Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
File: 34352e31342e3139322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: o9VYsjDbiMWF/+9sy5uc0IwDiF/IpBdXHd0XE/GHLa8=
Subject key identifier: 86:03:4C:7F:96:FB:95:18:60:58:C0:32:B4:FE:FD:29:4A:A7:AD:20
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7AF67D6E6506776766BCDF45854A3D21D257884E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 01 Jul 2026 15:26:03 +0000
ROA not before: Wed 01 Jul 2026 15:21:03 +0000
ROA not after: Wed 30 Jun 2027 15:26:03 +0000
asID: 207137
IP address blocks: 45.14.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f6:7d:6e:65:06:77:67:66:bc:df:45:85:4a:3d:21:d2:57:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:03 2026 GMT
Not After : Jun 30 15:26:03 2027 GMT
Subject: CN=86034C7F96FB95186058C032B4FEFD294AA7AD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:92:aa:f6:17:d9:f5:76:d4:66:00:32:44:
79:21:ce:87:e5:77:d3:7e:84:8b:3b:fe:f4:69:f1:
01:e4:e5:60:2a:1a:64:07:8d:e3:94:df:5f:e7:b6:
22:7d:c0:24:95:95:e4:3f:27:30:a9:97:40:b6:11:
21:b5:8a:04:5e:e3:e7:0c:d8:89:24:8c:3a:6f:f8:
52:02:8f:55:03:f8:1b:d1:2d:62:8e:2f:31:05:7c:
17:24:3c:e0:90:a5:40:14:23:3a:a1:ee:f2:69:a6:
0b:ba:3d:4f:a3:f6:80:20:af:7f:b3:15:75:28:29:
9e:85:2d:36:cf:37:da:68:d8:9f:ed:29:c6:3a:c3:
52:67:3c:15:0e:6c:78:5d:f9:51:68:c2:00:3e:ca:
c8:2e:07:c9:ea:1b:a7:67:a8:02:44:10:d1:21:0f:
82:9f:03:d0:57:84:90:fd:7f:a1:95:5f:26:fb:de:
56:bb:69:63:aa:fd:45:a3:30:98:10:5d:f4:68:7d:
46:05:ca:11:74:2d:cf:ed:25:1d:8b:2b:49:6a:b8:
a8:77:bc:9a:30:db:83:88:4b:88:7c:c6:9f:c8:01:
66:07:f0:24:2f:e1:59:5a:40:77:23:47:29:51:bf:
a6:ba:ac:0a:75:b0:7a:63:e1:17:1c:d9:b8:4e:b7:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:4C:7F:96:FB:95:18:60:58:C0:32:B4:FE:FD:29:4A:A7:AD:20
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.192.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:13:b1:32:9f:4d:dd:0c:aa:f5:e4:e7:83:ed:d1:5a:99:9c:
9c:29:23:2e:ef:08:2c:99:8f:09:fc:75:43:7b:80:15:4c:44:
cb:d7:83:ea:5c:66:47:3c:f3:53:aa:18:81:64:1c:65:3e:61:
ad:b6:5a:af:a9:db:12:fd:c0:22:34:d6:30:0b:de:f3:a1:69:
67:ba:8d:2d:5d:56:e2:c7:20:1d:32:95:b2:57:2c:4e:59:34:
5d:b4:8e:d0:76:27:f2:e9:ec:35:02:f9:00:73:bb:f1:54:db:
64:0d:6a:af:d4:cd:61:da:4a:ad:29:13:1c:08:d3:f7:18:55:
23:24:2b:d7:cd:8e:cd:1d:3e:37:29:75:f5:a3:32:d5:7a:10:
0a:8e:a5:01:12:3a:d5:34:41:ce:81:b5:94:cf:38:86:33:c7:
51:e7:60:af:6c:b4:e6:70:b0:9b:2a:8e:fb:3f:8e:08:e8:b2:
0b:ef:39:76:13:7d:de:b6:d2:c3:e4:02:d8:90:93:cb:d6:5e:
8d:e5:71:75:0e:ee:55:e5:20:85:ec:88:e1:a1:f0:9c:3f:29:
ee:8b:5a:10:bf:29:6b:c3:b6:09:e2:68:19:1c:38:4f:46:78:
e3:3d:38:e3:ee:f9:c8:6b:93:43:42:c0:ca:6e:46:9b:26:81:
39:db:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:13 2026 by rpki-client