Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134312e302f32342d3234203d3e20323136323533.roa
File: 34352e3134312e3134312e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: mEvOodFXDPcmNN4zo1ZF5AtXYCuvl3SV37LGaA8PkLM=
Subject key identifier: 58:8A:C7:E1:FB:A6:12:74:17:79:7E:39:79:16:95:38:37:14:42:91
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 11BB8FB2B3CB6910F3CDCE0A0985B021CCB26F29
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134312e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:25 +0000
ROA not before: Fri 16 Oct 2026 18:44:25 +0000
ROA not after: Fri 15 Oct 2027 18:49:25 +0000
asID: 216253
IP address blocks: 45.141.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bb:8f:b2:b3:cb:69:10:f3:cd:ce:0a:09:85:b0:21:cc:b2:6f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:25 2026 GMT
Not After : Oct 15 18:49:25 2027 GMT
Subject: CN=588AC7E1FBA6127417797E397916953837144291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:72:18:9c:e8:33:0c:3e:07:d0:d9:69:55:
7e:52:48:40:0f:dd:95:48:fd:e8:41:de:cd:9b:96:
2e:59:76:c0:5f:15:2e:ec:19:5d:29:8a:8e:d7:fa:
72:cf:fd:da:11:26:19:fb:39:9f:96:8a:c1:9a:7f:
7e:04:fb:ae:d4:98:44:e1:62:1b:dc:3d:f4:3a:dc:
49:31:b7:80:2c:80:c4:19:22:59:4f:14:42:74:bf:
54:84:1a:95:af:c8:9f:f7:b5:61:a9:6a:d4:45:33:
b9:83:98:63:d7:7e:32:12:ae:4d:fb:17:c8:d0:da:
a0:0d:60:81:5c:9d:43:c0:58:6c:38:8d:cf:d6:50:
22:45:e3:ee:0e:1c:8e:31:2d:76:03:ea:24:c0:f4:
24:02:46:0b:dc:7e:d4:65:82:e7:aa:4a:8a:89:98:
ad:f3:d0:33:a8:3c:2d:39:b1:da:dc:ac:d3:f7:86:
45:8b:32:8d:5b:65:96:80:fd:51:7a:8d:d1:cd:3f:
02:8b:1a:49:96:54:52:10:89:fe:41:2a:85:db:ed:
b3:0c:b0:a1:19:e4:76:f1:00:c6:5f:c1:d0:3a:2e:
5d:97:5b:54:42:1b:5a:e8:4d:1d:91:14:bd:bc:7a:
a8:55:15:06:23:78:b8:cf:af:65:c4:28:22:d8:c2:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:C7:E1:FB:A6:12:74:17:79:7E:39:79:16:95:38:37:14:42:91
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134312e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.141.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bb:7a:03:9e:79:f9:f9:e2:30:98:e8:3b:61:c8:4f:a9:93:
97:7f:6d:dc:67:cf:bf:5b:e9:8e:b0:f5:48:2b:37:d6:7f:d7:
13:5a:c8:25:10:18:1c:38:73:c2:4b:06:9c:48:31:ea:04:73:
e5:9c:2d:7d:ae:9c:6d:81:56:7e:95:15:fc:70:63:02:ea:58:
c4:55:39:9d:eb:02:1b:cd:1f:e5:36:9a:2e:a8:70:31:e3:56:
05:d8:44:1b:8c:d1:6b:a2:8b:31:04:7c:b5:f1:fe:ae:54:81:
71:5c:8b:c6:da:15:f0:50:36:70:41:e7:5b:b2:bc:1c:d9:4e:
a5:63:17:0a:33:70:b8:bd:8a:d8:20:ce:5a:4d:89:d7:d7:93:
91:7a:b2:c5:5c:4c:87:fb:34:60:b9:62:3e:6a:45:f9:b6:ff:
be:af:f4:83:69:d1:35:06:05:b4:01:23:be:3c:53:f0:a7:42:
c2:2e:bc:5a:85:c1:03:4b:cd:b0:a9:d2:0a:2e:df:99:13:70:
5b:ba:b0:17:16:5e:ea:15:1a:0d:50:af:a0:d7:86:1b:b0:18:
76:11:c0:3f:d9:83:ee:01:49:22:29:fe:f1:a9:00:32:ba:08:
41:8d:83:66:af:69:82:44:6e:c1:6f:e6:3b:1f:19:0a:b3:06:
de:9b:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:16 2026 by rpki-client