Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32322e302f32342d3234203d3e20323136323533.roa
File: 34352e38322e32322e302f32342d3234203d3e20323136323533.roa (raw, json)
Hash identifier: ACx5iTJE4h6OzjfAyBigNQZbP4s4kIdh9Z1GusQn28M=
Subject key identifier: B6:02:D5:B3:CE:3B:59:CB:22:EB:D9:9C:8D:20:92:3D:D7:01:28:E2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3165F62321D4DEF21B84449F796C7DED15DDE744
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32322e302f32342d3234203d3e20323136323533.roa
Signing time: Fri 16 Oct 2026 18:49:31 +0000
ROA not before: Fri 16 Oct 2026 18:44:31 +0000
ROA not after: Fri 15 Oct 2027 18:49:31 +0000
asID: 216253
IP address blocks: 45.82.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:65:f6:23:21:d4:de:f2:1b:84:44:9f:79:6c:7d:ed:15:dd:e7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 16 18:44:31 2026 GMT
Not After : Oct 15 18:49:31 2027 GMT
Subject: CN=B602D5B3CE3B59CB22EBD99C8D20923DD70128E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:76:81:29:6b:4f:c5:8f:fe:c6:f0:f4:bc:
93:83:5b:ff:27:e5:77:9e:68:63:ac:37:1b:dc:e0:
48:00:2b:5e:cb:ed:96:5c:c6:10:94:af:ea:65:76:
dd:a4:88:12:ac:c6:bc:61:fb:c4:9e:8c:f2:13:bf:
fe:81:76:80:80:d4:dd:d9:54:6f:a8:39:5b:c3:e1:
b2:71:1c:d6:0a:30:45:ad:5a:ed:85:b1:01:59:00:
25:87:cd:17:d0:3b:d6:8e:0d:41:32:c7:3f:ba:e4:
36:ec:2f:77:85:3f:22:65:da:b3:fc:f7:26:5b:02:
1b:bb:ad:0b:b5:77:9c:52:5b:c8:48:70:84:e0:dd:
87:ca:56:69:b9:ae:3d:c1:45:7f:f2:aa:89:69:8d:
a8:f4:09:34:e6:a4:a8:5a:29:82:c4:f9:18:e9:4d:
2e:b6:24:25:a0:0f:04:96:0a:58:92:ce:0c:cc:11:
86:c9:ff:bf:08:a3:60:a6:e1:b7:2f:ca:78:60:86:
e2:16:ad:de:85:a0:7d:18:b0:6d:26:83:3b:b7:44:
4b:25:bb:2f:25:92:d5:af:5f:14:dd:ea:ae:93:05:
4e:6f:79:c7:0d:c6:c1:0b:e4:78:33:95:89:23:83:
e9:e3:79:74:3a:d2:20:16:80:77:c1:f8:cb:d1:40:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:02:D5:B3:CE:3B:59:CB:22:EB:D9:9C:8D:20:92:3D:D7:01:28:E2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38322e32322e302f32342d3234203d3e20323136323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5e:b8:37:ab:82:33:c6:67:83:35:4e:83:ea:2d:35:7c:4b:
c0:d2:9c:7c:e8:e0:a2:06:9a:40:f2:b0:4e:77:da:3b:bf:e6:
ac:6c:05:d9:8d:84:55:3b:9a:85:0a:e0:b2:e9:d8:d8:8e:6b:
5a:3a:cb:a5:46:f7:31:c2:3a:59:2a:ee:d1:7b:87:73:d6:c3:
bb:72:b5:69:aa:d5:7b:6b:73:43:f4:65:6b:de:76:46:32:74:
ce:5c:15:0f:5d:ad:9a:98:e9:55:58:cf:77:55:9e:b4:d7:e7:
0f:8a:9c:f6:10:7a:c8:ce:a1:3a:bd:2f:3c:74:08:a6:8a:24:
44:3e:4c:d8:54:15:5d:fd:3a:ce:f3:ff:bc:a7:85:0e:8f:12:
72:ac:9e:b8:69:76:9e:4a:8d:e0:9b:66:ac:27:a3:33:cb:3b:
80:56:32:2d:4d:c0:c4:a1:fd:62:9a:47:f4:ce:b2:dc:9c:5b:
80:3e:61:04:b9:a4:31:2f:5e:d6:bb:52:e8:01:52:35:f9:8a:
d3:a9:d4:8c:9e:a1:43:72:58:8e:4c:16:44:fc:8c:b6:ba:c0:
4b:3a:94:bf:34:48:fe:c2:b0:2e:bc:bf:c0:dd:49:b9:80:48:
e5:71:ba:6e:c8:5d:5d:56:7c:e1:8d:82:06:16:27:a0:55:43:
cd:51:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:24 2026 by rpki-client