd:52:e9:4e:4a:6c:7e:33:40:6d:7e:61:49:40:5a:cb:f3:35:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 1 22:19:46 2026 GMT
Not After : May 31 22:24:46 2027 GMT
Subject: CN=89D360E3C7560147162961BFBC6265A946E36E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:e6:a4:5b:29:d7:00:30:0e:41:09:cc:73:
78:47:e9:54:ba:e1:d0:82:3f:40:3b:3c:bb:8f:fb:
ef:be:18:2d:72:61:f5:d0:fb:47:64:63:b3:80:bb:
d7:6f:0d:8a:7a:e3:a1:f5:f0:13:06:46:17:8e:0d:
fd:f5:f7:1e:80:d9:21:73:b8:4d:2e:6d:4c:6e:7d:
ba:ed:f7:03:02:0c:0a:bd:58:4d:d1:40:9e:ed:68:
f2:99:a9:dd:ee:6f:e0:1d:bc:6e:46:b0:f6:ef:1e:
98:ae:1f:af:98:13:06:81:a3:ae:31:f3:16:2a:49:
e7:b3:0e:62:f3:00:42:98:3c:9b:4a:14:c7:0a:fe:
12:04:fb:e5:36:fc:c8:e4:b4:ad:65:a9:f8:4e:e5:
07:37:9c:49:12:23:8e:36:62:fa:a6:21:78:2d:90:
b7:27:ea:7f:dd:5d:73:b8:fa:01:d6:65:8b:66:f4:
24:ec:0c:9b:a0:2b:ca:cc:b2:c3:45:08:7f:e3:2a:
dc:31:1f:80:36:1f:6b:a4:6d:23:db:77:ee:fe:7c:
a1:07:3c:a6:d4:3d:72:7f:58:ba:1a:90:6d:4f:bb:
c7:70:4b:ff:58:fb:f4:06:7e:b3:b7:9f:0d:9d:0d:
e9:8e:9e:20:e4:60:f4:e6:49:be:be:fa:bb:b5:5d:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D3:60:E3:C7:56:01:47:16:29:61:BF:BC:62:65:A9:46:E3:6E:2A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.76.0/24
Signature Algorithm: sha256WithRSAEncryption
90:79:3d:f2:00:77:ee:79:14:6f:19:0d:7f:28:c6:7a:db:ae:
e6:b1:e1:d7:f1:3a:3d:23:7f:4b:60:24:a0:06:00:28:25:e3:
78:41:07:ed:c4:eb:f0:3a:84:89:a3:64:ed:1b:b9:4a:4f:4b:
3f:58:5e:9d:7c:63:16:e0:97:97:45:db:df:96:34:7a:66:87:
09:7a:4f:2d:ae:ee:ad:1b:52:d0:2e:20:1e:17:5d:0c:7d:0d:
79:72:74:a1:de:f6:44:f8:4a:c7:64:95:07:69:52:0c:fb:19:
2a:40:0c:dc:da:f2:4c:57:cb:b0:9c:fe:73:5c:5f:9f:67:f1:
32:d1:1d:9c:2a:a6:af:1b:41:87:76:46:d0:60:c2:7d:25:72:
cf:0a:b1:fa:9c:45:7c:e6:8f:a6:b0:40:b1:5e:fb:10:f4:37:
d2:22:6a:b6:c0:17:3e:ac:52:48:83:25:1c:b8:9e:2a:b5:64:
b4:d9:24:70:92:b9:2a:38:fb:c3:d5:74:54:37:c4:a1:a9:06:
16:b3:81:50:f4:6b:0a:6a:07:04:f6:ff:f4:85:3c:df:bf:a3:
f1:a2:cf:f1:a3:bc:0d:99:5e:08:58:8c:9e:d9:72:b1:c4:87:
67:7b:e0:a7:ef:b6:99:85:dc:ef:0b:8d:63:5d:09:03:32:7d:
34:c4:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:19:07 2026 by rpki-client