Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20323132323338.roa
File: 34352e3133372e37372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: LIcGHE/lQPViciOgbCnlf9/Xafm1JwGQ6nZ73bIwjTw=
Subject key identifier: D4:13:15:49:57:33:62:A7:13:E8:B5:13:4E:26:8A:C4:B3:0C:5C:BA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3352154F8E309FEA47082ABB020965CA5134218A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 01 Jun 2026 22:24:47 +0000
ROA not before: Mon 01 Jun 2026 22:19:47 +0000
ROA not after: Mon 31 May 2027 22:24:47 +0000
asID: 212238
IP address blocks: 45.137.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:52:15:4f:8e:30:9f:ea:47:08:2a:bb:02:09:65:ca:51:34:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 1 22:19:47 2026 GMT
Not After : May 31 22:24:47 2027 GMT
Subject: CN=D4131549573362A713E8B5134E268AC4B30C5CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:cb:f5:63:14:69:58:33:2b:08:a1:4d:01:
e9:78:b7:2b:c9:07:81:cb:a0:3a:42:5e:48:a4:4f:
d7:fa:cc:d5:9d:69:02:e5:f6:23:c0:8c:e5:fd:27:
5a:39:f5:8e:91:b0:49:73:da:66:2a:80:c2:b8:f4:
ab:22:37:50:b5:66:25:80:86:52:50:5a:89:55:92:
56:2d:f9:97:a9:55:d5:58:2f:9d:cc:27:e2:cb:80:
5e:b9:b6:f9:74:90:a9:25:5a:44:73:60:2b:ff:11:
e2:9e:0a:94:07:fa:c4:d7:b1:b2:01:b2:65:6c:02:
d3:37:1b:1d:ca:7f:d7:09:ee:37:14:7a:88:12:04:
02:ea:a7:99:05:b6:74:f8:f6:34:cf:75:97:28:49:
2a:79:9f:7e:99:85:4d:de:23:e0:6a:83:e4:77:16:
cd:25:a7:b7:53:8a:79:b7:c8:ce:26:93:fd:88:1f:
3f:cb:a7:86:ff:97:7e:18:62:6f:2f:ef:b3:c2:c0:
fb:4a:2c:e6:61:15:fe:9d:f0:f0:52:ab:e3:b6:e4:
db:4a:cd:00:3e:89:b6:31:57:94:04:74:62:4f:36:
a1:dd:ae:a7:4f:57:70:a5:35:24:41:5f:e4:f0:a7:
4b:68:19:17:a4:6f:9e:ab:d7:d5:94:72:ac:19:ff:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:15:49:57:33:62:A7:13:E8:B5:13:4E:26:8A:C4:B3:0C:5C:BA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
47:54:43:2a:01:74:2e:99:87:df:6e:c7:fd:f7:d6:02:4b:a1:
d0:ce:d5:aa:8a:f6:fc:75:c3:45:cf:13:c6:e3:1a:5e:ab:24:
51:ea:fa:07:20:6e:61:c4:27:ab:83:12:84:02:e9:02:06:99:
17:02:b1:b4:c8:b4:d9:94:2b:58:2e:45:c1:7a:12:2d:37:83:
d6:b7:07:1c:c5:38:c5:59:b1:ad:2a:99:94:ea:ec:d0:c5:7e:
c3:45:da:6d:a4:0a:2d:08:67:33:2e:f6:1c:3b:7c:b5:ad:0a:
91:5c:7d:e2:7f:58:d8:bb:92:24:35:6e:4c:b9:9c:d3:c4:49:
12:9e:e6:ab:66:59:28:61:44:e0:09:84:63:aa:0d:10:7f:a4:
31:42:bc:5b:d2:b0:3f:eb:21:5d:1f:3c:b3:a4:73:54:25:d6:
5e:9b:3c:79:5c:62:e5:c6:71:b7:8b:fa:0b:9b:d0:0c:c6:d1:
da:d8:db:12:08:61:7c:f3:ab:63:27:61:9e:63:c5:46:b1:71:
a8:36:78:83:72:36:c6:a4:2e:09:d4:63:b0:79:42:bf:40:b6:
c9:bf:fc:1e:bf:d5:5b:40:21:56:e6:a9:8e:ca:62:01:3f:67:
70:b6:9f:cf:02:a1:c8:5b:c5:20:66:f5:c3:b1:93:41:3e:ac:
34:b1:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:12:25 2026 by rpki-client