Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
File: 34352e38352e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Pkma8ecq86SfcoW6LaS8RdC5vBspS1CFiZBZuIj6YlI=
Subject key identifier: 71:A0:CD:41:E5:4E:6D:8F:0A:80:AC:1E:52:F1:0F:D1:20:54:2B:A9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6579FCC9F01FB9181D11E675B4A316F410DB2563
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
Signing time: Wed 01 Jul 2026 15:26:00 +0000
ROA not before: Wed 01 Jul 2026 15:21:00 +0000
ROA not after: Wed 30 Jun 2027 15:26:00 +0000
asID: 51167
IP address blocks: 45.85.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:79:fc:c9:f0:1f:b9:18:1d:11:e6:75:b4:a3:16:f4:10:db:25:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:21:00 2026 GMT
Not After : Jun 30 15:26:00 2027 GMT
Subject: CN=71A0CD41E54E6D8F0A80AC1E52F10FD120542BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:86:78:67:73:a5:f6:d2:a6:78:2a:8d:f2:
ea:ff:52:d3:dc:7f:c1:98:c1:f3:7b:99:6d:1a:be:
43:15:94:b6:e0:a7:73:d7:3e:14:60:73:39:15:83:
e5:32:e2:e4:a8:5c:ae:b5:d3:4e:99:dc:4a:9b:7a:
a4:08:cb:64:66:bf:26:a9:5a:d7:d0:0b:2e:f5:72:
f1:16:60:1f:7f:a5:e7:b3:6f:ff:29:6e:ee:86:77:
60:41:6b:ca:da:bc:d6:85:47:b6:89:40:3b:56:6e:
bb:cf:ad:fe:82:72:d7:e7:a8:1b:dc:8b:b6:32:d8:
9d:e6:8c:58:2d:9e:cc:8f:f6:d1:de:84:76:fd:a4:
5f:4e:4d:73:10:44:18:e5:07:4d:44:8f:67:5b:ed:
3d:22:88:d5:17:7e:7e:38:c7:6a:62:3f:da:d6:1e:
f8:94:96:f5:33:57:6e:90:6b:c5:02:f9:08:99:ab:
43:40:fd:d2:6d:3b:80:be:7f:aa:f0:32:cb:b0:bb:
d3:a9:65:12:12:be:b7:4d:9c:37:fb:68:70:38:e2:
42:c5:13:df:3f:b1:cb:23:9f:11:38:24:ce:59:99:
08:c7:20:55:52:83:56:f4:a3:65:83:9e:ee:b3:05:
1d:a0:4e:7c:a2:67:84:6c:1a:d1:f4:d1:16:5e:7d:
6a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:CD:41:E5:4E:6D:8F:0A:80:AC:1E:52:F1:0F:D1:20:54:2B:A9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:6a:37:16:db:d1:9e:7a:27:22:28:ed:3e:e5:d5:9e:96:99:
6e:87:c7:80:c6:40:36:91:7c:30:48:7b:f2:1c:f7:96:f6:83:
12:41:1f:90:3f:e8:ae:0a:4b:c0:7e:1b:1c:65:88:7a:0d:6a:
eb:5b:6d:5b:c9:93:64:6e:46:55:6c:45:b2:2e:98:76:71:da:
b4:c9:34:ce:8e:31:13:48:dc:b5:86:74:55:c5:20:2a:09:7e:
59:c2:ba:a5:8c:94:4b:e0:0c:d4:21:c6:c9:d3:75:a3:16:d6:
d2:cc:de:ab:d1:03:89:d5:18:4f:e3:88:97:83:76:b2:23:8d:
66:44:fc:94:d4:a7:c2:f6:ee:89:92:a2:ea:01:23:3d:6b:46:
b4:e6:e5:d4:e0:4e:47:67:8f:07:08:5b:d1:c5:a4:6b:b2:fe:
0c:0a:a2:7b:8f:0b:d0:7e:75:2d:5a:fe:fc:16:aa:13:83:81:
07:10:f3:4e:c4:95:8d:0d:3c:13:2c:ad:31:dd:f2:ea:0a:6c:
36:c9:6e:0c:58:6d:27:5b:37:22:c8:1e:a4:a1:cb:34:99:50:
85:41:49:dd:77:6f:8a:01:8b:07:ac:38:8c:dd:20:63:34:87:
ba:5f:8c:66:f7:28:56:f1:02:83:2c:73:d4:1a:4f:1e:6f:f5:
eb:46:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:56:10 2026 by rpki-client