Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37382e302f32342d3234203d3e20323132323338.roa
File: 34352e3133372e37382e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: EAKZFOTjQ26bN7YpxXZmduJXbhpO/ysdPamLVbf8GQE=
Subject key identifier: AA:6E:05:DF:A0:D0:73:FD:DD:0C:FF:05:23:9F:2A:F9:8B:C8:FD:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20E150F996784B77E19745E9C4D109B3E3F720B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37382e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 30 Jul 2026 09:27:21 +0000
ROA not before: Thu 30 Jul 2026 09:22:21 +0000
ROA not after: Thu 29 Jul 2027 09:27:21 +0000
asID: 212238
IP address blocks: 45.137.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e1:50:f9:96:78:4b:77:e1:97:45:e9:c4:d1:09:b3:e3:f7:20:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 30 09:22:21 2026 GMT
Not After : Jul 29 09:27:21 2027 GMT
Subject: CN=AA6E05DFA0D073FDDD0CFF05239F2AF98BC8FDB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:37:63:63:86:c3:b2:87:e5:af:73:9d:6a:
15:9b:ab:98:9b:70:11:92:8d:36:0a:e9:d8:9e:f6:
b8:ee:58:06:e8:cc:bf:3f:36:18:9e:1f:ec:44:de:
69:27:2e:f1:99:ae:71:24:66:3f:4d:d4:db:d7:30:
da:64:13:1c:66:bc:97:54:13:93:2f:e2:1e:ea:4d:
14:84:8a:79:4d:ac:35:ee:b3:5d:52:57:ea:85:40:
47:7a:7b:7b:47:53:cc:bb:1e:ef:a5:5b:42:0e:5c:
b0:e2:67:4b:9e:9b:d7:ac:90:3b:f5:41:75:07:57:
47:7e:05:b3:98:9c:5e:62:96:58:48:ec:78:06:97:
d1:aa:30:94:c2:57:bf:46:c9:a8:b7:2f:76:d0:dd:
16:e8:87:f5:39:df:6d:3b:a5:39:98:aa:bb:9e:24:
4f:f2:47:8e:ce:8c:a4:aa:a0:71:0b:fb:6c:b9:f0:
e7:c6:1f:37:d8:3f:2b:40:df:3f:97:23:4c:5c:d2:
10:3c:7b:e8:6c:59:31:73:07:20:e1:37:bd:f8:2a:
1e:08:0e:fd:35:00:90:0a:82:bb:2e:d5:ff:13:7c:
47:c5:f3:87:97:74:a1:d6:9b:d0:bb:89:0d:cd:7a:
27:79:69:f0:d0:59:77:49:9b:8d:9b:ee:e5:88:c8:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:05:DF:A0:D0:73:FD:DD:0C:FF:05:23:9F:2A:F9:8B:C8:FD:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37382e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:40:4b:57:41:53:c1:d2:c9:17:6f:e2:82:26:ae:0c:4d:8a:
e3:45:2a:83:70:30:9c:b0:4b:dd:f9:4a:b6:53:b8:3c:fc:c0:
84:d4:08:9e:7b:a5:4a:a3:bb:a9:b4:65:95:98:83:97:02:65:
01:e2:db:4e:50:6b:c3:cb:17:78:68:ef:61:73:e1:7d:80:36:
41:2f:d9:ae:c1:ac:5c:a6:19:ba:5a:37:08:65:3f:90:b1:9f:
d8:8e:cd:e0:3e:d3:73:b9:e0:70:28:dc:8d:33:15:ba:22:6a:
d3:84:23:c3:80:a7:38:64:01:5e:11:6a:0b:d4:17:bf:bf:0c:
bb:4d:d0:98:39:2d:ed:a6:df:90:f0:74:ec:5d:4e:68:6f:99:
c0:24:69:85:76:67:f7:e4:f8:a3:03:e9:c7:dd:5d:19:6d:c3:
a9:ca:c8:98:ea:d0:31:e5:74:c6:2d:1c:a6:3a:c2:11:98:d2:
2d:49:1b:64:b6:56:69:11:80:75:f1:64:38:52:18:60:8b:32:
7e:03:9b:b1:2d:d0:f6:f0:ae:df:c5:98:0e:d7:d9:06:5b:59:
4f:16:55:fe:c6:53:5c:f4:3c:0e:b7:e0:f2:6e:76:b0:03:6f:
6e:c9:cd:14:2d:77:6e:22:4e:86:c7:2c:4a:ef:4e:36:6d:26:
89:52:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:08:39 2026 by rpki-client