Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
File: 34352e38302e32382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eO9MtpGZ6UkPFa5UwFrKBbiXB6pQqHmRWMiCuEu7qHg=
Subject key identifier: 1A:CA:19:B7:05:97:95:E2:51:6F:A5:D5:05:A0:4A:71:50:6B:66:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 137C536C80360FCE5D3C2940D07704312743A455
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 23 Aug 2026 15:28:07 +0000
ROA not before: Sun 23 Aug 2026 15:23:07 +0000
ROA not after: Sun 22 Aug 2027 15:28:07 +0000
asID: 136787
IP address blocks: 45.80.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7c:53:6c:80:36:0f:ce:5d:3c:29:40:d0:77:04:31:27:43:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 23 15:23:07 2026 GMT
Not After : Aug 22 15:28:07 2027 GMT
Subject: CN=1ACA19B7059795E2516FA5D505A04A71506B66A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:10:26:ae:41:bb:ef:4c:c4:60:c6:e4:2a:
45:12:14:7a:fc:a0:ed:59:d9:b9:0d:12:b2:ef:e9:
ef:1f:7a:bd:84:dc:d2:e2:4e:28:94:2f:37:77:b7:
77:a0:42:d0:d7:ad:23:99:b6:29:fc:5e:c9:b6:92:
b0:2f:9b:dd:cc:a6:c2:19:9d:8b:df:04:64:3a:15:
66:a0:90:d1:09:44:53:c4:cc:ae:b0:55:ea:fc:9d:
63:b7:4c:95:1a:53:ab:82:f6:37:c2:fd:72:43:3d:
95:1e:3c:27:44:b2:fe:ac:77:46:e4:f8:8e:75:aa:
0a:cd:46:9b:92:b4:09:9d:91:0f:39:bd:91:78:a4:
ab:87:e6:db:7c:1f:92:6b:f8:81:8f:8a:cb:7d:d8:
cc:ed:bf:b2:a9:28:ee:a1:a4:e9:03:d2:b5:dd:52:
1a:72:87:06:f3:49:91:b0:1e:6c:d7:d3:e6:93:6b:
e4:8b:da:88:30:2e:35:a2:87:b0:ec:7c:9c:c6:a7:
50:07:13:13:73:a2:fc:5d:e6:bf:80:65:21:8e:27:
84:e0:c2:50:9f:22:0d:1f:d9:5e:bd:1c:8d:29:72:
e0:7c:88:9b:95:2d:ba:10:ea:c4:0c:cc:81:1b:50:
43:57:fc:95:3b:4c:60:69:2b:ca:03:2a:4e:5c:c2:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CA:19:B7:05:97:95:E2:51:6F:A5:D5:05:A0:4A:71:50:6B:66:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5e:83:53:41:e0:49:da:b7:1e:7a:62:29:ba:ae:df:2c:5e:
0a:f6:36:38:d2:cb:f8:c7:ab:e9:f2:95:ff:b3:36:bf:6a:b3:
cc:0c:6a:4e:17:a2:01:0b:ed:7b:12:9f:59:a4:eb:10:de:1e:
57:f8:cc:a6:a9:89:2b:f5:ad:cb:ce:8b:5e:6d:32:39:eb:bc:
ad:9e:9d:db:bc:13:07:44:bc:0f:37:e1:60:91:01:34:04:87:
26:c8:ff:2e:e9:3d:49:ff:58:e3:90:5f:49:96:79:47:d2:aa:
7b:b4:75:84:d8:b0:9d:76:a5:03:64:b3:eb:35:cf:54:5a:23:
05:d8:43:ef:82:40:a1:2b:e3:51:0b:94:b3:95:d1:7a:ab:85:
03:24:7e:8a:d4:6f:8a:20:92:74:4f:bd:06:b0:be:1d:6f:37:
02:eb:6f:0d:46:88:21:2a:5a:65:ff:88:ea:92:4b:f5:6d:2b:
7e:4f:d1:81:1d:f7:4a:1b:18:84:7e:89:ad:37:3a:10:c9:e4:
b5:30:79:04:e3:a6:3a:88:47:ed:be:04:81:be:88:ed:63:9c:
df:e7:3c:df:0e:e4:fe:cb:5f:22:91:a2:5d:f5:7a:7a:d2:ec:
f8:4a:77:c2:bf:dc:81:6d:ad:24:8b:bc:d7:ed:93:22:02:3e:
5d:f2:ae:a8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUE3xTbIA2D85dPClA0HcEMSdDpFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA4MjMxNTIzMDdaFw0yNzA4MjIxNTI4MDdaMDMxMTAvBgNV
BAMTKDFBQ0ExOUI3MDU5Nzk1RTI1MTZGQTVENTA1QTA0QTcxNTA2QjY2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwhAmrkG770zEYMbkKkUSFHr8
oO1Z2bkNErLv6e8fer2E3NLiTiiULzd3t3egQtDXrSOZtin8Xsm2krAvm93MpsIZ
nYvfBGQ6FWagkNEJRFPEzK6wVer8nWO3TJUaU6uC9jfC/XJDPZUePCdEsv6sd0bk
+I51qgrNRpuStAmdkQ85vZF4pKuH5tt8H5Jr+IGPist92Mztv7KpKO6hpOkD0rXd
UhpyhwbzSZGwHmzX0+aTa+SL2ogwLjWih7DsfJzGp1AHExNzovxd5r+AZSGOJ4Tg
wlCfIg0f2V69HI0pcuB8iJuVLboQ6sQMzIEbUENX/JU7TGBpK8oDKk5cwmg1AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUGsoZtwWXleJRb6XVBaBKcVBrZqAwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzMDJlMzIzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1Q
HDANBgkqhkiG9w0BAQsFAAOCAQEAml6DU0HgSdq3HnpiKbqu3yxeCvY2ONLL+Mer
6fKV/7M2v2qzzAxqTheiAQvtexKfWaTrEN4eV/jMpqmJK/Wty86LXm0yOeu8rZ6d
27wTB0S8DzfhYJEBNASHJsj/Luk9Sf9Y45BfSZZ5R9Kqe7R1hNiwnXalA2Sz6zXP
VFojBdhD74JAoSvjUQuUs5XRequFAyR+itRviiCSdE+9BrC+HW83AutvDUaIISpa
Zf+I6pJL9W0rfk/RgR33ShsYhH6JrTc6EMnktTB5BOOmOohH7b4Egb6I7WOc3+c8
3w7k/stfIpGiXfV6etLs+Ep3wr/cgW2tJIu81+2TIgI+XfKuqA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:09:55 2026 by rpki-client