Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134322e302f32342d3234203d3e20323136323533.roa
File: 34352e3134312e3134322e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: EYreiQPnPdi5V6uvlsAIO6V1ICwMHe+zBW16k7H1898=
Subject key identifier: 88:8D:40:E0:17:54:E0:8C:F2:41:7A:D1:0B:BC:6E:E8:FC:5B:4A:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2AFC93065730ECC3AAA2069606FED01E65FC8440
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134322e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:26 +0000
ROA not before: Fri 16 Oct 2026 18:44:26 +0000
ROA not after: Fri 15 Oct 2027 18:49:26 +0000
asID: 216253
IP address blocks: 45.141.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fc:93:06:57:30:ec:c3:aa:a2:06:96:06:fe:d0:1e:65:fc:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:26 2026 GMT
Not After : Oct 15 18:49:26 2027 GMT
Subject: CN=888D40E01754E08CF2417AD10BBC6EE8FC5B4A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:f2:2b:04:99:8b:ad:0a:5e:34:11:49:d6:
b7:86:74:42:78:ca:7b:cf:83:fe:56:28:5f:83:9c:
0f:54:b7:8b:30:6b:1f:05:b4:10:69:ea:3a:1a:bd:
76:a6:20:c8:97:01:6d:f1:90:e5:69:ae:e2:6f:73:
c5:1f:05:a1:30:62:5b:e6:da:16:f9:d7:2d:5f:4c:
e0:86:96:f6:0f:a2:fc:ad:e9:75:6e:3c:0b:d2:83:
bd:3d:eb:c0:99:f1:76:54:eb:a6:53:a0:70:1f:13:
90:05:ab:6b:4c:5d:db:78:f1:0f:74:7c:3b:77:8d:
61:6c:73:d8:68:20:9d:5f:fa:a8:02:de:ce:41:8e:
cc:10:e4:09:7f:7c:e5:cd:f7:9a:96:be:3a:ab:76:
55:de:5c:e8:a2:5c:78:c1:28:63:36:10:60:51:d4:
e0:b4:0c:48:b8:76:d2:3f:20:c9:fc:03:f7:3e:e8:
37:ca:5c:bf:66:36:be:a2:6b:5d:38:75:c8:b4:8f:
3e:3b:4d:b2:d7:07:9d:3f:05:d9:2f:0e:7b:96:f4:
fb:b9:17:c5:b5:8e:64:33:55:9a:50:de:87:8d:4b:
64:58:ea:b2:74:45:4a:c1:03:1c:6e:5b:53:a0:ae:
c5:3d:ee:08:1b:ea:b0:b5:9d:d2:04:e4:dd:e5:9a:
9d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:40:E0:17:54:E0:8C:F2:41:7A:D1:0B:BC:6E:E8:FC:5B:4A:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134322e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c8:47:a3:98:6d:2e:b1:3c:d1:6a:05:96:83:cb:3a:21:82:
5b:1f:0a:c2:31:c4:79:0a:2a:e2:21:14:bf:14:8e:12:d0:4c:
a1:38:78:ec:f8:c0:32:47:62:4f:c5:4c:fd:5b:54:13:87:5b:
65:36:b6:98:ed:47:a3:e5:d6:46:1f:e3:67:57:f2:f3:cd:2b:
47:70:30:f1:7a:8a:0d:ba:e3:c4:24:ad:48:bb:5d:da:94:2c:
77:16:35:a4:29:80:2a:cf:da:75:59:b5:43:5c:e6:0b:50:ab:
38:12:6b:08:66:1a:4b:17:72:45:48:8e:01:62:92:e5:4a:b7:
f6:ec:dc:20:9c:e6:b0:be:54:5d:76:16:65:3d:73:e9:ec:40:
e6:5c:a3:44:72:ee:a3:79:e3:e4:b6:15:d0:2a:ce:e9:64:67:
57:15:00:32:1b:a3:bd:7c:8f:59:cd:8e:32:43:68:78:c1:ec:
bc:88:3e:c1:40:25:9b:21:d0:4b:cd:4a:8f:6f:a2:df:64:a5:
bf:64:52:21:f0:b1:bd:15:6c:95:f9:51:91:38:e2:9c:b6:46:
b1:d0:24:d1:fa:f1:3c:3b:98:5d:71:8a:4a:36:72:d7:fd:1e:
54:36:86:dc:52:a0:7c:a1:3e:f8:67:6c:60:50:d4:79:67:4e:
ab:51:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:28 2026 by rpki-client