Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32302e302f32342d3234203d3e20323136323533.roa
File: 34352e38322e32302e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: 9idgYKEyQEeA6jwCEdI4hSVlvQtmWThhIFd7NfQP+VA=
Subject key identifier: EA:B4:18:0E:B3:5E:33:FF:E4:EC:60:AD:62:D0:BA:F8:38:15:C4:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7FBCA20ACC34A30B4CD85005C34F5B02F7EED93F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32302e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:29 +0000
ROA not before: Fri 16 Oct 2026 18:44:29 +0000
ROA not after: Fri 15 Oct 2027 18:49:29 +0000
asID: 216253
IP address blocks: 45.82.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bc:a2:0a:cc:34:a3:0b:4c:d8:50:05:c3:4f:5b:02:f7:ee:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:29 2026 GMT
Not After : Oct 15 18:49:29 2027 GMT
Subject: CN=EAB4180EB35E33FFE4EC60AD62D0BAF83815C4A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:28:b6:24:87:fc:4f:7a:0d:83:45:91:97:
67:69:5a:bd:b5:42:15:ec:55:9a:e8:ba:2e:e9:63:
8f:fd:8e:99:d5:60:10:a8:f5:5b:9e:a5:53:c3:2c:
f1:ee:dd:5e:31:cd:4e:1e:fc:bd:b6:74:62:52:46:
e8:48:08:fc:0b:60:a5:8c:86:8a:b4:73:63:4a:4c:
c5:8d:0d:61:34:b5:75:04:e7:b2:f8:45:34:d1:3c:
74:b6:ca:66:27:09:53:ec:78:bd:04:eb:a2:e1:a8:
58:1d:a9:7d:66:d1:ca:c5:bb:d3:88:85:7a:de:10:
f9:35:1e:73:b8:da:da:7f:61:c9:c2:a3:d0:a0:de:
44:13:e6:c2:e9:14:88:1b:02:44:5f:ff:fe:63:ce:
98:d6:44:1d:83:9d:5f:92:eb:72:31:83:ed:90:91:
c6:84:26:df:09:c8:7d:e9:fb:d2:5f:44:a5:7a:64:
90:5b:b9:22:d0:04:8b:59:eb:4e:b0:7a:7c:8d:63:
65:2c:64:b3:4f:16:23:18:91:c2:9a:0a:da:9d:69:
ab:fc:6e:c4:20:1e:df:e0:7a:4b:ef:81:f2:6a:fc:
85:f3:08:95:b9:d3:8a:8b:ec:f2:c6:9d:fe:13:3c:
49:c8:c1:60:6c:34:7a:2e:18:d1:b4:9c:40:b3:45:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:18:0E:B3:5E:33:FF:E4:EC:60:AD:62:D0:BA:F8:38:15:C4:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32302e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.20.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3d:38:b5:b5:19:64:ed:7b:ea:5e:ca:b3:b4:33:d8:b0:18:
86:84:77:73:7f:1f:64:e9:ad:61:2f:60:61:66:20:43:32:c4:
d0:24:9f:5f:d5:bc:b8:e9:14:24:0d:91:ab:1e:12:32:90:0d:
90:1e:1c:f9:db:56:f3:c5:8d:10:96:6f:dc:03:0d:25:68:a9:
91:3f:cb:45:5c:c9:32:5a:10:4f:28:1c:a8:1d:13:48:d4:8b:
55:90:85:cb:6d:da:e8:57:26:14:c5:2a:bd:67:c6:6e:65:92:
18:f3:aa:1a:95:9c:a8:b9:35:5f:b3:90:d3:22:cf:c8:bb:04:
18:76:51:58:c6:ce:7d:7e:44:ad:ac:1f:04:14:ff:2a:2d:cc:
c6:a8:ab:df:52:14:0b:e1:2a:ef:bd:a0:0d:2f:eb:d7:88:55:
84:ad:a3:43:10:8d:b7:44:7c:ba:0a:a5:66:d5:58:f7:ce:58:
76:47:ac:a0:28:9f:d1:76:b4:a8:0c:cb:1a:44:39:d3:cd:48:
98:d3:d3:b9:e2:53:4a:96:7e:a6:7b:32:99:6a:c2:8a:af:85:
a3:34:e4:0d:ea:62:8a:4c:c0:f0:35:4b:31:68:f5:52:43:92:
23:0d:4a:e0:1c:87:51:d1:24:77:04:00:ea:b3:9c:f6:a1:ee:
6f:c2:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 18:31:41 2026 by rpki-client