Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
File: 34352e38302e33312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: o2qBOIC+XNTrK7GHGpLU71aMrGCBsUB5sn/2wTtn2rU=
Subject key identifier: 4C:16:A2:46:4F:38:A1:D9:3B:8F:A4:2C:12:80:37:C4:82:25:DE:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52858D1456DB91E8883FBB0AF75D98E5C239F4E5
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
Signing time: Wed 10 Sep 2025 12:47:33 +0000
ROA not before: Wed 10 Sep 2025 12:42:33 +0000
ROA not after: Wed 09 Sep 2026 12:47:33 +0000
asID: 51167
IP address blocks: 45.80.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:85:8d:14:56:db:91:e8:88:3f:bb:0a:f7:5d:98:e5:c2:39:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 10 12:42:33 2025 GMT
Not After : Sep 9 12:47:33 2026 GMT
Subject: CN=4C16A2464F38A1D93B8FA42C128037C48225DE34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:6c:56:8f:c1:06:af:0b:bd:51:6d:36:d5:
77:98:ab:5b:05:3d:92:3b:54:c1:bb:83:9b:d4:be:
05:f8:41:bd:66:49:11:d1:7b:04:f0:f0:60:7c:4f:
03:f3:5b:62:41:09:a0:a1:a7:d0:5a:d4:76:33:95:
f1:8c:50:07:b1:51:48:b5:82:45:f7:e6:26:b9:93:
07:14:c5:3b:9f:60:b6:e7:6e:10:9e:ac:23:c2:24:
a4:7e:d5:4a:e8:31:90:de:89:43:a4:74:42:d6:1e:
a9:55:d8:50:6c:a8:71:1d:5a:7d:2b:e0:f4:18:90:
b4:74:e7:ba:f8:88:c6:5e:61:eb:af:52:44:a5:72:
56:20:b0:d4:0c:85:80:3c:70:99:af:c0:d1:88:07:
70:44:1a:c1:d1:64:d0:6f:ca:05:9b:9b:a1:9a:cc:
63:19:85:d2:60:01:d0:93:ad:56:32:56:af:86:59:
01:9a:f9:a8:09:f7:4b:19:c0:8b:c9:a1:ad:c0:0c:
60:ab:60:71:43:e2:fc:c7:fe:a6:34:0d:61:02:c2:
60:46:42:c8:f6:02:79:8a:da:bb:ee:42:bd:cd:01:
0b:6a:cb:64:87:7b:06:31:38:3d:63:09:24:17:c0:
ea:77:41:3e:d0:39:30:d9:f9:45:c2:5e:e9:ec:d4:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:16:A2:46:4F:38:A1:D9:3B:8F:A4:2C:12:80:37:C4:82:25:DE:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
20:87:4b:19:3f:8b:f7:4f:e5:a8:2f:f2:fe:d3:57:61:e0:fb:
e7:62:ee:c8:8e:76:02:e8:a5:f6:ba:2f:08:95:03:14:a2:01:
f2:89:aa:b1:c9:5a:1b:65:6f:05:8a:a3:11:55:57:d5:4e:6a:
5a:bc:67:66:64:d5:ad:b6:ea:57:c9:21:25:0d:c6:4c:33:33:
ce:00:41:7a:9e:03:57:05:4a:af:a6:b6:b8:ad:8b:37:44:43:
99:13:bf:45:63:74:02:5b:cd:f2:5d:43:b1:e5:1b:f4:85:cf:
14:68:c0:a9:c9:2c:da:a3:86:f4:b8:02:75:e1:e3:37:a4:59:
80:2a:d6:0d:78:f0:a3:9d:8c:dc:b0:f7:a1:7a:86:6d:cf:7c:
e5:28:fc:79:cb:58:f3:d4:19:c5:23:81:28:20:ee:82:f4:12:
53:a4:bb:63:21:0a:d6:ea:5b:93:9a:89:a8:1c:6c:78:ff:6d:
d2:24:1e:54:b5:da:30:55:d7:9d:5a:31:1f:6e:0f:fc:cc:cb:
3a:a0:88:b2:42:e1:a3:bb:07:9d:6b:a2:44:bb:fe:ee:f4:a7:
a1:1a:dc:3c:4d:70:7f:6c:fa:b8:0e:dd:25:e1:16:0b:d7:24:
53:14:e7:01:34:48:5f:fe:c7:81:3d:9f:f3:0a:96:ad:96:0e:
ab:cb:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:29:00 2025 by rpki-client