Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33302e302f32342d3332203d3e203531313637.roa
File: 34352e38302e33302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: pnsK5KQ68reOZ7EHIYHPx9EYZoufWEYWLOi4oTzJBfA=
Subject key identifier: B5:F6:05:C2:49:BD:CD:74:59:84:D8:7E:AB:3D:0C:BB:78:B9:5B:56
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7CE05DF2FB29E5B1C658C8281943E61AD566512D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33302e302f32342d3332203d3e203531313637.roa
Signing time: Wed 12 Aug 2026 13:27:51 +0000
ROA not before: Wed 12 Aug 2026 13:22:51 +0000
ROA not after: Wed 11 Aug 2027 13:27:51 +0000
asID: 51167
IP address blocks: 45.80.30.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e0:5d:f2:fb:29:e5:b1:c6:58:c8:28:19:43:e6:1a:d5:66:51:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 12 13:22:51 2026 GMT
Not After : Aug 11 13:27:51 2027 GMT
Subject: CN=B5F605C249BDCD745984D87EAB3D0CBB78B95B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:0b:63:11:1b:8a:57:4d:d2:51:d1:e9:53:
f2:76:eb:cb:85:21:77:4f:f9:c5:aa:29:79:65:2b:
00:90:71:eb:49:84:8e:02:79:d2:59:a5:f8:c9:3e:
c0:ff:29:d7:15:53:a4:5d:e5:d0:b1:e3:ea:b8:2f:
fb:3a:ee:05:e9:41:45:4f:af:db:e1:7d:b0:c1:f2:
ed:63:61:72:3a:60:6f:40:33:d9:99:2f:f2:5f:7a:
79:c6:eb:ca:70:dd:9b:a1:38:bf:80:d3:1a:0a:ec:
a4:ef:11:31:5b:3c:cd:0e:38:0d:1c:fe:10:ed:f7:
c5:ce:19:91:85:99:4d:76:c2:c0:15:14:cb:eb:00:
bb:84:67:16:3e:b6:5d:71:72:f1:6a:27:ea:4e:3e:
8a:6e:64:88:99:57:d3:f1:7f:66:07:3e:00:b2:62:
37:ca:f0:fd:da:9c:0b:8a:70:6b:74:9a:c0:ef:2a:
e5:bd:8b:ec:4f:7f:7b:cb:a2:e9:49:47:c6:e3:39:
dd:ff:7b:3e:e0:31:72:23:1b:2c:03:8a:b6:09:25:
62:15:0d:ab:11:e3:f2:20:a0:23:a5:1b:cc:4a:de:
30:f2:af:2f:e1:36:c9:dd:66:25:72:af:dc:e5:6e:
8e:73:ba:7b:f1:2c:e9:16:ce:6c:01:d8:74:9d:41:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F6:05:C2:49:BD:CD:74:59:84:D8:7E:AB:3D:0C:BB:78:B9:5B:56
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:22:82:ab:c0:07:1e:9b:bb:75:64:df:ac:23:8a:f8:35:ae:
bb:2e:11:c0:fe:3d:64:f1:7b:94:34:e1:1f:bc:1b:93:0e:a8:
a4:20:b4:47:9f:7a:b2:2e:e0:50:62:8b:26:71:44:51:e4:67:
fb:e5:35:35:15:5a:44:59:b5:e0:7e:d0:a0:25:d2:33:8e:fe:
6f:87:87:34:4b:a0:6a:98:18:51:a5:88:b1:8c:d6:32:8a:74:
0b:fb:4d:57:d6:2c:1e:ee:eb:82:f6:26:01:3c:db:60:09:fa:
78:ab:75:94:9f:0c:28:10:68:79:2f:8a:59:27:c8:36:b1:b4:
2f:dc:f8:ba:9b:b5:a5:e0:45:a7:08:90:e6:3d:88:69:2b:de:
9f:ae:30:1e:fd:a7:f3:ef:a1:5b:29:6a:b8:ea:6b:c1:7c:11:
35:41:d2:42:dd:ab:e2:32:f2:fd:0f:0b:00:4a:3b:94:62:9b:
fd:01:e7:e9:3b:af:6f:1e:32:ff:1c:7a:bf:e6:08:ec:40:dc:
b1:a3:22:66:43:94:fd:35:e8:db:00:b6:19:78:42:35:46:da:
99:d6:39:19:bf:5a:e8:5d:8f:26:5d:00:41:c6:cc:c6:ec:68:
f4:6b:b2:79:d0:4b:79:9f:a9:cf:e0:66:32:5c:c1:94:0f:07:
cb:46:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:11:35 2026 by rpki-client