Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32342d3234203d3e20323136323533.roa
File: 34352e3134312e3134302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: V2TdmfAAlevY2fHmOOadJPf3bk7pQGlVORqiq5FhyFY=
Subject key identifier: 46:11:C7:C0:6B:81:AD:10:DE:9E:89:EB:6C:18:A5:8F:C9:45:AE:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2D62D0B62404BCC9506B89D8FA890F3B96696E23
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:24 +0000
ROA not before: Fri 16 Oct 2026 18:44:24 +0000
ROA not after: Fri 15 Oct 2027 18:49:24 +0000
asID: 216253
IP address blocks: 45.141.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:62:d0:b6:24:04:bc:c9:50:6b:89:d8:fa:89:0f:3b:96:69:6e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:24 2026 GMT
Not After : Oct 15 18:49:24 2027 GMT
Subject: CN=4611C7C06B81AD10DE9E89EB6C18A58FC945AEF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:52:65:2b:1e:a0:93:fa:ba:24:78:68:1d:
3c:9a:23:81:7b:d8:6d:76:c5:54:c8:8e:59:e9:e0:
d4:5d:6c:1a:d5:e9:6d:7c:26:99:14:77:22:f9:20:
a8:88:98:b0:7f:a5:47:88:e6:30:de:94:76:e1:47:
90:73:00:2e:e7:de:18:3f:52:c4:80:42:95:4b:f5:
e6:de:07:08:b2:ed:ec:54:14:06:c4:5b:c1:c3:ac:
14:43:06:11:9b:ed:b5:d9:f5:0e:77:52:e9:b1:06:
2c:a0:9f:d9:d2:77:0d:9b:d5:aa:84:d5:a7:f6:df:
7e:8d:e8:3f:ee:a2:07:f6:99:f1:22:53:ed:35:91:
7f:16:fd:55:bf:a0:ed:ae:03:04:1f:a6:f3:05:72:
92:6d:34:28:4d:f5:5d:51:33:0b:1d:c7:67:0f:c8:
43:3f:d2:76:be:bb:54:95:f6:9e:22:bf:48:81:d8:
a1:34:56:4b:15:74:c3:cf:f3:28:39:67:20:c4:28:
04:49:b5:6a:5b:e2:6b:12:72:a7:9d:ce:4c:a9:dd:
fd:f1:64:53:fb:84:7b:aa:60:b1:7b:80:57:08:28:
f0:d0:24:c3:d4:47:37:54:be:a3:bd:1d:f7:04:d4:
35:38:65:5e:72:93:9f:0c:0f:56:04:4d:04:89:b2:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:11:C7:C0:6B:81:AD:10:DE:9E:89:EB:6C:18:A5:8F:C9:45:AE:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.140.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5e:f3:91:1d:48:bb:08:d7:76:17:c8:b9:26:bc:4c:e9:ad:
cb:8d:ad:3c:78:64:c9:d3:90:e1:db:7d:20:0d:9c:8d:b4:d3:
68:fa:03:1c:a3:05:4b:0d:d5:8d:fa:29:aa:e5:d1:7f:1d:c8:
df:55:9e:d9:a3:62:86:41:dc:60:e5:d5:5b:2f:f5:c3:77:a0:
7d:f7:61:3c:fe:86:1c:e4:05:de:40:fe:4e:2a:bf:8b:34:72:
12:2e:f7:c9:04:ce:af:f7:2b:5c:19:47:c8:4a:52:82:59:f2:
38:a6:4c:5b:ae:e2:d9:55:ee:b6:f1:cb:cc:e7:5c:f5:b4:8e:
23:c3:f7:46:6a:9c:34:97:ed:98:57:0b:ba:41:db:d0:b9:a3:
b0:4c:aa:a1:48:6f:29:e7:30:60:67:00:fc:c9:5c:9f:19:ea:
16:59:b7:c1:ec:52:95:1f:1f:d5:42:86:d7:ce:73:39:b5:3c:
23:91:a1:fb:be:56:5b:86:4c:14:4a:48:5d:ac:5a:40:ce:b3:
db:3e:ab:c8:ab:86:dc:f0:01:68:be:d9:02:4b:b3:db:8f:64:
52:b7:52:52:7f:d4:b6:db:5f:71:bd:24:23:6c:b6:c0:52:5b:
28:f1:fd:69:17:a9:31:17:a7:69:74:39:a1:6b:35:31:f0:d1:
fc:70:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:19 2026 by rpki-client