Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138382e302f32342d3234203d3e20313734.roa
File: 34352e3135322e3138382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: 3rl38SzHTDf+3E9KykyO9+RPb1r6pwYA9l+DPEPfR5M=
Subject key identifier: FA:12:6C:CF:7B:86:3F:89:FA:6C:08:B4:FC:0E:55:7D:1A:7C:89:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D6AAADE583B8B966683715699C60B72F3C71CCD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138382e302f32342d3234203d3e20313734.roa
Signing time: Fri 19 Jun 2026 18:25:30 +0000
ROA not before: Fri 19 Jun 2026 18:20:30 +0000
ROA not after: Fri 18 Jun 2027 18:25:30 +0000
asID: 174
IP address blocks: 45.152.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6a:aa:de:58:3b:8b:96:66:83:71:56:99:c6:0b:72:f3:c7:1c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 18:20:30 2026 GMT
Not After : Jun 18 18:25:30 2027 GMT
Subject: CN=FA126CCF7B863F89FA6C08B4FC0E557D1A7C8994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:43:81:7b:c1:d4:ae:b9:3c:ac:16:55:d7:
59:44:ba:c9:84:98:0e:dc:bb:f6:4b:38:4f:9d:61:
5c:67:ee:26:1f:61:1e:e4:a6:58:78:60:bf:29:37:
39:4c:46:ea:3a:35:24:3b:de:c4:17:3c:6d:d2:36:
03:35:a4:11:6b:a6:98:b3:84:6f:e7:ce:ea:13:c6:
97:69:87:3d:c5:45:07:47:e1:e9:a3:00:49:32:d5:
3a:74:30:46:52:36:15:0d:3a:d9:e7:74:25:87:26:
3f:89:aa:58:82:a5:ef:e5:46:03:32:33:e2:67:02:
43:e2:c5:68:c9:4d:4b:44:6f:46:cc:90:09:d8:3c:
74:34:31:20:70:58:c5:56:01:2b:8b:44:a7:f4:ed:
43:50:bb:77:a1:15:e5:9a:1d:13:3c:2a:55:8f:3d:
f4:0b:41:86:4d:c4:bd:18:9a:6a:be:2c:d5:da:13:
96:90:5e:2c:2a:7c:40:58:6f:94:47:1a:14:4d:0d:
f6:c0:be:ac:4e:18:18:d8:83:da:ff:23:46:85:1c:
20:4c:04:f2:cc:60:f0:bb:07:ff:c0:5f:ea:3e:7a:
07:09:8b:a9:f1:7a:10:4d:34:0d:1b:7a:a0:b4:d4:
34:9a:e0:28:f6:3a:cd:b7:e5:0a:9f:5c:db:e5:97:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:6C:CF:7B:86:3F:89:FA:6C:08:B4:FC:0E:55:7D:1A:7C:89:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e3138382e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.188.0/24
Signature Algorithm: sha256WithRSAEncryption
78:da:af:aa:10:f7:ee:0b:3a:ac:a6:27:a6:33:f7:df:cb:8f:
b0:fe:c2:e2:28:3a:e9:7e:f3:ff:a3:3e:38:e6:a3:5a:1e:27:
d4:b3:9f:e6:cd:4a:d5:9e:8e:93:f7:e0:3b:32:dd:0c:8f:f1:
0d:87:e7:a0:97:b3:68:a7:16:1e:eb:f4:cd:a5:8c:35:6b:9b:
7d:c7:5a:47:08:94:13:e1:e0:fb:db:75:d2:af:35:f2:2c:56:
ad:18:97:18:c0:ab:aa:cd:ab:33:4a:7c:1a:64:25:81:b5:dc:
4d:d1:88:49:09:d4:06:25:2b:1c:83:01:c6:64:d3:29:1c:45:
1b:f9:32:22:0b:d7:54:f4:d2:67:89:ff:16:93:c4:80:8a:36:
da:6b:51:4e:6c:9c:55:54:30:a2:5b:95:ce:cf:ab:1a:e1:9a:
41:1b:89:48:0b:1f:e5:16:da:e9:db:19:af:f0:2d:c5:f1:a0:
44:40:7e:c8:eb:cc:40:5d:98:0b:b9:ab:0a:7a:f8:6b:f0:e1:
21:3d:17:f0:0d:36:10:1f:d7:2b:43:fe:b3:ec:46:05:2f:dd:
a6:84:c8:8f:d3:66:03:49:bd:64:ae:c3:c7:84:1c:a1:51:a9:
1f:24:13:f3:74:2b:5d:d6:2f:01:f8:a1:d3:18:7d:d4:66:65:
88:26:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:26 2026 by rpki-client