Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32392e302f32342d3332203d3e20313431393935.roa
File: 34352e38302e32392e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: i1VHg5XM8FGRtvbCVb+234hK9+xF6LGnjjeD9ZSbnss=
Subject key identifier: 5C:A0:19:85:91:5D:97:7E:DC:AA:F1:A1:FE:C7:AD:46:C5:40:17:94
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 41A12FA1D5D16DF3364158CAE800328B7E5F11DA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32392e302f32342d3332203d3e20313431393935.roa
Signing time: Wed 12 Aug 2026 13:27:52 +0000
ROA not before: Wed 12 Aug 2026 13:22:52 +0000
ROA not after: Wed 11 Aug 2027 13:27:52 +0000
asID: 141995
IP address blocks: 45.80.29.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a1:2f:a1:d5:d1:6d:f3:36:41:58:ca:e8:00:32:8b:7e:5f:11:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 13:22:52 2026 GMT
Not After : Aug 11 13:27:52 2027 GMT
Subject: CN=5CA01985915D977EDCAAF1A1FEC7AD46C5401794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:f1:39:f6:c8:64:ae:1d:22:8d:2e:77:62:
12:00:bf:f5:a9:f2:df:ed:ae:01:24:1b:4a:12:cb:
a2:4a:b6:8b:dc:b2:54:93:e8:c0:6a:c1:84:85:4d:
0f:7e:e2:56:95:35:94:ce:b4:42:98:20:03:99:30:
25:84:d6:76:1c:e6:4c:ad:26:53:d5:d0:26:ca:2c:
ea:e1:22:5f:6f:33:79:7d:8d:16:8b:ef:4d:14:e3:
4b:38:3a:f8:2c:60:43:d0:96:49:c3:c6:7d:a5:97:
2b:e5:9c:09:b3:a0:cb:3c:53:55:70:c9:9a:e8:09:
08:04:6e:1f:3a:3d:d3:66:a0:4d:9c:ea:ff:bb:44:
40:76:8b:e2:82:6b:ef:c9:db:9b:60:95:65:22:6a:
eb:89:9a:5d:dc:54:1a:40:39:0a:07:95:4d:5b:d4:
69:7b:51:c4:24:bb:51:b8:c0:33:de:17:e4:af:83:
83:dc:85:03:e8:72:b9:48:c1:55:e7:60:59:8b:da:
d2:d5:9a:a5:5e:4b:b3:f7:32:b2:a5:ca:2b:9d:cf:
e6:45:04:48:2c:34:e9:a7:19:f5:f3:43:13:04:39:
ff:a0:4a:59:1d:64:7b:73:5e:4b:e1:55:fc:f1:c0:
66:38:2c:26:d0:74:17:48:29:f4:7d:09:95:26:f8:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:19:85:91:5D:97:7E:DC:AA:F1:A1:FE:C7:AD:46:C5:40:17:94
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e32392e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f3:0f:c4:b2:c9:b0:ea:7b:3f:8d:7c:0d:16:82:db:9a:8d:
63:85:9b:34:39:fd:22:6e:8b:42:ab:67:94:a2:aa:10:be:48:
07:83:ed:3a:3b:0d:d1:0a:c0:ef:99:74:b9:9f:27:7c:ea:f9:
fb:9d:7a:1c:6a:1d:cc:3b:3b:35:9c:e6:58:1c:55:18:43:a0:
9a:9e:ee:a0:f4:1a:5e:1a:f7:45:92:c3:db:fd:3d:1f:d8:1b:
73:24:21:83:9c:e1:d0:f9:25:cc:6e:3b:07:d0:8b:25:53:7f:
8f:73:47:f3:52:f9:08:1d:d8:87:17:6a:2c:bc:89:9f:74:72:
71:60:1a:fe:83:92:14:f6:4b:0c:62:00:db:b0:6d:de:4c:8c:
cc:a9:56:96:42:4c:8c:6f:38:35:f9:4e:fb:eb:2d:09:8e:bb:
10:d0:4d:48:a7:9e:5d:ab:a3:c8:f2:df:14:a3:21:da:05:c2:
d8:ae:cd:92:e1:62:78:f8:09:50:5c:f5:02:c4:3a:69:57:4f:
ba:de:2a:ea:6e:7b:89:c7:9f:69:ea:bc:80:e8:4d:fc:2e:57:
65:3f:a3:2c:91:7b:8b:51:ca:d2:5b:d1:39:ca:92:d1:b0:9f:
17:cd:d7:92:3d:3b:87:69:a1:97:ce:88:2e:cd:19:80:35:89:
bb:ca:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:33:25 2026 by rpki-client