Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
File: 34352e31342e3139342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Nt0db0LOJ8Z51DJTsYB4OVwRwnpZMiUKqF5X/RPaCaA=
Subject key identifier: 61:45:0B:82:A4:46:4C:6B:E1:D4:9E:3E:B1:3C:A8:E2:D4:D4:EF:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41B4B90492C7B5A35906F80259C37A00285C6474
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
Signing time: Wed 01 Jul 2026 15:25:58 +0000
ROA not before: Wed 01 Jul 2026 15:20:58 +0000
ROA not after: Wed 30 Jun 2027 15:25:58 +0000
asID: 51167
IP address blocks: 45.14.194.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:b4:b9:04:92:c7:b5:a3:59:06:f8:02:59:c3:7a:00:28:5c:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:58 2026 GMT
Not After : Jun 30 15:25:58 2027 GMT
Subject: CN=61450B82A4464C6BE1D49E3EB13CA8E2D4D4EFD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:70:86:bc:ce:c4:93:80:b9:a8:f4:15:4b:
9b:f2:03:9c:13:ea:7c:ef:8b:ea:b9:d9:1a:48:9a:
94:08:65:f2:29:7e:91:dd:a5:66:7c:2e:4e:34:9d:
bd:37:1d:59:f6:3f:a0:03:6a:c4:0c:c4:33:88:f2:
8c:16:8b:d6:86:03:ef:0c:1f:03:8b:71:2f:c8:24:
44:96:22:4a:98:59:51:d6:18:a0:4b:2a:02:66:05:
d2:78:b4:37:3d:ca:9c:84:91:ac:54:99:ce:d8:e7:
fd:29:4d:96:4c:8b:6c:fd:34:8b:2e:c4:b8:31:2a:
fd:06:16:d0:3b:a6:2a:4d:10:e5:1e:98:74:6c:42:
ed:d4:e9:f8:ca:48:ef:23:d3:92:f3:7e:65:6c:62:
57:60:30:5a:ea:12:a0:67:62:44:f0:51:46:7d:87:
13:08:8c:9b:33:71:67:cd:83:f7:2c:97:40:e3:53:
b2:91:15:d4:a3:62:2c:31:9e:76:32:c1:24:4b:ce:
4c:7a:eb:dc:50:c3:e2:7a:0e:b3:c9:2f:23:2d:26:
53:e1:44:04:65:5b:42:c7:3e:b0:76:70:31:8a:01:
e5:9a:58:3d:4b:c2:e5:2e:69:9e:7c:6c:56:c1:93:
6e:b4:b7:90:c8:6c:4c:d3:10:23:21:d0:53:c1:5a:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:0B:82:A4:46:4C:6B:E1:D4:9E:3E:B1:3C:A8:E2:D4:D4:EF:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.194.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0c:86:32:ce:6b:03:8e:09:09:e5:b8:4d:a1:30:27:29:1b:
0e:c6:5f:72:42:1f:fa:55:fb:f1:34:85:8f:6c:d4:4b:c2:89:
c3:52:d3:75:78:eb:01:63:8b:4b:b5:91:70:fa:ff:76:21:ab:
b2:00:ef:dc:74:28:06:e1:c8:74:95:54:42:cd:f5:f5:73:aa:
c1:22:be:09:a5:a4:f7:39:d7:4a:f5:94:1b:e2:5a:b3:cc:21:
57:36:91:96:1a:b3:d8:d7:74:4c:a1:e6:29:c2:0a:6a:d0:d7:
97:91:53:94:1f:a8:0f:56:50:09:33:b8:0f:3a:5a:a4:3a:ae:
e8:49:4c:49:50:99:26:e6:a7:b9:06:70:b4:01:28:c4:04:35:
33:d1:9c:4a:6f:4c:5e:23:a3:2e:03:c0:06:d1:90:a6:66:75:
ff:63:06:4b:be:2f:17:e4:ad:64:a1:c6:d9:ac:f2:20:bd:0e:
1b:6c:25:95:09:0b:dc:38:b0:4d:ed:65:f5:11:7f:61:b7:d9:
4e:eb:24:80:59:ce:d3:79:af:aa:d4:4f:e0:3b:10:94:a4:87:
c0:69:dd:0b:ed:2e:2a:8a:2d:e4:38:fa:c0:d0:47:45:3b:f3:
6e:39:d0:7c:e9:f7:75:42:4e:01:ac:32:55:8b:be:09:cf:4d:
af:38:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:14 2026 by rpki-client