Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: pdr6m37IHsNkvktpN3EnfciV/QIK3CucZ8hMAhlpWFY=
Subject key identifier: E6:B1:DA:D4:5B:7B:3A:85:86:94:3C:27:E5:A3:B0:81:1A:F7:15:12
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06B37A790D10044E39F08E61618AB3EE9DBC608E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 01 Jul 2026 15:25:59 +0000
ROA not before: Wed 01 Jul 2026 15:20:59 +0000
ROA not after: Wed 30 Jun 2027 15:25:59 +0000
asID: 141039
IP address blocks: 45.88.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b3:7a:79:0d:10:04:4e:39:f0:8e:61:61:8a:b3:ee:9d:bc:60:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 1 15:20:59 2026 GMT
Not After : Jun 30 15:25:59 2027 GMT
Subject: CN=E6B1DAD45B7B3A8586943C27E5A3B0811AF71512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:97:9a:4c:62:c9:0e:be:93:cb:7a:e1:c0:
f3:6a:b6:42:ce:56:52:6d:ac:bb:45:57:f4:9a:85:
ad:b7:e9:f3:46:51:10:2a:60:2b:ce:ae:7b:85:c6:
cf:2a:a2:90:77:08:52:36:39:ee:1b:51:4d:35:7f:
75:b0:14:e8:40:5b:86:28:6f:20:0e:76:ff:13:e5:
41:55:5f:69:4e:49:7f:96:a0:2d:23:c9:e5:2d:e8:
af:27:df:8c:59:a3:dc:f0:c3:65:9c:b4:76:ce:bf:
e5:66:e9:5a:b4:86:1b:86:a2:84:9c:b8:ce:67:b9:
d1:70:03:ec:86:fa:66:f4:a8:b6:58:0e:ca:82:4b:
55:46:5a:56:a3:27:31:2a:b6:b1:a6:38:ee:c4:23:
ac:8b:0f:d7:20:3a:f2:82:a0:16:7d:6e:f1:61:d5:
a9:56:b3:82:7e:86:2a:dd:25:9d:eb:09:11:fb:6a:
78:06:d9:26:c5:b9:1d:14:80:a8:17:89:d7:44:22:
2b:0f:d4:e1:07:86:c7:44:60:e9:cc:d2:c8:81:49:
9a:b0:45:6c:aa:81:fe:3d:b6:de:29:ed:fa:f4:18:
43:92:cb:3d:63:44:a6:bb:db:b2:71:e3:a3:e7:3a:
7e:11:2b:61:44:f6:be:2b:c7:e1:5b:df:01:cf:98:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:DA:D4:5B:7B:3A:85:86:94:3C:27:E5:A3:B0:81:1A:F7:15:12
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:17:20:ce:f9:a4:44:85:66:78:73:8f:40:83:0b:25:89:68:
79:af:cf:82:80:c4:2c:50:7f:53:69:98:0a:3f:72:72:64:6a:
42:b3:18:89:a8:d9:04:1b:7a:27:bb:cb:f4:f5:61:a4:43:29:
ed:cc:f0:b5:8e:fe:24:f5:2b:37:d9:88:f9:91:0b:e8:b2:56:
30:8d:3a:f6:88:9d:5a:ae:b2:8c:70:67:dd:98:46:8d:99:b2:
46:f5:de:e8:4f:c0:81:4f:b2:20:90:2b:76:be:25:4d:8e:2b:
6f:bc:c6:1d:5b:16:e2:68:37:ad:47:65:4a:0a:aa:34:a0:2a:
d6:5b:74:07:a7:3f:08:f7:2c:db:e8:31:dd:1b:bf:a4:3b:db:
3a:bd:5b:80:63:35:8e:b8:f9:ae:44:ae:77:28:75:3f:2e:59:
df:7b:45:57:41:c3:41:4e:da:17:65:3d:ae:67:7f:1a:32:84:
26:e5:a4:2a:66:78:47:2d:10:5f:9c:55:d8:e1:51:6b:5e:97:
28:fe:85:9e:a2:47:08:ab:d4:89:4e:e7:55:66:5d:81:f6:e2:
bd:b8:c6:2c:b8:98:15:77:0c:31:1a:f3:40:b3:c7:75:6d:07:
e9:69:7a:11:ca:1f:65:af:db:6a:30:0f:dd:44:04:89:d2:00:
ab:e3:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:55:41 2026 by rpki-client