Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139332e302f32342d3234203d3e20323037313337.roa
File: 34352e31342e3139332e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: 8z5ONuVoJiQcZFFotFYqXEBx+MliP2CQUYN/MhjdQxk=
Subject key identifier: 1B:CE:9F:1B:15:A7:07:47:7D:97:58:51:24:78:FE:E6:81:F1:1D:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3927EBD9E29EA8C56FCC5DFC886DEC7F2968394D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139332e302f32342d3234203d3e20323037313337.roa
Signing time: Wed 01 Jul 2026 15:25:57 +0000
ROA not before: Wed 01 Jul 2026 15:20:57 +0000
ROA not after: Wed 30 Jun 2027 15:25:57 +0000
asID: 207137
IP address blocks: 45.14.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:27:eb:d9:e2:9e:a8:c5:6f:cc:5d:fc:88:6d:ec:7f:29:68:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:57 2026 GMT
Not After : Jun 30 15:25:57 2027 GMT
Subject: CN=1BCE9F1B15A707477D9758512478FEE681F11D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:7b:2f:87:e7:d5:f5:7f:73:dc:5e:da:0d:
08:fd:ec:9e:fc:e8:0d:f9:ff:82:5d:39:d7:97:6e:
2a:80:72:fc:0f:b3:7c:58:59:7d:de:da:24:41:a2:
45:2d:e1:da:1f:a6:e5:77:72:c0:4f:84:e4:c6:b2:
a4:df:b8:6d:74:d7:8d:d3:aa:0a:4a:c5:51:5f:54:
2e:34:f1:c6:28:4d:07:eb:4b:8c:c3:36:72:89:a8:
8e:97:f9:7c:db:d4:10:4c:49:50:37:68:09:7f:53:
ed:88:d5:22:04:32:4f:64:f1:9b:74:b3:53:a5:2b:
43:51:36:bf:51:9a:c7:82:81:fa:7e:81:df:15:05:
9d:47:cd:ab:6b:49:15:82:de:de:f5:65:52:3a:d8:
f0:19:d0:eb:3a:67:21:e9:0f:84:b5:fc:b8:f5:1e:
c5:d7:fd:3f:ec:8d:a3:90:ee:3a:4e:24:59:9c:61:
f1:22:45:d1:47:04:05:64:50:0f:5c:ee:e6:f0:56:
0e:75:2d:66:99:a6:84:7d:fc:9f:12:41:10:85:1e:
48:b7:4d:59:60:24:e7:db:76:0f:d9:cf:14:0f:74:
fa:39:2b:f5:58:eb:bc:04:37:d7:c0:52:8d:9f:71:
3e:72:6f:87:34:2e:71:d9:58:f7:b4:f4:36:42:1c:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:9F:1B:15:A7:07:47:7D:97:58:51:24:78:FE:E6:81:F1:1D:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139332e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.193.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ee:ff:a3:a9:6c:57:82:9b:da:86:a0:f7:66:e5:c6:4a:09:
13:28:79:ba:95:e7:19:a8:9e:a8:8b:02:3c:38:b6:d2:35:b3:
37:c4:30:42:df:4f:2c:42:00:a6:33:7e:cc:e0:ba:17:29:ca:
ca:b0:4d:1c:dd:83:b8:12:30:22:70:90:b6:89:bb:39:a4:84:
04:46:46:ec:5c:5e:13:d7:a2:e3:5f:88:31:a9:ee:3c:e1:cb:
99:5b:29:af:b5:e0:b2:55:f8:3b:a0:48:95:1f:55:7b:64:5c:
ab:ba:b3:2d:08:bf:e5:7e:c6:e4:62:f1:da:f3:92:78:af:46:
31:0b:14:86:e4:38:13:8d:5b:56:00:a7:10:4d:92:fc:34:a9:
0b:76:97:91:ab:8c:ef:e9:69:67:97:41:ca:aa:51:52:44:79:
e5:d5:4c:a5:62:a9:27:5b:a6:d7:54:7b:fe:27:5a:64:76:bb:
de:fe:9f:98:88:12:ca:71:db:63:da:17:8e:ea:14:a8:cf:b4:
6a:95:1a:1c:2b:1e:be:a5:d4:84:52:a3:7c:a2:5a:fa:ab:8f:
6f:da:1b:9d:db:6f:fe:14:11:cf:e8:31:76:d6:71:1b:c4:33:
e3:90:5d:6a:d2:ce:ec:70:82:26:f0:de:27:11:4c:c6:b1:ed:
e2:51:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:54:04 2026 by rpki-client