Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32312e302f32342d3234203d3e20323136323533.roa
File: 34352e38322e32312e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: hlOM860KQnJFmzu4ipivXFTqiK/r2n+3+KVpDjpP06o=
Subject key identifier: 36:2F:F7:94:0E:AE:77:DB:98:AE:29:6B:67:F8:5A:C6:02:36:CB:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 79AD5FF84A037A2867917B84B3C9651379BE29F6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32312e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:30 +0000
ROA not before: Fri 16 Oct 2026 18:44:30 +0000
ROA not after: Fri 15 Oct 2027 18:49:30 +0000
asID: 216253
IP address blocks: 45.82.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 20:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ad:5f:f8:4a:03:7a:28:67:91:7b:84:b3:c9:65:13:79:be:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:30 2026 GMT
Not After : Oct 15 18:49:30 2027 GMT
Subject: CN=362FF7940EAE77DB98AE296B67F85AC60236CBFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:a0:40:bc:55:ed:6e:65:23:6d:fa:89:31:
83:e9:91:82:08:e6:bf:c5:79:ef:cc:76:8e:cb:62:
49:03:46:ca:12:11:62:25:00:36:1e:25:a4:9e:1f:
02:3e:23:14:9d:7c:59:92:18:49:3f:a0:8f:3e:81:
19:0d:56:8a:aa:bf:93:7a:8c:eb:6d:7c:8c:e7:9f:
eb:a2:e7:c9:a7:d0:b2:cd:39:25:8d:89:27:46:cb:
77:47:8e:33:c0:49:c9:02:9c:74:20:8e:65:09:ec:
35:78:41:30:35:5d:c7:4b:70:a5:9d:04:4e:05:5f:
64:bf:48:7c:d1:a4:c8:9c:09:8d:d4:0d:bb:7f:0c:
36:22:43:e5:e8:8a:95:26:cd:31:c3:6b:6b:48:6c:
92:cc:f1:b8:26:60:fc:4a:2e:42:20:64:6b:6f:af:
92:fb:d8:bc:5b:f6:4e:68:b9:ea:4f:87:43:f0:6b:
2b:86:90:16:d9:13:1c:e7:3e:53:b8:d1:fe:d4:96:
45:be:77:67:fe:8a:53:8f:48:3f:8b:55:78:c5:a4:
6e:54:3e:fd:5d:4c:95:e5:aa:0a:03:5b:8e:24:ed:
2f:fe:dd:00:bb:65:45:04:e3:4b:60:d2:f1:73:c4:
c3:3b:25:a0:b4:16:ba:e2:45:c3:d8:29:90:61:4f:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:F7:94:0E:AE:77:DB:98:AE:29:6B:67:F8:5A:C6:02:36:CB:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32312e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.21.0/24
Signature Algorithm: sha256WithRSAEncryption
39:83:9b:66:7f:9f:02:5f:8e:cc:07:58:3b:9b:80:6a:9e:3a:
08:ca:c1:e6:5d:d7:f9:34:40:50:3f:9f:4e:d8:73:41:da:9a:
8f:5f:f7:65:f4:8d:c5:26:18:be:45:16:5c:d4:25:e3:79:6b:
90:a1:57:17:d9:2d:70:a3:47:31:95:e6:93:d0:e8:46:5b:57:
60:24:93:23:94:3c:f3:1c:43:70:17:2e:65:7d:21:ce:3d:3e:
b6:7e:65:89:b1:89:52:13:56:0b:ae:d5:41:bc:65:fc:16:58:
eb:d7:e6:71:5e:ef:65:e0:78:53:a7:f1:52:b3:08:9b:1a:4a:
28:16:f0:b7:94:0b:cf:27:81:e4:a6:3e:ab:83:a0:24:c4:f1:
90:07:ad:99:e3:0c:93:93:08:9d:73:0e:75:ce:97:31:07:aa:
49:2a:31:b7:a3:62:0d:0a:ca:6b:d4:3f:9d:17:62:45:a6:86:
a4:2f:a4:25:b7:ef:ef:f6:e1:9d:2e:dd:55:e7:62:62:4f:7d:
8a:10:fd:ab:60:51:a5:b4:31:55:6d:e7:8e:02:73:41:0c:70:
88:f4:3d:c8:ef:8f:8f:91:43:22:a1:ce:5a:29:22:fd:b7:7f:
62:dd:26:0b:32:b1:2f:c8:a7:b5:4b:3a:5a:87:f6:23:5e:f0:
72:d9:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:06:21 2026 by rpki-client